Add functionality and customize your Drupal application with thousands of projects contributed by our amazing community.
A module is code that extends Drupal's by altering existing functionality or adding new features. You can use modules contributed by others or create your own. Learn more about creating and using Drupal modules.
Prevent anonymous users to access Drupal pages
This module is unsupported due to a security issue the maintainer didn’t fix. If you want to use this module, your options are: Choose another, actively maintained module instead File an issue in...
Categories: Security, Search engine optimization (SEO), Developer tools
OAuth2 JWT SSO
OAuth2 JWT Single Sign On Module configures Drupal to use remote and centralized authentication service. This module works with any SSO provider which uses OAuth2 as the authentication framework,...
Categories: Decoupled, Developer tools, Security
Deceptive Site Remover
This module provides a Drush command to identify and remove any malware and phishing code injected into the site after a cyber attack. The module looks for any unsafe code injected into text area...
Categories: Security
Drupalmonitor
Summary The module connects any Drupal 7 site with drupalmonitor.com. As the name says, Drupalmonitor is a tool to actively monitor Drupal sites. It's not only a "heartbeat" kind of monitoring. It...
Categories: Administration tools, Developer tools, Security
Client-Side Content Encryption
Introduction This module implements client-side, asymmetric encryption of content using Stanford JavaScript Crypto library using Elliptic Curve Cryptography. Module installation 1. Get the module...
Categories: Security
Captcha-free Form Protection
The Drupal 8 version is released and has protection for all the forms as shown in the image. The only thing missing is protection for Webform and that module is not nearly ready for release at this...
Categories: Security
Email Jumbler for Drupal
Enables Craigslist-style "anonymization" of email addresses on node comments. An anonymous user can post their comment, enter their name and email, and choose to expose a "fake" email address that...
Categories: Integrations, Security
Accessibility Auto Fixer
The Accessibility Auto Fixer module helps Drupal sites identify and improve accessibility issues based on WCAG guidelines. It integrates automated scanning using axe-core, provides detailed reports...
Categories: Accessibility, Administration tools, Security
Anonymous Publishing
The Anonymous Publishing project is intended to increase your control over anonymous publishing on a site. Allowing anonymous publishing (posting without first having to register) may lower the...
Categories: Security, Access control
Regex Field Validator
# Regex Field Validator **Project Summary (200 characters max):** Adds customizable regular expression validation to text fields with backend configuration. Perfect for enforcing data formats like...
Categories: Administration tools, Content editing experience, Security
HTTP-Headers Cleaner
CONTENTS OF THIS FILE --------------------- * Introduction * Requirements * Recommended modules * Installation * Configuration * Troubleshooting * FAQ * Maintainers INTRODUCTION ------------ The...
Categories: Security
Opt-in Cookie Consent
This module allows your website to comply with the Dutch law on the use of cookies. By Dutch law the visitor must consent with placing cookies on your client to gather visits or other information...
Categories: Developer tools, Security
Logystera
Logystera is a log intelligence and security analytics module for Drupal 10 and 11. It captures 40+ audit signal types from your site — authentication, content changes, file uploads, configuration,...
Categories: Security
Watchdog Registry
Introduction The Watchdog Registry module is intended for developers who rely on checking the watchdog table to detect PHP errors. This module contains a configuration entity that can be used to...
Categories: Security, Integrations, Developer tools
Gotcha - Contact Spam Catcher
Gotcha is sort of a take off on "captcha." The idea was first mentioned on http://drupal.org/node/166921 as a possible way to trick spam bots who try to use the Drupal contact form. I don't...
Categories: Content editing experience, Security
Database logging ban operation
Synopsis Have you ever looked through the list of recent messages for a public website and noticed certain IP addresses repeatedly trying to do bad stuff? For example, repeatedly trying to log in...
Categories: Administration tools, Developer tools, Security
Challenge mitigation
A lightweight IP whitelisting and challenge module for Drupal 10+ Prevent automated abuse while maintaining a smooth UX for real visitors. Disclaimer: This module is not a WAF This module is not...
Categories: Access control, Performance, Security
Amber
Description Whether links fail because of DDoS attacks, censorship, or just plain old link rot, reliably accessing linked content is a problem for Internet users everywhere. The more routes we...
Categories: Content editing experience, Security
Media Private Access
WARNING: This is an experimental module, NOT READY to be used in production. This exists as a proof-of-concept only. Use it at your own risk. This project is intended to explore ways of improving...
Categories: Media, Security
XSSecurity
Summary Provides cross-site scripting security for site admins. If the site is hacked using XSS, this reduces the risk of anything harmful being done by adding an IP-based captcha to dangerous...
Categories: Security
JSON:API Security Hardening
Introduction JSON:API Security Hardening module enhances the security of JSON:API–based applications by enforcing strict, defense-in-depth controls. While Drupal core and contributed modules such...
Categories: Decoupled, Security