Getting Started

Sqreen protects your application's data and users from the riskiest threats and enable you to respond, your way.

The Sqreen PHP agent collects signals for the enabled security plugins and apply the configured protection and logging actions.

This guide will help you to get started.


The agent's architecture is made of two parts: a daemon and a PHP extension. Both are required for Sqreen to secure your PHP web applications.

The PHP extension is performing the PHP code instrumentation. It is a compiled extension (like the MySQL or ODBC extensions) using the PHP engine's API. It inspects the PHP internal state to collect signals and apply the configured plugins' actions.

The daemon provides a long-running background process, enabling report batch upload, operate plugins and overall performs asynchronous activities to minimise the performance impact. PHP being designed around transactions, this architecture is the most efficient one. Once a request has been handled, the PHP runtime is destroyed and there is no further chance for the agent to perform any action.

Installation guides

The simplest way to install the Sqreen PHP agent is to use the one line installation.

If your PHP installation is custom, or if you have specific requirements, please follow the Manual installation procedure.