Laravel AuditorWho did what, what changed, and what they were allowed to do.

A request-level audit trail for Laravel 12 & 13 — production-safe, privacy-aware and tamper-evident.

One entry per request, job and command

User, route, status, duration, abilities checked, records read, mails and notifications — plus a diff of every model it changed.

A correlation ID links a request to the jobs it dispatches, so you can see the whole story in one timeline.

Passwords, tokens, hidden attributes and encrypted casts are redacted. Mail bodies are never stored. Recording never breaks your app.

An HMAC-SHA256 hash chain lets auditor:verify detect modified or removed rows — and it survives pruning.

Dark mode, command palette, keyboard shortcuts, quick peek, saved views, live mode and CSV export. Runs under a strict CSP.

Database, log or custom storage, queued persistence, Auditor::fake() for tests, and plugins for Filament and Pulse.