#Security

Receive third-party webhooks safely in Laravel: verify signatures, skip CSRF correctly, guarantee idempotency, and process the payload on a queue.

Named rate limiters and the RateLimiter facade let you throttle routes and any arbitrary action with per-user, per-plan, or dynamic limits.

Wire up TOTP two-factor authentication in a Laravel app using Laravel Fortify, from installation through enabling, confirming, and challenging logins.

Laravel Sanctum handles both SPA cookie authentication and API token auth in one lightweight package. This tutorial covers both approaches, token abilities, expiration, and mobile auth.

Nuno Maduro just shipped Moat, a free Rust-powered CLI that scans your GitHub account, org, or repo and gives your security posture a hard look. Here is what it checks and why you should care.