If you want to be sure that PHP project is secure, but don't have the funds available to pay for sophisticated systems and comprehensive checks, you should try phpSec.
phpSec is an open source library designed to help developers improve the security of their web applications.
The list of security features provided by phpSec includes automatic data encryption, XSS filtering, CSRF protection, password hashing support, command input protection, and secure login. The library also includes a random data generation option and integration with Google Authenticator, Yubikey, and Authy.
The application is developer-friendly and PSR-0 compliant. The library can be installed with Composer by adding phpSec to the composer.json file located in the project directory.
You can download phpSec here.
