Get started
Porro docs
Set up a connector, use site health, activity and blocking in your panel, and connect sites to Porro.
A connector is a small, open-source package for your site: Composer for Laravel, Filament, Statamic and Craft, npm for JavaScript. The PHP connectors do two jobs.
- In your control panel, free and without an account, they check the site's health, spot suspicious activity and block it. Everything they see stays on the site.
- Connected to Porro, they also send a signed, read-only report on a schedule, so Porro can watch the site alongside every other site you look after. Porro never connects in and never sends commands.
The JavaScript connector only reports, once per production build.
Pick your connector
| Your site | Package | In the panel |
|---|---|---|
| Laravel | porro/laravel-connector |
A /porro page, like Horizon |
| Filament | porro/filament-connector |
Site Health and Blocking pages, and a dashboard widget |
| Statamic | porro/statamic-connector |
A Porro section in the control panel, and a dashboard widget |
| Craft CMS | porro/craft-connector |
A Porro section in the control panel, and a dashboard widget |
| JavaScript | @porro/js-connector |
Nothing: it reports at build time |
Filament and Statamic build on the Laravel connector, so most of what's here applies to all three.
What's in the panel
- Site health: security advisories in your Composer packages, PHP and framework versions running out of support, updates waiting, and the basics: the scheduler or cron, migrations, failed jobs, debug mode.
- Suspicious activity: probes for
/.envand/.git, failed logins, 404 bursts and form floods, ranked worst first, with each IP's details. - Blocking: block an IP or range in the app, at Cloudflare's edge or in nginx. Some addresses are always protected.
Connect to Porro
When you're ready for uptime from several regions, SSL and domain expiry, the server's updates and every site in one place, connect the site. On Forge, Ploi or Laravel Cloud, Porro installs the connector with a pull request; anywhere else, it takes one command and a site key.