Application Penetration Testing

Manual testing of your web apps, mobile apps and APIs, with a proof of concept and fix for every finding.

Secure Code Review

Line-by-line review of your source code for exploitable flaws, with fixes your developers can apply.

Supply Chain Security

Find and control risky dependencies, packages and third-party integrations, from install to build.

DevSecOps

Security controls built into your pipelines, from pull request to deployment.

Managed AppSec & Detection

Continuous detection for code, dependencies, pipelines and APIs, triaged by our engineers.

Secure SDLC Implementation

Security requirements, threat modelling and checks built into each stage of how you ship.

Smart Contract Auditing

Manual and tool-assisted review of smart contracts for exploitable logic and access-control flaws.

DApp Pentesting

Attack testing of decentralised apps: contracts, wallets, front ends and the APIs between them.

All products →

Chainsaw

Block malicious packages before they download.

DSO

Scheduled code scans, AI pentests, and fixes you approve.

Acksess

Replace the VPN with access that checks every device.

SHD Investigation Platform

AI-enabled data fusion and investigation for signals intelligence.

Research Blog Company Contact Us

Home
Products
LVCScan

Free Tools · Open source

LVCScan

Check Laravel applications for known vulnerabilities.

View on GitHub →

Free and open source.

Overview

An open-source command-line scanner for Laravel applications. It confirms a target runs Laravel, discovers its exposed resources, and checks it against a catalogue of known Laravel CVEs ranked by severity.

Features

Key features

01

Laravel detection

Confirms a target runs Laravel before any checks run.

02

Resource discovery

Maps the resources the application exposes.

03

Known-CVE catalogue

Checks against a curated list of Laravel CVEs, ranked by criticality.

04

Version-aware results

Skips CVEs that do not apply to the detected version, cutting false positives.

Products

More from Cyphlon

See all products →

X-Security

One API security policy, compiled to every WAF and gateway.

OpsMaxx

Every server you look after, in one window.

Open core Self sign-up

Chainsaw

Block malicious packages before they download.

Book a call

Book a 30-minute call

Pick a time that suits you. We'll talk through what you're building and where your security stands, then suggest where to start.

Cyphlon

1:1 Consultation Call

30 min

Google Meet

An introductory call with our engineers about any engagement: a pentest, continuous testing, managed AppSec, security engineering, agentic AI security or a fractional CISO. We'll ask about your stack, your deadlines and what your customers or auditors expect, and tell you plainly if we're not the right fit.

Cyphlon

About Us

Cyphlon is a security engineering company. We implement DevSecOps, application security, Zero Trust and supply-chain security, build the products we deploy, and publish our research.

[email protected]

Company

Home About Cyphlon Solutions Services Products Research Trust Blog Contact Us

Services

DevSecOps Application Penetration Testing Supply Chain Security Zero Trust Architecture LLM Security

Products

Chainsaw DSO Acksess SHD Investigation Platform X-Security OpsMaxx LVCScan

Research

Backbone or Backbone-Architecture? A Controlled Study of LLM Agents on Web Penetration-Testing CTFs

© 2026 Cyphlon LLC · Dubai, United Arab Emirates · Founded 2016

Privacy Policy Terms of Use