HttpHeader Plugin This Joomla Plugin implements an UI Layer for the HTTP Security headers so everyone can set and configure them from the backend. Features This Joomla Plugin helps you to set the following HTTP Security Headers. - Strict-Transport-Security - Content-Security-Policy - Content-Security-Policy-Report-Only - X-Frame-Options - X-XSS-Protection - X-Content-Type-Options - Referrer-Pol...

CMS-Scurity Component is a stunning Security & Firewall extensions which does not only looks good but also provide security options for your website! Every modern website needs a Firewall which will protect the sensitive data and users with advanced firewall mechanisms. Advanced and stunning looking dashboard with informative security and firewall options. Simple check lists will help you find sec...

WEBSITE BLACKLIST CHECK AND MONITOR Google blacklists more than 12,000+ websites every day. You can loose up to 99% of traffic if your website has been blacklisted. Google protects its users from dangerous websites that may show up in search results and if your website has dangerous behaviour it gets banned by Google and you loose customers and visitors. Google Chrome blocks all your visitors fro...

The System - Content Security Policy plugin(s) bring this much needed security functionality to Joomla. The fun doesn't stop there - this set of plugins also implements the report-uri feature of the CSP. You can capture your own csp-report via the included AJAX plugin, and have it sent to you nightly using the included CLI script. If you want to browse the data - the AJAX plugin offers a handy...

FetchMetadata Plugin This Joomla Plugin helps to protect your sites by using Fetch Metadata Request Headers (w3c-spec) Features This Joomla Plugin helps to protect your sites by using Fetch Metadata Request Headers The implemened rules are: - Step 1: Allow requests from browsers which don't send Fetch Metadata - Step 2: Allow same-site and browser-initiated requests - Step 3: Allow simple top-...

Force2faUsergroup Plugin This plugin allows to force users to set up 2FA in a specific user group. Features This plugin allows to force users to set up 2FA in a specific user group. Setup the groups to force a 2FA setup on the next login. Configuration Initial setup the plugin Download the latest version of the plugin Install the plugin using Upload & Install Enable the plugin System...

HaveIBeenPwned.com compromised passwords check. HaveIBeenPwned.com is project gatehring informations about password breaches, and collecting compromised passwords. It means, if your password (not necessarily password of your account) was somewhere published by hackers, who hacked some passwords database, it will be listed there. And if so, the password is propably not secure anymore. n3t HaveIBe...

Add additional checks to your favourite Captcha Solution. This plugin when published as main Captcha plugin is able to - randomly rotate other Captcha plugins - check visitors IP address against Blacklists (StopForumSpam.com, SpamHaus.org, Sorbs.net, SpamCop.net, UceProtect.net, DroneBl.org, BotScout.com, Project HoneyPot, manually defined blacklist of IPs or IPs range) - check registered user em...

Joomla >= 4 only Backdoor is the Joomla 4/5 kompatible Version of the famous AdminExile plugin from Michael Richey (RicheyWeb). Backdoor protects your backend / administration part of your site by using URL access keys (query parameters). So, attempts to access the administrator login page will be met with either a redirect to your homepage, a 404 error, or a redirect somewhere else. This is e....

This extension will help you to password protect a Joomla article (+ FlexiContent). Sometimes you have an important page that you don't want every visitor to your site to have access to. The first thing that comes to mind is to make this page accessible only to members, but then you realize that you don't want all your members to have access to this page. Just a few members. So you need an extr...

Joomla OAuth Single Sign-On (SSO) | Login into Joomla using OpenID Connect The Joomla Single Sign-On (Joomla SSO OAuth 2.0) with OAuth & OpenID Connect plugin facilitates seamless SSO/login with various OAuth Providers, enabling users to log into Joomla sites using their OAuth provider credentials such as Azure AD, Azure B2C, Office 365, Keycloak, and many more. Key Features Support for Multip...

With Joom2static you can create a static HTML website from Joomla. With included optimizations for minify and combine JS/CSS + image optimization via TinyPNG. Joom2static support Joomla category (blog layout) and multilingual and creates simple and nice folder/files structures. Why would you want a static html page instead of a full fledged Joomla CMS installation? Speed! – with no database a...

DataSafe Pro is professional database backup. It generates a snapshot of your full Joomla database, which allows you to quickly revert your content, whenever you want. It's ideal for creating a quick backup before you start any changes to your website. And to restore your Joomla database from a backup it's easy. Either select a DataSafe backup stored online, or upload a backup stored on your lo...

Protects content in articles with a password or only displays the content to approved user groups. With this plugin, you can hide text in your articles with a password or from specified user groups with a simple syntax call directly in the articles. Special features are the unusual syntax use (square brackets) and the Safe Mode to avoid hidden text to be showed in other components (e.g. search c...

Social Login by miniOrange is a Joomla extension that allows your visitors to comment, share, login, and register with many Social Media applications like as example Facebook, Twitter, Vkontakte, Google, LinkedIn, WindowsLive, Instagram, Salesforce, and Amazon. Social Login by miniOrange is a Joomla extension that allows your visitors to comment, share, login, and register with many Social Media...

Warn, restrict and prevent unauthorized logins to the admin section for Joomla. Why you should use it: - Requires OTP to log in: An OTP code will be sent to the administrator's email address, suspicious logins will be asked to enter it. - Block suspicious logins: If this login comes from a suspicious IP address, an email will be sent to the administrator. At this point, the admin can confirm it's...

Friendly Captcha anti-bot plugin for Joomla! Organizations of all sizes—from startups to large enterprises—use Friendly Captcha to protect their websites and online services from spam and abuse. Friendly Captcha is privacy-first and fully GDPR-compliant. Register at https://friendlycaptcha.com/ to get your site and secret keys. Plugin Features Standard light and dark themes; CDN support;...

With this tool you can have a broad range of online tools check your website on-the-fly. Range of tools: Website performance Search Engine Optimization Usability Security Accessibility Mobile friendly After installation, clicking on a tool icon will open the external website with your site URL....