Help protect the website from attackers or bad actors, by identifying, preventing, or mitigating security vulnerabilities.

Proof of work

Proof of Work protects selected routes against scrapers and other automated
traffic. Visitors without a valid pass are redirected to a challenge page.
Once they pass the challenge, a signed cookie (`_pow`) lets them through for
the pass lifetime of that challenge.

iDigit Gov chatbot adapter

Chat panel open over a page with an assistant header, a welcome message, three suggested questions and a message field

Chat widget and provider plugin API with a generic HTTPS webhook provider. No AI service is included; with no provider configured, nothing is shown. Community contribution by iDigit; not an official DGA product.

iDigit Gov consent

Cookie consent banner at the bottom of a page with Accept, Reject and Manage cookies buttons and a Privacy policy link

Cookie and tracking consent banner. Rejecting a category prevents its configured scripts from loading. The choice is stored in a first-party cookie only. Community contribution by iDigit; not an official DGA product.

Anti-Knock

Functionality
This module monitors HTTP 404 Not Found errors from requests that reach Drupal and blocks requests from IP addresses that exceed a configured threshold.

Email OTP

The module adds a second step to the site login. After the user enters the correct password, they receive a 6-digit code by email and enter it to log in.

Entity Anonymizer

Safely share a copy of your site. Replaces personal data with realistic fake values, for good: fields, revisions, translations, files and URL aliases. Includes Drush tools and an audit trail.

Pages

Subscribe with RSS Subscribe to RSS - Security