Help protect the website from attackers or bad actors, by identifying, preventing, or mitigating security vulnerabilities.

Site Lens

Site Lens report with demo data: a red field reading 7 security problems to fix, above a Fix first list.

Shows what puts a Drupal site at risk on one screen: security releases, modules without security coverage or a maintainer, risky permissions and settings.

Proof of work

Proof of Work protects selected routes against scrapers and other automated
traffic. Visitors without a valid pass are redirected to a challenge page.
Once they pass the challenge, a signed cookie (`_pow`) lets them through for
the pass lifetime of that challenge.

iDigit Gov chatbot adapter

Chat panel open over a page with an assistant header, a welcome message, three suggested questions and a message field

Chat widget and provider plugin API with a generic HTTPS webhook provider. No AI service is included; with no provider configured, nothing is shown. Community contribution by iDigit; not an official DGA product.

iDigit Gov consent

Cookie consent banner at the bottom of a page with Accept, Reject and Manage cookies buttons and a Privacy policy link

Cookie and tracking consent banner. Rejecting a category prevents its configured scripts from loading. The choice is stored in a first-party cookie only. Community contribution by iDigit; not an official DGA product.

Anti-Knock

Functionality
This module monitors HTTP 404 Not Found errors from requests that reach Drupal and blocks requests from IP addresses that exceed a configured threshold.

Email OTP

The module adds a second step to the site login. After the user enters the correct password, they receive a 6-digit code by email and enter it to log in.

Pages

Subscribe with RSS Subscribe to RSS - Security