Queopius Sentinel¶
HTTP Security & HTTPS Hardening for Laravel.
Queopius Sentinel helps teams apply production-grade HTTP security with:
- security headers middleware (HSTS, CSP, Referrer-Policy, and more)
- HTTPS enforcement middleware
- optional dashboard for audit and operations
- CSP reports endpoint + storage
- audit/scan/prune Artisan commands
- publishable views for customization
Why use Sentinel¶
- Safe rollout path: start with report-only CSP, then enforce.
- Works in monorepo local development and reusable package mode.
- Clear DX: install command, config presets, dashboard visibility.
- Built for Laravel 11, 12, and 13 workflows.
Read this first¶
Core commands¶
php artisan sentinel:install --with-views
php artisan sentinel:audit
php artisan sentinel:scan
php artisan sentinel:prune-reports
Recommended production rollout¶
- Enable preset
web_compatible. - Keep CSP in
report_onlymode. - Review dashboard and CSP reports.
- Tighten directives and remove unsafe sources.
- Enable enforce CSP and strict HTTPS/HSTS policy.