Security

A decoupled frontend needs three things Drupal has no answer for: log in, refresh an expiring token, and log out for real. This module adds all three.

Adds a site tag that classifies paid visits as legitimate or suspicious. Helps you spot click fraud, bots, and other invalid clicks on PPC campaigns after you save your UID.

Spam Score provides local, explainable spam detection for
Drupal forms. It evaluates submissions using configurable rules, calculates

A module that provides a "Poison Fountain" response plugin for the Bot Blocker module.

Proofwright CRA Evidence sends this site's software inventory — Drupal core plus every installed module and theme — to your Proofwright console as a CycloneDX SBOM, so the site can be evidenced und

Tamper-evident audit logging for Drupal, usable by any module.