Stephen Rees-Carter :laravel:✓

Mastodon @valorin@phpc.social

⚔ Compare ☆ Watch Own this channel?

🔄 Data last refreshed 7 hours ago

🤝

Make a deal with Stephen Rees-Carter :laravel:

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

1.3K

Account age

4 yrs

🧰 Free analysis for Stephen Rees-Carter :laravel:

🕵️ Fake follower check 📊 Engagement rate 💰 What they charge

Known for

Received some great feedback from a client recently, and it really highlights why I specialise in PHP & Laravel as a pentester:
"The fact that you understand both security *and* the frameworks I’m building with is such a big advantage over other firms that I’ve worked with." 🥰

2 views Received some great feedback from a client recently, and it really highlights why I specialise in PHP & Laravel as a pentester: "The fact that you understand both security *and* the frameworks I’m building with is such a big advantage over other firms that I’ve worked with." 🥰

📊 Post engagement

Avg engagement / post

0.4%

Engagement vs followers

Apr 2022

On Mastodon since

🔥 Top post: Your AI agent hallucinates a package name, confidently installs · 23 likes + reposts

📊 Activity & format

Posting cadence

1.6 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly text

Recent: 11 text · 0 image · 1 video.

Follower / following

4.1×

Follows 316 back. A more reciprocal / networked account.

Recent posts

View on Mastodon ↗

🔥 Top post Your AI agent hallucinates a package name, confidently installs it, and keeps working - except an attacker registered that exact name, packed with malware. Welcome to slopsquatting. https://securinglaravel.com/security-tip-have-you-heard-of-slopsquatting/ #Laravel ★ 23

▶ Received some great feedback from a client recently, and it really highlights why I specialise in PHP & Laravel as a pentester: "The fact that you understand both security *and* the frameworks I’m building with is such a big advantage over… ★ 2 What do you get when you combine an API, SameSite=None, and a Session cookie? https://securinglaravel.com/in-depth-three-reasonable-decisions-one-critical-vulnerability/ #Laravel Working on a fun In Depth article for Securing Laravel at the moment. 😈 The tagline is: What do you get when you combine an API, SameSite=None, and a Session cookie? Any guesses? ★ 1 Recently finished an audit for one of my oldest clients, this was #5! 🕵️ By far the most rewarding part of my job is working with the same clients each year, seeing their apps grow, and their commitment to security strengthen. It's not jus… ★ 3 Updating packages used to be a no-brainer, but now you need to be careful. Updates may be malicious. But not updating leaves vulns unpatched. So what do you do??? 🤷 https://securinglaravel.com/security-tip-safely-updating-dependencies/ #La… ★ 6 Things Claude says... > Is that concerning? For local files it's not a vuln — it's theater > Is it TOFU? No — weaker than TOFU Ouch. Nobody cares about security until they suddenly care about nothing else... A breach, a near miss, an awkward client question, and it's suddenly top priority! Get ahead. I do Laravel Security Audits & Pentests, ideally on a quiet day, not t… ★ 3 We trust version numbers to mean a specific, fixed release - but they're really just labels pointing at a commit, and an attacker can quietly move them. Let's dig into tag hijacking, the attack behind tj-actions and Laravel-Lang. 😈 https:/… ★ 1 If you've been shipping AI-written Laravel code lately (and let's be honest, you probably have), it's worth getting a human to actually read it! Reach out for an Audit/Pentest for the parts of your codebase that vibed a little too hard. 🕵️… ★ 3 I've got some capacity opening up over the next few months, so If you've been meaning to get a security audit / pentest done on your Laravel app - now is the time! 🕵️ 👉 DM or https://valorinsecurity.com ★ 1 With Supply Chain Attacks, you often don't realise you've been compromised until it's already too late. And yet Canary Tokens - exactly the early warning you want - are hardly mentioned. They let you know the moment someone's sniffing arou… ★ 9

🐘 Community & instance

Home server

phpc.social

Their home server on the fediverse — the instance a creator picks signals the community they belong to.

✅ Link-verified

Verified link

Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.

On Mastodon since

Apr 2022

An established account with real history on the platform.

💡 Facts

🗓️Joined Mastodon in 2022 — 4 years ago.

👁️Averages 5 views per post.

📤Posts about 1.6× per week.

🛡️ Audience credibility

75/100

Good Credibility score

92%

Real Real audience

Low Fake-follower risk

High Data confidence

Est. 92% real, active audience · Low fake-follower risk.
Engagement (~0.4% of followers engage each post) is around typical for Mastodon.
Verified account.
Established account (4+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Friendly Hacker, Speaker, and PHP & Laravel Security Specialist.🕵️ I hack stuff on stage for fun. 😈 I used to be found at: https://infosec.exchange/@valorin #searchable

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Ian 16%

The Sleight Doctor 🃏🍉 15%

⚓💾 Tueddelmors 💾⚓ 13%

Fkngarbage 13%

Michelle Nijhuis 11%

@orga 11%

More like this

Find more →

Mastodon

Ian

@shojiwax@mastodon.online

1.3K Followers

Mastodon

The Sleight Doctor 🃏🍉

@apostateenglishman@mastodon.world

1.3K Followers

Mastodon

Michelle Nijhuis

@nijhuism@journa.host

@reeeen@norden.social

1.3K Followers

Mastodon

Fkngarbage

@fkngarbage@mastodon.social

1.3K Followers

Stephen Rees-Carter :laravel:✓

Make a deal with Stephen Rees-Carter :laravel:

Known for

📊 Post engagement

📊 Activity & format

Recent posts

🐘 Community & instance

💡 Facts

🛡️ Audience credibility

About

🔀 Audience overlap

More like this

✉ Message Stephen Rees-Carter :laravel:

🎤 Event / appearance with Stephen Rees-Carter :laravel: