README

Security observability SDK for Laravel applications. Sends security events to the SOCWarden ingestor.

Installation

composer require soc-warden/laravel-sdk

Configuration

Publish the config file:

php artisan vendor:publish --tag=socwarden-config

Add to your .env:

SOCWARDEN_API_KEY=sk_live_your_key_here

Usage

Track events manually

use SOCWarden\Facades\SOCWarden;

SOCWarden::track('auth.login.success', [
    'actor_id' => $user->id,
    'actor_email' => $user->email,
]);

Middleware

Register the middleware to automatically capture request context:

// bootstrap/app.php (Laravel 11+)
->withMiddleware(function (Middleware $middleware) {
    $middleware->append(\SOCWarden\Middleware\CaptureContext::class);
})

Automatic Auth Events

By default, the SDK listens to Laravel auth events (Login, Failed, Logout, Registered, PasswordReset) and tracks them automatically. Disable with:

SOCWARDEN_LISTEN_AUTH=false

Environment Variables