Posts tagged ‘security’

AI Agents in Your DevOps Loop: What to Automate, What to Gate, and How to Stay Safe

AI agents can triage logs, draft migrations, and propose fixes. They can also delete the wrong directory with total confidence. A field guide to the autonomy ladder, scoped tokens, command allowlists, and prompt injection defenses for your DevOps loop.

Sameh Elhawary · Sep 23, 2026 · 19 min read

SOC 2 for a Laravel SaaS: What Infrastructure Evidence You'll Actually Need

SOC 2 explained for Laravel engineers: which infrastructure evidence auditors actually request, how a VPS-based stack produces it, Type I vs Type II strategy, and realistic timelines. Type II means proving controls worked over a 3-12 month window, not just claiming they exist.

Sameh Elhawary · Sep 05, 2026 · 22 min read

Passkey Authentication in Laravel 13: Setup, HTTPS Requirements, and a Sane Rollout Plan

Laravel 13 ships first-party passkey support. We cover how WebAuthn actually works, why the relying party ID is a one-way door, why staging needs real HTTPS, how to test with virtual authenticators, and a phased rollout plan that won't lock your users out.

Sameh Elhawary · Aug 19, 2026 · 24 min read

Building an MCP Server in Laravel: Let AI Agents Talk to Your App Safely

Build an MCP server in Laravel with the official laravel/mcp package: tools, resources, prompts, Sanctum authentication, per-tool policies, rate limiting, audit logging, Pest tests, and production deployment. A security-first walkthrough from the Deploynix team.

Sameh Elhawary · Aug 09, 2026 · 22 min read

Your Deploy Pipeline Is an Attack Surface

In May 2026, 700+ compromised Laravel-Lang package versions shipped a credential stealer through Composer. Here's how to harden your Laravel deploy pipeline: --no-scripts, allow-plugins, lockfile discipline, scoped deploy keys, and a full incident checklist.

Sameh Elhawary · Jul 16, 2026 · 17 min read

The Complete Guide to SSL Certificates on Deploynix: Let's Encrypt, Wildcards & Vanity Domains

Everything you need to know about SSL certificates on Deploynix — auto-provisioning, Let's Encrypt, wildcard certificates, DNS validation, and vanity domains.

Sameh Elhawary · Mar 30, 2026 · 11 min read