Drupal is a registered trademark of Dries Buytaert
drupal 11.3.7 Update released for Drupal core (11.3.7)! drupal 11.2.11 Update released for Drupal core (11.2.11)! drupal 10.6.7 Update released for Drupal core (10.6.7)! drupal 10.5.9 Update released for Drupal core (10.5.9)! cms 2.1.1 Update released for Drupal core (2.1.1)! drupal 11.3.6 Update released for Drupal core (11.3.6)! drupal 10.6.6 Update released for Drupal core (10.6.6)! cms 2.1.0 Update released for Drupal core (2.1.0)! bootstrap 8.x-3.40 Minor update available for theme bootstrap (8.x-3.40). menu_link_attributes 8.x-1.7 Minor update available for module menu_link_attributes (8.x-1.7). eca 3.1.1 Minor update available for module eca (3.1.1). layout_paragraphs 2.1.3 Minor update available for module layout_paragraphs (2.1.3). ai 1.3.3 Minor update available for module ai (1.3.3). ai 1.2.14 Minor update available for module ai (1.2.14). node_revision_delete 2.0.3 Minor update available for module node_revision_delete (2.0.3). moderated_content_bulk_publish 2.0.52 Minor update available for module moderated_content_bulk_publish (2.0.52). klaro 3.0.10 Minor update available for module klaro (3.0.10). klaro 3.0.9 Minor update available for module klaro (3.0.9). layout_paragraphs 2.1.2 Minor update available for module layout_paragraphs (2.1.2). geofield_map 11.1.8 Minor update available for module geofield_map (11.1.8).

spammaster

671 sites Security covered
View on drupal.org

Spam Master was born out of need to protect our website against constant malicious spam registrations, comments and contacts and exploits like HTTP and HTTPS DDoS (denial-of-service), SQL injections, brute force attacks and many others threats that affect the majority of websites.

Spam Master is currently compatible with all major form modules like Webform, Commerce, mailchimp, rate, quiz, etc. and scans single or multi-step forms.

Spam Master protects Drupal based websites from millions of known spam emails, domains, ip's and words by blocking user registrations, comments, messages, contacts, feedbacks or threads.

Spam Master uses RBL technology (real time online block lists) and is one of the top 5 world-wide, real-time spam & threats database, it provides a service software Saas.

Fast loading, Spam Master is modular… it only loads what is needed to keep your website secure and clean.

Spam Master provides statistics and logs all activity.

Makes no use of Javascript or Ajax to keep your website fast, conflicts free and with high SEO, pagespeed insights.

Spam Master blocks up to 100% spam bots with less than 0,1% false positives.

Real Time Block Lists

Spam Master scans logins, registrations, comments and contacts via online real time block lists with millions of threats already listed and constantly being maintained and updated.

Website Firewall HAF

Spam Master blocks malicious activity before it even reaches your website or admin pages. Spam Master implements a new concept called High Availability Firewall that protects your website against dangerous exploits like HTTP and HTTPS DDoS (denial-of-service), SQL injections, brute force attacks and many others threats.

Spam Buffer

Buffer technology greatly reduces server resources like cpu, memory and bandwidth by doing fast local machine checks. Also prevents major attacks like flooding, DoS , etc. via Spam Master Firewall

Whitelist Exemptions

Spam Buffer Whitelisting excludes spam checks from safe Ip's, Emails or Form Id's, it also removes these safe Ip's and Emails from your local Spam Buffer.

Antibot

Spam Master is a powerful anti-bot shield that easily detects and blocks robotic spam form submissions via real time bot checks. It also detects pesky robots running on browser macros, addons and extensions, headless browsers and browsers without javascript, sessions or cookies.

What is Spam Master Learning?

The module comes packed with automated Spam Learning function that will make your website a fighting spam enforcer by providing registration ip's and emails for analysis and spam lists inclusion.

What is Spam Master Alert Level?

It's an easy and interactive way for you to know if your website is being targeted by spammers and the level of intensity or danger of this targeting. The update is done daily and automatically via RBL (real-time blacklist) servers sync. The alert levels range from 0 (low) to 3 (high) intensities.

Spam Probability?

Spam Master includes Spam Activity Probability, in conjunction with Alert Level, Spam Master advanced detection heuristic analytics will provide you with an approximated percentage of all spam activity in your website.

No more Annoying CAPTCHA

Spam Master stops spam bots without user annoying CAPTCHA, reCaptcha, counts, puzzles and or any other question answer system. It improves your visitors satisfaction and browsing experience stopping spam bots at the same time.

Honeypot

Spam Master includes honeypot traps set to detect, deflect, and counteract attempts at unauthorized use of your website, a honeypot consists of data that appears to be a legitimate part of the site, but is actually isolated and monitored, and that seems to contain information or a resource of value to attackers, who are then blocked, colloquially known as "baiting" a suspect. Spam Master honeypot traps can be optionally and individually activated on login, registration, comment and contact pages.

Dynamic Flood Guard

Spam Master Flood Control actively monitors and restricts excessive requests from users or bots within a precise flood window, preventing spam surges and malicious activity before they affect your site. Through rigorous flood rate limits, we keep your website responsive, protected, and online—even when under attack.

Logging & Clean-Up

As good linux freaks we've implemented into Spam Master an healthy "obsessive compulsive" logging. Everything related to security gets logged and is accessible via the module Logs & Statistics page. On the other hand, in the module Protection Tools page we've also implemented full control over all logs retention time to keep your website fast & clean.

Privacy Policy and GDPR

We are an European Union company that fully complies with GDPR. We take a step further as described in our privacy policy.
If you decide to install Spam Master, the special nature of this service, real time scans for spam, attacks and exploits prevention, you should know that the data we collect is fundamental to provide you this service. This data is not shared with third party operators.

Website details

We use your website data for licensing purposes and generic service stability. The data includes your website platform, your website name, your website Url, your website email, your website hostname, your website IP.

Protection details

To protect your website Spam Master may scan Registrations, Comments and Contacts. Via Spam Master Firewall, it scans page hits for malicious Ip’s. The data collected may differ according to the scan you implement in your website and may include your website Ip and Url, remote Ip to scan, remote email to scan, remote comment to scan, remote contact to scan.

More features:

  • Protects User Registrations (spamming bots, users or both)
  • Protects Comments from (spamming bots, users or both)
  • Protects Basic Pages and Articles from malicious trackbacks (spamming bots, users or both)
  • Spam Master checks for emails, domains, ip's and words
  • Uses real time scan from millions of known spamming sources
  • Includes Statistical information to keep your life easy
  • Spam Master Learning makes your Drupal an Anti-Spam enforcer by collecting data for analysis
  • Spam Master allows you to customise the frontend blocked registration message
  • Spam Master includes Firewall technology, blocking misfits before they even enter your website
  • Spam Master includes Signatures
  • Spam Master includes a brand new automatic Threat Alert Level
  • Spam Master includes Spam Activity Probability
  • Spam Master includes several optional email reports and warnings to keep you informed
  • Spam Master is Contact Form Ready. Uses pro-active scan of your email contact form before triggering any mail function
  • Spam Master is e-Commerce Ready. Eliminates all credit card fraud by preventing known sources of spam from registering.
  • Spam Master makes obsolete annoying reCaptchas and captchas
  • Spam Master is honeypot ready
  • Spam Master is PHP 8 ready
  • Spam Master is IPv6 ready

Installation

Install Spam Master module like any other drupal module.

  1. Download the archive into your /modules folder.
  2. Go to Extend admin page, select Spam Master Module and click Install new module.
  3. Go to Configuration admin page, under System section select Spam Master configuration.
  4. Pre-set module configuration is included, you can change all settings here and press Save configuration.

Activity

Total releases
16
First release
Jan 2025
Latest release
2 months ago
Release cadence
25 days
Stability
100% stable

Release Timeline

Releases

Version Type Release date
8.x-2.70 Stable Feb 11, 2026
8.x-2.69 Stable Dec 14, 2025
8.x-2.68 Stable Dec 5, 2025
8.x-2.67 Stable Oct 27, 2025
8.x-2.66 Stable Oct 8, 2025
8.x-2.65 Stable Sep 1, 2025
8.x-2.64 Stable Jul 25, 2025
8.x-2.63 Stable Jun 25, 2025
8.x-2.62 Stable May 1, 2025
8.x-2.61 Stable Apr 8, 2025
8.x-2.60 Stable Mar 12, 2025
8.x-2.59 Stable Feb 25, 2025
8.x-2.58 Stable Feb 17, 2025
8.x-2.57 Stable Feb 12, 2025
8.x-2.56 Stable Feb 4, 2025
8.x-2.55 Stable Jan 27, 2025