Application Security capabilities support

The following application security capabilities are supported in the PHP library, for the specified tracer version:

The minimum tracer version to get all supported ASM capabilities for PHP is 0.98.0.

Supported deployment types

Language and framework compatibility

Application Security capabililties for PHP support the following SAPI’s:

Supported processor architectures

Application Security capabililties for PHP support the following architectures:

The Datadog PHP library supports PHP version 7.0 and above on the following architectures:

• Linux (GNU) x86-64 and arm64
• Alpine Linux (musl) x86-64 and arm64

The library supports the use of all PHP frameworks, and also the use of no framework.

Web framework compatibility

• Attacker source HTTP request details
• Tags for the HTTP request (status code, method, etc)
• Distributed Tracing to see attack flows through your applications

Application Security Capability Notes

• Software Composition Analysis is not supported
• Code Security is not supported

The following frameworks aren’t directly instrumented by Application Security, but indirectly supported through runtime instrumentation.

Data store compatibility

Datastore tracing provides:

• SQL attack detection
• query info (for example, a sanitized query string)
• error and stacktrace capturing

Application Security Capability Notes

• Software Composition Analysis is not supported
• Code Security is not supported
• Threat Protection also works at the HTTP request (input) layer, and so works for all databases by default, even those not listed in the table below.

User Authentication Frameworks compatibility

Integrations to User Authentication Frameworks provide:

• User login events, including the user IDs
• Account Takeover detection monitoring for user login events