Security

Password protect your Craft sites.

Security scanner and monitor to keep your site and CMS secure.

Enforce a password policy on your users.

Encode and hide emails from spam bots and web scrapers.

Integrate Google’s reCAPTCHA (v2) into your forms.

Easy Maintenance Mode and Smart HTTPS Routing

Integrate reCAPTCHA v3 validation into your forms.

Purge Cloudflare caches from Craft.

Return an AWS signed URL and proxy the download request.

Automatically validates forms and prevents spam bots from submitting to your site.

SAML SSO Service Provider

Uses reCAPTCHA v3 to guess whether the user is a human or robot.

Provide secure digital download links to your files.

Password protect any page or entry.

Incrementally enforced new and secure passwords.

A field to select one or more user groups.

Log adding/updating/deleting of elements

Backup securely to the cloud: S3, Dropbox, Google Drive, and more.

Integrate hCAPTCHA validation into your forms.

Protect and track downloads. Prevent leech attempts.

Hide admin users from non-admin users

Content Security Policy (or CSP) generator using nonces.

Automatically login based on whitelisted IP, basic auth username or URL keys

Provides information about the Craft installation via an API

Integrate the Oh Dear monitoring service into Craft CMS.

URL-safe encryption and masking.

HTTP Basic Authentication within templates.

Temporarily lock certain users out of the CP.

Create AWS Cloudfront Signed URLs for your assets

Simple user moderation plugin for Craft

Secure & restricted files download

Serve password protected files

Integrate matt-west/craft-recaptcha with craftcms/guest-entries

Replace private data with dummy content

Harness the power of Akismet to fight Spam

Record HTTP requests to Craft

SAML Identity Provider

Configure where to send users after they logout.

Anti-Spam protection by CleanTalk

Monitor 404 HTTP not found exceptions. See which requests fail often.

Craft 3 plugin for respecting Do Not Track headers sent by browsers.

Automated update checker that notifies you of any pending updates

Enable authentication to Craft through the use of JSON Web Tokens (JWT)

Store and manage secrets in an encrypted file.

Seamless legacy user authentication for Craft CMS

Email based Two-factor authentication plugin for Craft CMS

Bastion.Cloud companion plugin for Craft CMS

This plugin extends the existing asset query and shows only the assets which has been uploaded by the current user.

A filter for twig to hash a string with sha512

Enable authentication to Craft using AWS Cognito

Restrict user registration by domain in Craft CMS, allows you to limit who can register for your site based on their email address.

Extends Craft CMS permissions to allow locking down access to the Assets Page but still allow uploading.

Send users an email alert when someone signs into their account

Easily impersonate, and un-impersonate, other users.

Plugin allows you to restrict who can clear each cache group.

Use your Craft CMS credentials to authenticate with a GraphQL API powered by Hasura.io

Norwegian BankID login and registration plugin

All-in-One Google reCAPTCHA: v3 and v2 (Checkbox, Invisible).

Helps you detect if a user is being impersonated and get the originally signed in user

Protects your different environments with an access password.

Geetest plugin for Craft 3

GitLab integration for Social

Plugin for two-factor or two-step login using Time Based OTP.

Allows users to delete their own account within Twig templates

Encode email addresses in your templates to thwart evil spam bots.

Allow your visitors to social login and register to your Craft website with web services like Facebook, Google, Twitter…

A simple plugin that adds a Twig Tag to obfuscate email addresses (by ROT13) in text fields or strings.

Restrict which fields and tabs are visible to different user groups.

Companion plugin for Craft Report.

Restrict access to the CP based on a IP whitelist

LinkedIn integration for Social

Email address validation for user registrations, custom forms and more.

GitHub integration for Social

Connect to Strava with oAuth and get data via the Strava API