Skip to content
Shahid Malla

Freelance Laravel developer

Hire Laravel Developer: Apps, Filament Panels, Upgrades and AI

I am Shahid Malla, a freelance Laravel developer with 13+ years and 900+ projects behind me. SaaS founders, businesses and agencies hire me to build Laravel applications, Filament admin panels and APIs, to move old Laravel apps to a supported version, and to add AI features to apps they already run.

Free scoping call of about 30 minutes · written quote within one business day · two weeks of support after delivery

By Shahid Malla, AI agent and AI chat developer, full-stack developer · Updated

What do I build as a freelance Laravel developer?

I build the Laravel applications a business runs on: SaaS products, CRMs and internal tools, booking platforms, customer portals, APIs and the admin panels behind them. One developer handles the data model, code, tests and deployment.

ProjectWhat it usually includesLaravel example you can look at
SaaS product or CRMLead pipeline, proposals, online payments, supplier ledger, role-based accessJK Tour CRM, a travel CRM I built for ElySpace, where I am CTO (an ElySpace product, not a client project)
Admin panelResources, filters, roles and settings for staffThis website, which runs on Laravel with a Filament admin panel
Booking websiteDates and guests, add-ons, pay now or reserve, customer accountsKohwan: ski packages, lessons, lift passes and rentals in Gulmarg, Kashmir
Hotel or business websiteRooms, services and add-on packagesHôtel Spa Le Suisse, a boutique spa hotel in Quebec, Canada
Publishing or workflow platformSubmissions, editor tools, public article pagesSRJ Journal: article and issue management, DOI details, manuscript submissions

APIs for mobile apps and partners are versioned from the first route, with token authentication such as Laravel Sanctum.

When should you hire a Laravel developer directly instead of an agency?

Hire one experienced developer directly when the work fits in one person's head: one product, one admin panel, one upgrade or one set of AI features. You talk to the person writing the code, with no account manager in between.

An agency or a staffing marketplace fits better when you need several developers at once, a designer and a project manager under one contract, or someone on call around the clock. I am one developer, and I say so before you sign.

Whoever you hire, ask three things: which live Laravel work you can open, which Laravel and PHP versions they would choose and why, and who reads the code before it reaches production.

Can you upgrade an old Laravel app to Laravel 13?

Yes. I move an app one major version at a time, following Laravel's upgrade guide for each step, on a staging copy, with the tests run after every step. Skipping versions saves nothing, because each guide lists the breaking changes for its own step only.

The support table in the Laravel release notes shows why it matters:

VersionPHPBug fixes untilSecurity fixes until
Laravel 108.1 - 8.3August 6, 2024February 4, 2025
Laravel 118.2 - 8.4September 3, 2025March 12, 2026
Laravel 128.2 - 8.5August 13, 2026February 24, 2027
Laravel 138.3 - 8.5Q3 2027March 17, 2028

The framework step is rarely the slow part. The time goes into the PHP version on the server, packages nobody updated, and code that relies on old defaults. The official upgrade guide estimates 10 minutes for the move from 12.x to 13.0, and still lists changes that need a decision:

  • The CSRF middleware is now PreventRequestForgery; VerifyCsrfToken survives only as a deprecated alias, so references to it get updated.
  • The new skeleton sets the session serialization option to json. Switching an existing app from php signs every user out, so we pick the moment together or keep php.
  • The cache config gains serializable_classes, set to false. An app that caches PHP objects needs an explicit list of allowed classes.

The guide also names Laravel Shift, a community-maintained upgrade service, and the /upgrade-laravel-v13 command that Laravel Boost adds to Claude Code for apps on Laravel 12. Whatever drafts the changes, I review each one and run the full test suite.

What does a Filament admin panel give your team?

It gives your staff a back office for lists, filters, forms, dashboards and permissions, built on your existing Laravel models in the same codebase as the app. Filament describes itself as a server-driven UI framework for Laravel: screens are defined in PHP, on top of Livewire, Alpine.js and Tailwind CSS.

This website's blog posts, invoices, coupons, contact messages, menus and settings are all managed in a Filament panel. In a client panel I set up:

  • A resource for each business object, with the filters and bulk actions your staff use
  • Roles and policies, so a support agent cannot issue refunds or delete records
  • Dashboard widgets for the few numbers someone checks every morning
  • Actions that call your own services, such as sending a quote, instead of editing raw rows

The current major release, Filament 5, needs PHP 8.2+, Laravel 11.28+ and Livewire 4 (Filament upgrade guide). Older panels move forward with Filament's upgrade script, but the v5 guide warns that manual changes may still be needed and that some plugins may not support v5 yet, so I check every plugin before starting.

How do you add AI features to a Laravel app?

On Laravel 12 or 13, a good base is the Laravel AI SDK, Laravel's own package that puts providers such as OpenAI, Anthropic and Gemini behind one API for agents, tools, structured output and embeddings. Its current release requires PHP 8.3 and Laravel 12 or 13, so an older app is upgraded first.

  • An assistant inside your app that answers from your own records, with conversations saved by the SDK's RemembersConversations trait.
  • Drafting of proposals, replies or summaries as structured output your code can check. In JK Tour CRM, an AI assistant can draft an itinerary using the customer's own API key.
  • Semantic search over documents with embeddings; Laravel 13 adds vector queries for PostgreSQL with pgvector.
  • An MCP server built with Laravel MCP, so AI clients can use your app's tools and data, protected by OAuth through Laravel Passport or by Sanctum tokens.

Three safeguards go into every AI feature. Tools that change data are marked as needing approval, and the agent pauses until a person approves the call. Failover sends a request to a backup provider when the main one is rate-limited or unavailable. Tests fake the agent with fake() and preventStrayPrompts(), so the suite never calls a paid API. For agents that act across several systems, see AI agent development.

How do you use Claude Code on a Laravel project without losing control?

I treat Claude Code as a fast assistant whose work I check, never as the developer of record. Each task starts with a short plan I approve, runs in its own branch, and ends with passing tests and my reading of the whole diff.

On Laravel 12 and newer, Laravel Boost, Laravel's first-party package for AI-assisted work, can be added. It writes Laravel guidelines into CLAUDE.md and AGENTS.md inside its own block, leaving your own rules intact, and lets the agent read the database schema, the last logged error and the docs for your installed versions. Production credentials never reach the agent; it works against a local or staging database.

The full routine is in my Claude Code workflow for client projects; for work outside Laravel, see Claude Code development.

Who owns the code, the repository and the accounts?

You own the repository and every account. The repository lives in your GitHub or GitLab account, or moves there at handover if I start it in mine, and the server, domain, payment and AI provider accounts are opened in your name. I work with access you grant and can remove at any time. Who holds the rights to the custom code is written into the quote before work starts, and open-source packages keep their own licenses.

How do you test and hand over a Laravel project?

With feature tests that use the app the way a person does, written in Pest or PHPUnit to match your project and run on every change. They cover the core workflow, each permission rule, payment webhooks and AI calls with faked responses. For an upgrade, I write the tests first against the old version, so they prove the new version behaves the same.

At handover you receive:

  • The repository, with a README that sets the project up in a few commands
  • Every environment variable listed and explained, with no secret values in the code
  • Deployment, rollback and backup-restore steps, with queue worker and scheduler settings
  • A walkthrough call, then two weeks of support for defects in the delivered scope

The day-to-day routine is on how I work.

Which Laravel projects do I turn down?

I turn down work I cannot do well or honestly. That covers nulled or pirated scripts and paid packages without a license, copies of another company's product, and one-off error fixes with no wider project, which your host's support or an AI assistant handles faster. I do not certify apps against PCI DSS or SOC 2.

Who this is for

  • SaaS founders who want a Laravel product built by one developer who answers for all of it
  • Companies running a Laravel app on a version that no longer gets security fixes
  • Teams whose staff need an admin panel over data that now lives in spreadsheets or raw database tools
  • Agencies that need a senior Laravel developer for one client project, working in their repository
  • Product owners who want AI chat, search or drafting inside a Laravel app they already run

What is included

  • A written scope with roles, data model and acceptance tests, and a quote within one business day
  • A Laravel application or API with policies, validation, queued jobs and scheduled tasks
  • A Filament admin panel with resources, filters, roles and the actions your staff use daily
  • Version upgrades one major release at a time, run on staging against your test suite
  • AI features on the Laravel AI SDK or Laravel MCP, with approval steps for risky actions
  • Feature tests in Pest or PHPUnit for the core workflow, permissions, payments and AI calls
  • Handover: repository in your account, README, deployment notes, a walkthrough call and two weeks of support

How the work runs

  1. 1

    Scoping call

    A free call of about 30 minutes about your users, screens, data and deadline. Within one business day you get a written scope and a fixed quote, or an hourly estimate for open-ended work.

  2. 2

    Read before writing

    For an existing app I clone the repository, run its tests and check the Laravel, PHP and package versions against Laravel's support table. You hear what I found before I change anything.

  3. 3

    Build on staging

    Work happens on a staging copy in small pull requests. Claude Code drafts much of the code; I plan each task, read each diff and send you a short progress update every day.

  4. 4

    Test every change

    Feature tests cover the workflow, permissions, payments and AI calls, with AI responses faked so test runs cost nothing. Nothing merges until the tests pass and I have reviewed it.

  5. 5

    Release

    I deploy to your server or platform, run the migrations, start the queue workers and the scheduler, and watch the logs and failed jobs after go-live.

  6. 6

    Hand over

    You get the repository, a README, deployment and rollback notes and a walkthrough call. Two weeks of support for defects in the delivered scope follow.

Frequently asked questions

How much does it cost to hire a Laravel developer?

I work at $55 to $65 per hour, or for a fixed price agreed on a written scope. There are no packages. The price follows the number of roles, screens and integrations and, for an upgrade, how many major versions and outdated packages stand between your app and Laravel 13. The scoping call is free and takes about 30 minutes, and the written quote follows within one business day. Hosting and AI usage are billed to you directly by those providers.

Which Laravel version should a new project start on?

Laravel 13, the current major release. Laravel's release notes give it a release date of March 17, 2026, bug fixes until Q3 2027 and security fixes until March 17, 2028, and it requires PHP 8.3 or newer. Laravel ships a new major version about once a year, in the first quarter, so a project started on 13 has a long supported life and a documented upgrade path each year.

Is my current Laravel version still supported?

Check the support table in Laravel's release notes. Each release gets bug fixes for 18 months and security fixes for 2 years. As of October 2026, Laravel 10 and 11 get no fixes at all; security fixes for Laravel 11 ended on March 12, 2026. Laravel 12 gets security fixes only, until February 24, 2027. An app on any of these keeps running, but new framework vulnerabilities will not be patched for it.

Can you work on Filament 3 or 4 panels, not only Filament 5?

Yes. An older panel can be extended as it is, or moved forward when the upgrade is worth it. Filament 5 needs PHP 8.2+, Laravel 11.28+ and Livewire 4. Filament provides an automated upgrade script for each major version, vendor/bin/filament-v4 and vendor/bin/filament-v5. Its own v4 guide says the script does not handle all breaking changes, so I run it in a branch, review its changes and test every resource on staging before release.

Do you write the code yourself or with AI?

Both. I build with Claude Code, Anthropic's coding agent: I write the plan, the agent drafts code, and I read every diff before it merges, with the tests run on every change. On Laravel 12 and newer, Laravel Boost, Laravel's package that gives AI agents Laravel guidelines and a documentation search tool, can be added to the project. I am not affiliated with Anthropic or Laravel; I name the tools so you know how the work is done.

Can you join our agency or in-house team as a Laravel developer?

Yes. I work in your repository, follow your branching and review rules, and deliver pull requests your own developers can review. For an agency, I can take the Laravel part of a client project and work inside your process. If the code has no tests yet, I add them around the parts I change first, so my work does not break what yours depends on.

Do you work with clients in the US, Canada, the UK and Australia?

Yes, remotely. My portfolio includes a Laravel website for Hôtel Spa Le Suisse in Quebec, a client portal for RealBytes, an Australian hosting provider, a website for CornerHost, an Australian managed WordPress host, a website for Krunus, a UK hosting provider, and a Next.js store for Chargewise, which ships across the United States and Canada. Of these, only the Quebec hotel site is a Laravel project. Calls, the written scope and progress updates all happen online.

Related services