This project provides a collection of essential contributed modules and configurations designed to enhance the security of a Drupal website. It aims to streamline the process of implementing and managing security best practices.
Web Security brings the contributed modules and configuration most sites need to stay secure. Its default recipe is applied when you install the module.
Features
- Anti-spam on the login, registration, password reset and comment forms: CAPTCHA with Friendly Captcha, reCAPTCHA v3, Antibot and Honeypot. Logged in users skip these checks.
- Log in with an email address or a username.
- An access denied page with the login form, a return to the login page after logout, and a simpler registration form.
- Hardening with Security Kit headers, flood control and login flood limits.
- Security Review checks and the Klaro consent manager.
Drupal 11
· not 10
Ask your assistant about Drupal Website Security
Check compatibility with your Drupal and PHP version, maintenance and security coverage, from current release data. How it works
Depends on
Dependencies of the latest stable release
Required by
Tracked projects that depend on this one
No tracked projects depend on this one yet.
Activity
Release Timeline
Releases
| Version | Type | Core | PHP | Release date | |
|---|---|---|---|---|---|
| 12.0.3 | Stable | 11 | Sep 29, 2026 | ||
| 12.0.2 | Stable | 11 | Sep 20, 2026 | ||
| 12.0.1 | Stable | 11 | Sep 18, 2026 | ||
| 12.0.0 | Stable | 11 | Sep 17, 2026 | ||
| 12.0.0-rc1 | Pre-release | 11 | Sep 16, 2026 | ||
| 12.0.0-beta1 | Pre-release | 11 | Sep 16, 2026 | ||
| 12.0.0-alpha1 | Pre-release | 11 | Sep 15, 2026 | ||
| 12.0.x-dev | Dev | 11 | Sep 12, 2026 | ||
| 11.0.2 | Stable | 11 | Jul 25, 2026 | ||
| 11.0.1 | Stable | May 23, 2026 |