Framework: Laravel

Suspicious login detection for Laravel

Protect Laravel logins with instant risk scoring.

Start with 100 free checks Read the docs

Add LoginLlama to Laravel in one call

Call LoginLlama from your Laravel login handler before you create the session. Send the email, IP, and user agent, then allow, challenge, or block based on the returned risk score.

Laravel login check

<?php
// Install: composer require joshghent/loginllama:^2.0
// app/Http/Controllers/Auth/AuthenticatedSessionController.php

namespace App\Http\Controllers\Auth;

use App\Http\Requests\Auth\LoginRequest;
use LoginLlama\LoginLlama;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Log;

class AuthenticatedSessionController extends Controller
{
    public function store(LoginRequest $request)
    {
        try {
            $loginllama = new LoginLlama(
                config('services.loginllama.api_key')
            );

            // Check with LoginLlama BEFORE authenticating
            $result = $loginllama->check($request->email, [
                'authenticationOutcome' => 'pending'
            ]);

            if ($result['risk_score'] > 5) {
                return back()->withErrors([
                    'email' => 'Suspicious login detected'
                ])->onlyInput('email');
            }
        } catch (\Exception $e) {
            Log::error('LoginLlama: ' . $e->getMessage());
        }

        $request->authenticate();
        $request->session()->regenerate();

        // Report successful login
        $loginllama->reportSuccess(Auth::user()->id);

        return redirect()->intended(route('dashboard'));
    }
}

Why teams choose LoginLlama for Laravel

Score every login in under 100ms

Detect VPNs, proxies, and TOR exit nodes

Explain why a login is risky with clear risk reasons

Catch errors from the check and logins go ahead during an outage

How it works

Step 1

Install or connect LoginLlama

Choose the SDK or integration point that fits your auth flow and add your API key.

Step 2

Check risk at login time

Send the email, IP, and device context before completing authentication.

Step 3

Act on the risk score

Allow, challenge, or block the login based on risk score and reasons.

Signals we analyze

New device or browser fingerprints

Impossible travel and velocity checks

Bot-like login bursts and credential stuffing

Geo anomalies and risky IP reputation

Works well with your Laravel stack

Laravel BreezeFortifySanctum

Laravel login security FAQ

How do I add suspicious login detection to Laravel?

Make a single POST request to https://loginllama.app/api/v1/login/check from your Laravel login handler before you create the session. Send the user's email, IP address, and user agent, and branch on the returned risk score.

Will LoginLlama slow down Laravel logins?

No. Risk scoring returns in under 100ms. If LoginLlama is unreachable the check throws an error, so catch it and let the Laravel login go ahead. An outage then never blocks a real user.

What does LoginLlama detect on Laravel logins?

New devices and browser fingerprints, impossible travel and login velocity, credential-stuffing bursts, and traffic from VPNs, proxies, TOR exit nodes, and high-risk IPs — each returned with a clear, human-readable reason code.

Does LoginLlama work with Laravel Breeze, Fortify, Sanctum?

Yes. LoginLlama runs at the login step itself, so it works alongside Laravel Breeze, Fortify, Sanctum and the rest of your Laravel stack without replacing your existing authentication provider.

Other integrations

LoginLlama works with the same single API call across every stack.

Node.js →Python →PHP →Next.js →Django →Flask →Express →FastAPI →WordPress →Auth0 →Supabase Auth →Better Auth →Clerk →Auth.js →Lucia →

How login fraud detection works →Detect suspicious logins →Account takeover detection →LoginLlama vs Castle, Sift & Arkose →View pricing →

Laravel login protection

Protect Laravel users from suspicious logins

Add LoginLlama in minutes and block risky logins in real time.

Start with 100 free checks