Filtering by: security
api content development field gui integration migration test theme utility 2fa 301 302 3d secure 404-protection a11y abstraction academic access control access-control access-token accessibility accordion ACL actions activity stream activity tracking ADA add address AddToAny admin admin interface admin protection admin tools admin ui administration aes agents aggregation
Security Kit ★183 Provides Drupal with various security-hardening options through HTTP headers to mitigate risks from Cross-site Scripting (XSS), Cross-site Request Forgery (CSRF), Clickjacking, and improve SSL/TLS security.
gui api security http-headers xss csrf clickjacking csp content-security-policy hsts ssl tls hardening protection
Field Permissions ★161 Set field-level permissions to control who can create, edit, or view specific fields on any entity type.
gui api permissions field access control security privacy fields
Honeypot ★161 A spam prevention module that uses honeypot fields and time-based restrictions to deter automated form submissions without using CAPTCHAs.
gui api utility spam security form protection honeypot anti-spam bot protection spam control
Permissions by Term ★149 Restricts access to nodes and taxonomy terms based on user accounts and/or user roles assigned to specific taxonomy terms.
gui api access control permissions taxonomy content restriction node access security user roles term-based access
Simple OAuth (OAuth2) & OpenID Connect ★130 A comprehensive OAuth 2.0 Authorization Framework and OpenID Connect implementation for Drupal, built on the League OAuth2 Server library.
api gui integration OAuth2 oauth authentication authorization API rest jwt openid-connect oidc bearer-token access-token security
Security Review ★123 Security Review automates checking many configuration errors that lead to insecure Drupal sites and looks for existing vulnerabilities and attack attempts.
gui api development security audit hardening vulnerability permissions checklist security audit site review penetration testing compliance
reCAPTCHA ★117 Integrates Google reCAPTCHA service with Drupal's CAPTCHA module to protect forms from spam and abuse.
gui api integration spam protection captcha recaptcha google form protection bot detection security anti-spam
CAPTCHA ★109 Provides CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) functionality to protect web forms from automated spam submissions.
gui api spam protection security form protection captcha bot prevention anti-spam challenge-response
Two-factor Authentication (TFA) ★109 Pluggable provider of second factor authentication for Drupal that enhances account security by requiring an additional verification step during login.
gui api security authentication two-factor 2fa totp hotp otp encryption login
Key ★104 Key provides the ability to improve Drupal security by managing sensitive keys such as API and encryption keys, giving site administrators control over how and where keys are stored.
gui api utility security keys api-keys encryption credentials Configuration secrets-management
PHP Authentication Shield ★96 Creates a simple HTTP basic authentication shield to protect Drupal sites from unauthorized access, treating the site as a "walled garden".
gui api utility security authentication http-auth basic-auth password-protection development staging access-control site-protection
Password Policy ★95 Enforces password security constraints and expiration policies through a flexible plugin-based architecture.
gui api security password authentication user management policy compliance expiration constraints
Content-Security-Policy ★93 Provides Content-Security-Policy HTTP headers to protect against XSS and other code injection attacks by controlling which resources can be loaded by the browser.
gui api security csp content-security-policy xss-protection headers http-headers web-security
Login Security ★86 Enhances Drupal login form security by detecting brute-force attacks and implementing configurable blocking protections for users and IP addresses.
gui api migration security login authentication brute-force blocking ban protection attack detection user management
Configuration Read-only mode ★73 Locks Drupal configuration to prevent changes in the admin UI while still allowing config imports via Drush.
api utility Configuration security production deployment config management protection read-only devops
Flood control ★71 Provides an administration interface for Drupal's hidden flood control variables and enables site administrators to unblock IP addresses and user IDs that are blocked after multiple failed login attempts.
gui api utility security administration flood protection brute force protection login security user management ip blocking access control
Automatic IP ban (Autoban) ★69 Automates IP address banning by analyzing watchdog log entries against configurable rules and integrating with IP ban providers.
gui api utility security ip-ban automation spam-prevention bot-protection access-control watchdog logging cron
Rename Admin Paths ★61 Security module that allows renaming of Drupal's default /admin and /user paths to custom paths, helping protect against automated attacks targeting standard Drupal URLs.
gui utility security admin path URL obscurity protection backend user path route
Drupal Perimeter Defence ★60 A security module that automatically bans IP addresses making suspicious requests to non-existent URLs matching configurable patterns, protecting Drupal sites from hackers and bots.
gui api utility security ip-ban bot-protection spam-prevention perimeter-defense firewall 404-protection honeypot-integration
Administer Users by Role ★56 Allows site builders to set up fine-grained permissions for allowing sub-admin users to edit, cancel, and create other users based on their roles, providing more specific control than Drupal Core's all-or-nothing 'administer users' permission.
gui api user management permissions access control role-based access user administration sub-admin delegation security drupal 7