Security

Knock Knock

Password protect your Craft sites.

Sherlock

Security scanner and monitor to keep your site and CMS secure.

Password Policy

Enforce a password policy on your users.

Obfuscator

Encode and hide emails from spam bots and web scrapers.

reCAPTCHA

Integrate Google’s reCAPTCHA (v2) into your forms.

reCAPTCHA v3 for Craft CMS

Integrate reCAPTCHA v3 validation into your forms.

Cloudflare

Purge Cloudflare caches from Craft.

Patrol

Easy Maintenance Mode and Smart HTTPS Routing

SAML SSO Service Provider

SAML SSO Service Provider

Monitoring Client

Provides information about the Craft installation via an API

Snaptcha

Automatically validates forms and prevents spam bots from submitting to your site.

Craft reCAPTCHA 3

Uses reCAPTCHA v3 to guess whether the user is a human or robot.

CSP

Content Security Policy manager for Craft CMS

Cloudflare Turnstile

Easily integrate Turnstile to validate your forms

Template Guard

Password protect any page or entry.

User Group Field

A field to select one or more user groups.

S3 Secure Downloads

Return an AWS signed URL and proxy the download request.

Digital Download

Provide secure digital download links to your files.

Enforce password

Incrementally enforced new and secure passwords.

hCAPTCHA for Craft CMS

Integrate hCAPTCHA validation into your forms.

Link Vault

Protect and track downloads. Prevent leech attempts.

Oh Dear

Integrate the Oh Dear monitoring service into Craft CMS.

Autologin

Automatically login based on whitelisted IP, basic auth username or URL keys

Contact Form Extended

Adds functionality to the Contact Form plugin

IP Restrictor

Restrict what IP addresses can access the Craft control panel and front-end

Content Security Policy

Content Security Policy (or CSP) generator using nonces.

Enupal Backup

Backup securely to the cloud: S3, Dropbox, Google Drive, and more.

Cryptographer

URL-safe encryption and masking.

Lockout

Temporarily lock certain users out of the CP.

Concierge

Simple user moderation plugin for Craft

Dummy Data

Replace private data with dummy content

UpSnap

A comprehensive monitoring plugin for Craft CMS that provides real-time insights into your website's health, performance, and security with uptime monitoring, SSL certificate validation, broken link detection, Lighthouse performance scores, and domain health checks.

Cloudfront Signed URLs

Create AWS Cloudfront Signed URLs for your assets

Cloudflare Access

Cloudflare Access integration for Craft CMS.

Activity Logs

Record HTTP requests to Craft

ServeSecret

Serve password protected files

captcha.eu

captcha.eu for craftcms

OOPSpam

OOPSpam Anti-Spam for Craft CMS

Sucuri Cache Clear

Purge Sucuri caches from Craft.

IP Blocker

IP address blocker for Craft CMS applications to bock traffic from malicious sources.

Shield

Harness the power of Akismet to fight Spam

CleanTalk

CleanTalk Anti-Spam for Craft CMS

User Audit

Audit log for user activity in Craft: login, logout, failed logins and custom events with device, browser, IP, client-type and group metadata.

Datastone obfuscate

Obfuscate an email or other strings to prevent spam-bots from sniffing it.

Secrets

Store and manage secrets in an encrypted file.

Basic Auth

A Craft CMS plugin to configure HTTP Basic Authentication for your site.

SAML Identity Provider

SAML Identity Provider

Login Lockdown

Prevents brute force password attacks on the Craft CMS control panel by tracking failed login attempts per IP address and blocking access after a configurable threshold.

FreeLog

View, search, filter, and download server logs from the Craft CMS control panel.

Honeypot

Very sweet honey for the robots. Simple ingredients.

Covert

Plain text field type for Craft that encrypts and encodes data when saved to the database.

Craft Friendly Captcha

Friendly Captcha v1 and v2 integration for CraftCMS

Legacy Login

Seamless legacy user authentication for Craft CMS

Rate Limit

Prevent DDoS attacks from bots and keep your Craft protected.

Homer

Content safety and integrity plugin for Craft CMS. Prevents accidental breakage of content, relationships, assets, and site structure.

Trails

Enterprise-grade audit trail and compliance logging for Craft CMS

Garrison

Comprehensive security suite for Craft CMS — scanning, active protection, audit logging, and notifications.

TrustCaptcha

TrustCaptcha for CraftCMS — GDPR-compliant, privacy-first CAPTCHA

Bastion

All-in-one security toolkit for Craft CMS with security scanning, IP restrictions, CSP, SSL/domain monitoring, bot defence, and dependency audits.

Pwny - Strong Passwords

Validate user passwords against the Pwned Passwords API

Watson

CSP violation reporting and dashboard for Craft CMS 5.

Craft Cognito

Enable authentication to Craft using AWS Cognito

Nag

Send users an email alert when someone signs into their account

AgeGate

A simple plugin that provides Age Verification for your Site.

MFA enforcer

Provide custom MFA for craft entry, category, assets and so on..

Google OAuth

A minimal Craft plugin to provide Google OAuth login