A few things I’ve built along the way.

A mix of open source Laravel packages and side projects. The OSS ones are on GitHub — contributions welcome.

  • EloquentEncryption

    Encrypts Eloquent model attributes at rest using RSA 4096-bit or X25519 asymmetric keys, independent of Laravel’s app:key — so you can rotate your application key without re-encrypting every row in the database.

    github.com

  • Eloquent AES

    AES-256-CBC encryption for Eloquent attributes, using a dedicated encryption key separate from app:key. The symmetric sibling of EloquentEncryption for when asymmetric crypto is overkill.

    github.com

  • Wire Shield

    A Laravel middleware package that inspects Livewire update requests for deserialization attacks and payload tampering. Built in response to CVE-2025-54068 and related gadget-chain exploits — ships in monitor mode by default, with block mode one config flag away.

    github.com

  • udeploy

    A Laravel-powered deployment and server-provisioning platform I’ve been slowly building. The encryption packages above started life as building blocks for keeping udeploy’s sensitive data safe at rest.

    udeploy.dev

  • Retrospace

    A multi-tenant SaaS for running agile retrospectives with real-time collaboration and database-enforced anonymity — reflections are tied to participants, not users, so attribution is impossible at the schema level, not just unlikely. Still in development.

    retrospace.co.uk