Filtering by: security
api content development field gui integration migration test theme utility 2fa 301 302 3d secure 404-protection a11y abstraction academic académico accesibilidad acceso a nodos acceso a rutas acceso basado en roles acceso basado en términos access control access-control access-token accessibility acciones de formulario accordion ACL actions activity stream activity tracking ADA add address AddToAny admin admin interface
Security Kit ★183 Provides Drupal with various security-hardening options through HTTP headers to mitigate risks from Cross-site Scripting (XSS), Cross-site Request Forgery (CSRF), Clickjacking, and improve SSL/TLS security.
gui api security http-headers xss csrf clickjacking csp content-security-policy hsts ssl tls hardening protection
Antibot ★164 Lightweight anti-spam module that prevents robotic form submissions by requiring JavaScript and human interaction.
gui api spam prevention bot protection form security javascript validation anti-spam security
Honeypot ★161 A spam prevention module that uses honeypot fields and time-based restrictions to deter automated form submissions without using CAPTCHAs.
gui api utility spam security form protection honeypot anti-spam bot protection spam control
Field Permissions ★161 Set field-level permissions to control who can create, edit, or view specific fields on any entity type.
gui api permissions field access control security privacy fields
Simple OAuth (OAuth2) & OpenID Connect ★130 A comprehensive OAuth 2.0 Authorization Framework and OpenID Connect implementation for Drupal, built on the League OAuth2 Server library.
api gui integration OAuth2 oauth authentication authorization API rest jwt openid-connect oidc bearer-token access-token security
Security Review ★123 Security Review automates checking many configuration errors that lead to insecure Drupal sites and looks for existing vulnerabilities and attack attempts.
gui api development security audit hardening vulnerability permissions checklist security audit site review penetration testing compliance
reCAPTCHA ★117 Integrates Google reCAPTCHA service with Drupal's CAPTCHA module to protect forms from spam and abuse.
gui api integration spam protection captcha recaptcha google form protection bot detection security anti-spam
Two-factor Authentication (TFA) ★109 Pluggable provider of second factor authentication for Drupal that enhances account security by requiring an additional verification step during login.
gui api security authentication two-factor 2fa totp hotp otp encryption login
Key ★104 Key provides the ability to improve Drupal security by managing sensitive keys such as API and encryption keys, giving site administrators control over how and where keys are stored.
gui api utility security keys api-keys encryption credentials Configuration secrets-management
PHP Authentication Shield ★96 Creates a simple HTTP basic authentication shield to protect Drupal sites from unauthorized access, treating the site as a "walled garden".
gui api utility security authentication http-auth basic-auth password-protection development staging access-control site-protection
Password Policy ★95 Enforces password security constraints and expiration policies through a flexible plugin-based architecture.
gui api security password authentication user management policy compliance expiration constraints
Content-Security-Policy ★93 Provides Content-Security-Policy HTTP headers to protect against XSS and other code injection attacks by controlling which resources can be loaded by the browser.
gui api security csp content-security-policy xss-protection headers http-headers web-security
Login Security ★86 Enhances Drupal login form security by detecting brute-force attacks and implementing configurable blocking protections for users and IP addresses.
gui api migration security login authentication brute-force blocking ban protection attack detection user management
Flood control ★71 Provides an administration interface for Drupal's hidden flood control variables and enables site administrators to unblock IP addresses and user IDs that are blocked after multiple failed login attempts.
gui api utility security administration flood protection brute force protection login security user management ip blocking access control
Rename Admin Paths ★61 Security module that allows renaming of Drupal's default /admin and /user paths to custom paths, helping protect against automated attacks targeting standard Drupal URLs.
gui utility security admin path URL obscurity protection backend user path route
Drupal Perimeter Defence ★60 A security module that automatically bans IP addresses making suspicious requests to non-existent URLs matching configurable patterns, protecting Drupal sites from hackers and bots.
gui api utility security ip-ban bot-protection spam-prevention perimeter-defense firewall 404-protection honeypot-integration
Persistent Login ★53 Provides a "Remember Me" feature on the user login form that allows users to stay logged in across browser sessions.
gui api authentication security login remember me session user experience
Login with Email or Username ★44 Allows users to log in with either their username OR email address from the same input box on the standard login form.
utility api authentication login email username user experience security REST API decoupled
Remove HTTP headers ★42 Removes configured HTTP response headers from Drupal to enhance security by hiding server information.
gui api utility security HTTP headers privacy hardening response headers server fingerprinting
Private Files Download Permission ★41 Provides granular per-directory access control for Drupal's private file system, allowing administrators to restrict file downloads by user and role.
gui api access control private files file permissions security download permissions file system media