EoHoneypotBundle
A honeypot trap involves creating a form with an extra field that is hidden to human visitors but readable by robots. The robot fills out the invisible field and submits the form, leaving you to simply ignore their spammy submission or blacklist their IP. It’s a very simple concept that can be implemented in a few minutes and it just works – add them to your contact and submission forms to help reduce spam. Prerequisites: This version of the bundle requires Symfony 2.1+ Installation: Step 1: Download EoHoneypotBundle using Composer Add EoHoneypotBundle to your project by running the command: $ composer require eo/honeypot-bundle Composer will install the bundle to your project's vendor/eo directory. Step 2: Enable the bundle If you use Symfony Flex - skip this step. Otherwise, enable the bundle in bundles.php: <?php // config/bundles.php <?php return [ // ... Eo\HoneypotBundle\EoHoneypotBundle::class => ['all' => true], ]; Step 3 (optional): Configure bundle to use database To save honeypot catched requests into the database, you have to enable it in your configuration file: All parameters are optional # config/packages/eo
FEATURES
ALTERNATIVES
DerScanner is a comprehensive application security testing platform that combines SAST, DAST, MAST, SCA, and Binary Analysis capabilities with support for on-premises deployment and CI/CD integration.
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
WPRecon is a tool for recognizing vulnerabilities and blackbox information for WordPress.
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets in git repos.
Embeddable Yara library for Java with support for loading rules and scanning data.
A DAST solution that performs automated security testing of APIs and web applications within development workflows and CI/CD pipelines.
A tool for brute-forcing GET and POST parameters to discover potential vulnerabilities in web applications.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.