You don't have to worry about security if you use laravel. Laravel takes care of that for you. However you should decide when to escape data in your forms. And make note of MassAssignmentException. Your should define your model intelligently. And when you push to production, make sure you change debug to false.

more importantly laravel doesnt help secure your server.. if that is how your site got hacked..

just plan ahead what you developing and laravel will take care in your site just follow the procedure to secure your site like hashing password or escaping the data just think like a hacker before you make a site

How to create model intelligently? and how to change debug to false ?

Thanks.