Platform Integrity & Dependency Audits
System Monitoring & Security Attestation
At doPHP.dev, we prioritize backend performance, security, and developer transparency. To ensure our server environment remains hardened and up-to-date, we run Statamic Sentinel, an automated monitoring and security auditing system.
Sentinel performs continuous runtime checks on our modern PHP stack, ensuring that our application dependencies contain zero known vulnerabilities.
1. What We Audit
Our automated audits scan the active codebase and container environment to track version history and integrity across several layers:
PHP Runtime Lifecycle: Verifies active support and security updates status for the running PHP version (currently running on PHP 8.5).
Statamic Core: Keeps track of available CMS core updates and minor releases.
Composer Lockfile Audits: Cross-references lockfiles with the OSV (Open Source Vulnerability) database to isolate packages with known vulnerabilities.
NPM Lockfile Audits: Monitors our frontend build system dependencies for security alerts.
2. Cloud Environment Persistence
Because doPHP.dev runs on Laravel Cloud using Laravel Octane, our local filesystem containers are ephemeral and short-lived. To keep audit files stable, we sync Sentinel’s state storage (`audit.json`, `history.json`, `schedule.json`) dynamically to our Cloudflare R2 object storage bucket. This provides persistent auditing history across auto-scaling containers and updates.
3. Technical Support
If you have questions about our platform monitoring, need clarification on audit logs, or would like to report a security concern, please submit a request through our Contact Us form or reach out to us at we@dophp.dev.
