Laravel Starter Kits (with Spark)
Laravel's official first-party scaffolding (React, Vue, Svelte or Livewire kits providing Fortify-based auth and user settings), with billing sold separately as the Spark package.
Official starter kits are free and MIT-licensed; Spark is a separate paid licence sold per deployed project or as an unlimited tier, with a fixed window of included updates.
Open source
Appears in 1 guide
Where it ranks
Guides that include Laravel Starter Kits (with Spark).
Security headers
What Laravel Starter Kits (with Spark)'s website sends to your browser.
Scanned 2026-08-25. Grade headers F, scoring 30 out of 100.
−
No Content-Security-Policy, so no defence in depth against cross-site scripting
−
No Strict-Transport-Security, so browsers may still attempt plain HTTP
+
X-Content-Type-Options: nosniff is set
+
X-Frame-Options is set
+
Referrer-Policy is set
−
No Permissions-Policy, so powerful browser features are not restricted
−
No Cross-Origin-Opener-Policy
−
No Cross-Origin-Resource-Policy
−
Server version or framework disclosed via Server/X-Powered-By
This is one narrow, automated check of the HTTP response headers on the vendor's own website. It says nothing about how the product itself is built, how it stores your data, or whether it has ever been audited. A good grade here is a small signal that somebody was paying attention.