One of the first things we should do when we put a Joomla site into production is hide access to the administrator . Nobody should access the /administrator folder of your website , neither curious, nor robots nor of course hackers. It is necessary to hide that folder for safety and also for a bit of modesty. Joomla does not have that option by default (it should) so I have developed a simple free...

HttpHeader Plugin This Joomla Plugin implements an UI Layer for the HTTP Security headers so everyone can set and configure them from the backend. Features This Joomla Plugin helps you to set the following HTTP Security Headers. - Strict-Transport-Security - Content-Security-Policy - Content-Security-Policy-Report-Only - X-Frame-Options - X-XSS-Protection - X-Content-Type-Options - Referrer-Pol...

Force2faUsergroup Plugin This plugin allows to force users to set up 2FA in a specific user group. Features This plugin allows to force users to set up 2FA in a specific user group. Setup the groups to force a 2FA setup on the next login. Configuration Initial setup the plugin Download the latest version of the plugin Install the plugin using Upload & Install Enable the plugin System...

This service is aimed at webmasters who want to effectively protect themselves against so-called "bad bots" and behavioral networks. Free of charge you can use the list published on https://www.ip-bannliste.de/aktuelle-bannliste.html to protect your website. This list is already integrated in the component - regardless of whether you want to use our AutoUpdater or not. Please note: The IP Bannli...

WEBSITE BLACKLIST CHECK AND MONITOR Google blacklists more than 12,000+ websites every day. You can loose up to 99% of traffic if your website has been blacklisted. Google protects its users from dangerous websites that may show up in search results and if your website has dangerous behaviour it gets banned by Google and you loose customers and visitors. Google Chrome blocks all your visitors fro...

FetchMetadata Plugin This Joomla Plugin helps to protect your sites by using Fetch Metadata Request Headers (w3c-spec) Features This Joomla Plugin helps to protect your sites by using Fetch Metadata Request Headers The implemened rules are: - Step 1: Allow requests from browsers which don't send Fetch Metadata - Step 2: Allow same-site and browser-initiated requests - Step 3: Allow simple top-...

SMS & EMAIL OTP VERIFICATION - Email and SMS authentication This plugin makes it a breeze for your website to verify if someone signing up or logging in is truly who they claim to be. It works by sending a special code to their email or phone, which they must correctly enter to confirm their identity and ensure they're not using a bogus account. This not only keeps scammers at bay but also enhanc...

This Joomla backup plugin allows you to save Joomla extension settings: modules, plugins, templates and components configurations. How many times has it happened to modify the settings of a plugin, a module or a template and, after various tests, not being able to go back to the previous configuration? With Params Backup you can save settings of Joomla extension you are editing, and then reload...

HYDRA - human verification plugin. A flexible plugin for checking users that they are not robots. Effectively copes with the task of blocking robots during registration. Suitable for any forms and sites. Visual adjustment of verification codes from the most easily readable to complex, which makes it almost impossible for robots to recognize the image. Additionally, a trap field is invisible to p...

The System - Syslog plugin provides logging by sending RFC 3164 compliant messages to multiple remote syslog servers as well as the logging facility of your web server's operating system. Options Log categories: A comma separated list of log categories to include. Common log categories include but are not limited to: database, databasequery, database-error, deprecated and jerror. If empty, all c...

Prevent and stop bots traffic, Web Scraping, Tor traffic, Spam Submissions, Web Fraud, Business logic and Denial of service (DDoS). This plugin inserts in your website the CloudFilt codes for the security tracking available on https://cloudfilt.com/. Features **Authentification form** Using your public and private key to connect your Joomla website to your CloudFilt account and enable CloudFi...

Secure your forms and stop bot spam. GDPR compliance, no external server calls. CAPTCHA plugin Easy to use CAPTCHA plugin for spam protection. Uses Joomla CATCHA API GDPR safe No calls to external servers Easy to use Silent Modes (Honeypot / Time Threshold) Image questions (Calculate / Text / Selection ) Word Blacklist...

A helper component to allow site members to validate their identities when contacting people outside of the site organisation. If a site member is contacting someone via a method that is insecure or not easily verified, such as phone call or most e-mail, this component can allow the person being contacted to validate the member as belonging to the website. A code is generated in advance by the sit...

An Intrusion Detection System(IDS) is a software that monitors a host and notifies you of suspicious activity, in this case your Joomla website. Such suspicious activity can be a sign that attackers are trying to find a security hole to exploit on your Joomla website, or have already hacked into it. IDS detects Cross-site scripting (XSS), SQL injection, header injection, Directory traversal, Rem...

Use the SecSign ID two-factor authentication on your Joomla site to enable easy and secure login using your iPhone or Android phone or Windows Mobile Phone. SecSign ID - The mobile way to log into web sites SecSign ID is a plugin for real two-factor authentication (2FA) for Joomla sites. 2FA adds another layer of security to your website by using a second token. In this case the physical token is...

Plugin for the Browser Update initiative Shows a popup (https://browser-update.org/en/#test-bu) for obsolete or dangerous browsers....

ALPHASCRAMBLE 2.0 - nothing remains undetected With ALPHASCRAMBLE, you can create a snapshot (current state) of your website. Every change to this structure triggers an alarm. Additionally, potential malicious files are placed in quarantine and new registries are deleted. Problem: Once your website is online, you will not immediately notice when a hacker attack has taken place. Especially if you...

This simple and very powerful tool can detect fakes links, hidden texts, iframes, JavaScripts codes and redirections. After reviewing the scan report, you can easily remove failed links and suspicious codes from the pages of your Joomla website. Hidden links, injected JavaScript codes – all these can negatively affect the SEO of your website. As the result your site will lose its position in G...