Security

Password protect your Craft sites.

Enforce a password policy on your users.

Security scanner and monitor to keep your site and CMS secure.

Integrate Google’s reCAPTCHA (v2) into your forms.

Encode and hide emails from spam bots and web scrapers.

Craft 3 plugin for two-factor or two-step login using Time Based OTP.

Allow your visitors to social login and register to your Craft website with web services like Facebook, Google, Twitter…

Easy Maintenance Mode and Smart HTTPS Routing

Hide admin users from non-admin users

Automatically validates forms and prevents spam bots from submitting to your site.

Uses reCAPTCHA v3 to guess whether the user is a human or robot.

Log adding/updating/deleting of elements

Purge Cloudflare caches from Craft.

Encode email addresses in your templates to thwart evil spam bots.

Incrementally enforced new and secure passwords.

SAML SSO Service Provider

Provide secure digital download links to your files.

Return an AWS signed URL and proxy the download request.

Backup securely to the cloud: S3, Dropbox, Google Drive, and more.

Field type that let you select one or more user groups

HTTP Basic Authentication within templates.

Content Security Policy (or CSP) generator using nonces.

Integrate reCAPTCHA v3 validation into your forms.

Protect and track downloads. Prevent leech attempts.

Password protect any page or entry.

Integrate hCAPTCHA validation into your forms.

URL-safe encryption and masking.

Automatically login based on whitelisted IP, basic auth username or URL keys

Temporarily lock certain users out of the CP.

Craft 3 plugin for respecting Do Not Track headers sent by browsers.

Secure & restricted files download

Simple user moderation plugin for Craft

Companion plugin for Craft Report.

Automated update checker that notifies you of any pending updates

Restrict access to the CP based on a IP whitelist

Harness the power of Akismet to fight Spam

Serve password protected files

Configure where to send users after they logout.

Integrate matt-west/craft-recaptcha with craftcms/guest-entries

LinkedIn integration for Social

Create AWS Cloudfront Signed URLs for your assets

Record HTTP requests to Craft

Enable authentication to Craft through the use of JSON Web Tokens (JWT)

Monitor 404 HTTP not found exceptions. See which requests fail often.

SAML Identity Provider

Store and manage secrets in an encrypted file.

Seamless legacy user authentication for Craft CMS

Extends Craft CMS permissions to allow locking down access to the Assets Page but still allow uploading.

Enable authentication to Craft with Amazon Cognito using JWTs

Bastion Agent companion plugin for Craft CMS

This plugin extends the existing asset query and shows only the assets which has been uploaded by the current user.

Restrict user registration by domain in Craft CMS, allows you to limit who can register for your site based on their email address.

Protects your different environments with an access password.

Email based Two-factor authentication plugin for Craft CMS

Anti-Spam protection by CleanTalk

Easily impersonate, and un-impersonate, other users.

GitHub integration for Social

Plugin allows you to restrict who can clear each cache group.

Enable authentication to Craft using AWS Cognito

Email alerts in case of suspicious user logins.

Norwegian BankID login and registration plugin

Helps you detect if a user is being impersonated and get the originally signed in user

Use your Craft CMS credentials to authenticate with a GraphQL API powered by Hasura.io

GitLab integration for Social

All-in-One Google reCAPTCHA: v3 and v2 (Checkbox, Invisible).

Geetest plugin for Craft 3

Allows users to delete their own account within Twig templates

Restrict which fields and tabs are visible to different user groups.

A simple plugin that adds a Twig Tag to obfuscate email addresses (by ROT13) in text fields or strings.

Email address validation for user registrations, custom forms and more.

A filter for twig to hash a string with sha512

Connect to Strava with oAuth and get data via the Strava API