This project is not covered by Drupal’s security advisory policy.
Web Security brings the contributed modules and configuration most sites need to stay secure. Its default recipe is applied when you install the module.
Features
- Anti-spam on the login, registration, password reset and comment forms: CAPTCHA with Friendly Captcha, reCAPTCHA v3, Antibot and Honeypot. Logged in users skip these checks.
- Log in with an email address or a username.
- An access denied page with the login form, a return to the login page after logout, and a simpler registration form.
- Hardening with Security Kit headers, flood control and login flood limits.
- Security Review checks and the Klaro consent manager.
Supporting organizations:
Initial building, ongoing maintenance and development
Project information
- Project categories: Security
- Ecosystem: Drupal Website
20 sites report using this module- Created by shaimaa natshah on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
Releases
12.0.3
released 29 September 2026
Works with Drupal: ^11.4 || ^12
Install:
Development version: 12.0.x-dev updated 29 Sep 2026 at 06:47 UTC
