LaraBeacon
LaraBeacon scans your Laravel application and gives you actionable recommendations for improving performance, security, and reliability.
$ php artisan larabeacon
LaraBeacon
Please wait while LaraBeacon scans your code base...
┌──────────────────────────────────────────┐
│ Running Security Checks │
└──────────────────────────────────────────┘
Check 1/67: Debug mode is disabled. Passed
Check 2/67: Dependencies are secure. Passed
Check 3/67: Queue timeout is aligned. FailedLaraBeacon performs 134 documented checks and points to the code or configuration behind each finding.
Find hidden database work, collection operations, and N+1 patterns before they become production bottlenecks.
// Loads every model before counting
$orders = Order::all();
$total = $orders->count();
Use Order::query()->count() instead.Review backend dependencies against known advisories and flag versions that require a security update.
Security / Vulnerable dependency
laravel/framework 12.x
Advisory CVE reference
Update the affected constraint.Catch queue, cache, session, mail, storage, build, and production settings that can fail only under real traffic.
queue.retry_after 90 seconds
worker.timeout 120 seconds
A job may be delivered twice.
Set timeout below retry_after.Run LaraBeacon locally, make it a release gate in CI, and optionally keep report history in LaraBeacon Cloud.
$ php artisan larabeacon
Performance checks
CDN configuration ........ Passed
Asset compression ........ Passed
Collection call .......... Failed
Documentation:
larabeacon.com/checks/collection-callInstall the package, run one Artisan command, and get a clear result for every applicable check.
Queue timeout alignment failed on app/Console/Kernel.php
retry_after: 120
worker timeout: 150
The worker may still run when the job is retried.Use deterministic exit codes and machine-readable reports in the CI platform your team already uses.
LaraBeacon Cloud keeps optional report history, highlights new and resolved findings, and offers Claude-powered AI work plans to help your team choose what to fix next.
Explore LaraBeacon CloudAsk Claude to turn a completed Cloud report into up to five prioritized actions. See why each action matters, what to change, and how to verify it—with links back to the scanner findings.
One new AI work plan per team per day. Saved plans stay readable without using another allowance. AI work plans are enabled by default and can be disabled in Team settings. Only a requested plan shares fixed check descriptions and technical status values with Anthropic; source code and diagnostic messages are excluded.
An optional Pro Cloud feature during invitation-only early access. Available on completed reports with an active project licence, subject to service limits. AI suggestions require human review.
Explore AI work plansStart with the open-source package, or choose a Pro project licence for all 134 checks. Introductory prices are available during launch.
For solo developers with yearly revenue below $50k.
No limits on team members or project revenue and size.
For critical projects requiring a longer support horizon.
Prices are in USD and are one-time payments. Team additions are $69 per project; Enterprise additions are $39 per project. * Cloud access remains invitation-only during early access.
Use all 67 Core checks locally and in CI without an account.
I'm looking for the first five external Laravel projects willing to try LaraBeacon and share 20 minutes of honest feedback about installation, useful findings, and false positives. In return, you'll receive a free Pro licence for one project per participant.
Email your Laravel version and a short project description. Private projects are welcome; no source-code access is needed. I'll confirm your place and arrange Pro access personally.
Yes. LaraBeacon Core is the LGPL-licensed open-source package and remains useful without Pro or Cloud.
Core includes 67 public checks. Pro adds 67 independently implemented checks for deeper runtime, infrastructure, and security analysis.
No. Core runs locally. Cloud submission is explicit, and code snippets and exception stack traces are disabled by default.
Yes. The --ci option provides a deterministic exit code and can produce JSON for later processing.
Core is a maintained fork of Enlightn's LGPL-licensed public package. Pro is a clean-room implementation based on public documentation.
LaraBeacon 3.x supports Laravel 12 and Laravel 13 on their supported PHP versions.