LaraBeacon
LaraBeacon checks Laravel 12 and 13 applications for performance, security, and reliability risks before you deploy: in your terminal, as a CI release gate, or alongside your AI coding agent.
Coming from Enlightn? LaraBeacon maintains its open-source checks
$ php artisan larabeacon
LaraBeacon
Please wait while LaraBeacon scans your code base...
┌──────────────────────────────────────────┐
│ Running Security Checks │
└──────────────────────────────────────────┘
Check 1/69: Debug mode is disabled. Passed
Check 2/69: Dependencies are secure. Passed
Check 3/69: Queue timeout is aligned. FailedLaraBeacon performs 136 documented checks and points to the code or configuration behind each finding.
Find hidden database work, collection operations, and N+1 patterns before they become production bottlenecks.
// Loads every model before counting
$orders = Order::all();
$total = $orders->count();
Use Order::query()->count() instead.Review backend dependencies against known advisories and flag versions that require a security update.
Security / Vulnerable dependency
laravel/framework 12.x
Advisory CVE reference
Update the affected constraint.Catch queue, cache, session, mail, storage, build, and production settings that can fail only under real traffic.
queue.retry_after 90 seconds
worker.timeout 120 seconds
A job may be delivered twice.
Set timeout below retry_after.Run LaraBeacon locally, make it a release gate in CI, and optionally keep report history in LaraBeacon Cloud.
$ php artisan larabeacon
Performance checks
CDN configuration ........ Passed
Asset compression ........ Passed
Collection call .......... Failed
Documentation:
larabeacon.com/checks/collection-callInstall the package, run one Artisan command, and get a clear result for every applicable check.
Queue timeout alignment failed on app/Console/Kernel.php
retry_after: 120
worker timeout: 150
The worker may still run when the job is retried.Use deterministic exit codes and machine-readable reports in the CI platform your team already uses.
LaraBeacon Cloud keeps optional report history, highlights new and resolved findings, and offers Claude-powered AI work plans to help your team choose what to fix next.
Explore LaraBeacon CloudAsk Claude to turn a completed Cloud report into up to five prioritized actions. See why each action matters, what to change, and how to verify it—with links back to the scanner findings.
A fresh work plan for your team every day. Generate one new plan per day across all projects; every saved plan stays readable at any time. AI work plans are enabled by default and can be disabled in Team settings. Only a requested plan shares fixed check descriptions and technical status values with Anthropic; source code and diagnostic messages are excluded.
An optional Cloud feature included with Pro project licences. Available on completed reports with an active project licence, subject to service limits. AI suggestions require human review.
Explore AI work plansCore stays open source. A one-time Pro project licence unlocks all 136 checks and includes LaraBeacon Cloud for report history and AI work plans. Introductory prices are available during launch.
For solo developers with yearly revenue below $50k.
No limits on team members or project revenue and size.
For critical projects requiring a longer support horizon.
Prices are in USD and are one-time payments. Team additions are $69 per project; Enterprise additions are $39 per project. * Cloud features are included with every Pro project licence; the Pro checks also work without Cloud.
Use all 69 Core checks locally and in CI without an account.
I'm looking for the first five external Laravel projects willing to try LaraBeacon and share 20 minutes of honest feedback about installation, useful findings, and false positives. In return, you'll receive a free Pro licence for one project per participant.
Email your Laravel version and a short project description. Private projects are welcome; no source-code access is needed. I'll confirm your place and arrange Pro access personally.
Yes. LaraBeacon Core is the LGPL-licensed open-source package and remains useful without Pro or Cloud.
Core includes 69 public checks. Pro adds 67 independently implemented checks for deeper runtime, infrastructure, and security analysis.
No. Core runs locally. Cloud submission is explicit, and code snippets and exception stack traces are disabled by default.
Yes. The --ci option provides a deterministic exit code and can produce JSON for later processing.
Core is a maintained fork of Enlightn's LGPL-licensed public package. Pro is a clean-room implementation based on public documentation.
LaraBeacon 3.x supports Laravel 12 and Laravel 13 on their supported PHP versions.