Free Tools · Open source

LVCScan: Laravel Vulnerability Scanner

Check Laravel applications for known vulnerabilities.

Free and open source.

Overview

An open-source command-line scanner for Laravel applications. It confirms a target runs Laravel, discovers its exposed resources, and checks it against a catalogue of known Laravel CVEs ranked by severity.

Features

Key features

01

Laravel detection

Confirms a target runs Laravel before any checks run.

02

Resource discovery

Maps the resources the application exposes.

03

Known-CVE catalogue

Checks against a curated list of Laravel CVEs, ranked by criticality.

04

Version-aware results

Skips CVEs that do not apply to the detected version, cutting false positives.

Products

More from Cyphlon

See all products →

Book a call

Book a 30-minute call

Pick a time that suits you. We'll talk through what you're building and where your security stands, then suggest where to start.

Cyphlon

1:1 Consultation Call

30 min Google Meet

An introductory call with our engineers about any engagement: a pentest, continuous testing, managed AppSec, security engineering, agentic AI security or a fractional CISO. We'll ask about your stack, your deadlines and what your customers or auditors expect, and tell you plainly if we're not the right fit.