Search Drupal Projects

Find modules, themes, and distributions by name or by what they do. Descriptions are matched against each project's plain-language summary, and results can be narrowed to a Drupal core version or to projects that are still actively maintained.

479 projects matching these filters · most installed first

Project	Drupal	Maintenance	Installs
Tarte au Citron Covered by security advisories Module This module helps manage website cookies for features like ads, social media, and videos. It integrates with other modules to ensure compliance by controlling which services can ac... Active	10–11	Active	359
Rate Limits Covered by security advisories Module This module helps protect your Drupal site from denial-of-service attacks by setting limits on how often users or IP addresses can access specific parts of your site within a given... Slowing	10–11	Slowing	359
Let's Encrypt Challenge Covered by security advisories Module This module allows you to configure how Let's Encrypt challenges are handled for your site. It can either return a predefined response or serve the content of a challenge file loca... Dormant	—	Dormant	346
CAPTCHA After Covered by security advisories Module This module adds CAPTCHA protection to selected forms, but only after a specified number of unsuccessful submission attempts. This improves usability by not requiring CAPTCHAs for... Dormant	8–11	Dormant	345
File Mime Validator Covered by security advisories Module This module enhances file uploads by performing a secure, server-side check of the file's MIME type against its extension. It helps prevent malicious uploads by ensuring file types... Active	10–11	Active	329
Simple account policy Covered by security advisories Module This module provides configurable rules for user accounts, including enforcing email-as-username, validating username and email patterns, and automatically blocking or deleting ina... Active	10–11	Active	325
Captcha Keypad Covered by security advisories Module Captcha Keypad is a security module that replaces traditional text CAPTCHAs with a numeric keypad. Users click a sequence of numbers displayed on a shuffled keypad, which is intuit... Active	10–11	Active	318
Vault for Drupal Covered by security advisories Module This project provides core APIs for securely integrating Drupal with Hashicorp Vault or The Linux Foundation OpenBao. It allows Drupal to access secrets like API keys or passwords... Slowing	10–11	Slowing	308
Vault - AppRole Authentication Covered by security advisories Module This module allows Drupal to authenticate to a Vault server using the AppRole authentication method. It is designed to support the AppRole pull model. Active	9–11	Active	302
SVG Upload Sanitizer Module This module automatically sanitizes all uploaded SVG files to improve security. It uses the darylldoyle/svg-sanitizer package to perform the sanitization process. Active	10–11	Active	294
Get JWT on Login Module This module modifies Drupal's login response to include a JSON Web Token (JWT) access token. This allows decoupled applications like mobile apps or modern front-end frameworks to r... Dormant	8–10	Dormant	279
XSS Prevention Module This module helps prevent XSS attacks by checking URLs for suspicious characters or JavaScript event handlers. If an attack is detected, it logs the event and redirects the user to... Dormant	8–10	Dormant	266
Blocked IPs Expire Covered by security advisories Module This module adds expiry dates to IP addresses blocked in Drupal, automatically unblocking them after a set time. It modifies the existing IP blocking interface to allow setting exp... Dormant	—	Dormant	264
Registration codes Covered by security advisories Module This module restricts new account registrations to users who enter a valid registration code. It provides tools for administrators to manage these codes, including generation, impo... Dormant	10–11	Dormant	261
Access Filter Covered by security advisories Module This module restricts access to specific paths, URLs, or IP addresses. It supports regular expressions for paths and URLs, and can handle IP address ranges and subnets. Dormant	9–11	Dormant	252
Prevent Multiple Form Submissions Covered by security advisories Module This module prevents users from submitting forms multiple times by adding server-side validation and optional timeouts for specific forms. It also allows for custom error messages... Dormant	10–11	Dormant	251
Tag1 D7ES Module This module provides integration for Tag1's Drupal 7 Extended Support service. Using this module means you agree to Tag1 Consulting's Terms of Service and Privacy Policy. Dormant	—	Dormant	247
Authenticator Login Covered by security advisories Module This module adds two-factor authentication (2FA) to your Drupal site using authenticator apps, enhancing security beyond simple passwords. It allows administrators to manage user 2... Dormant	9–11	Dormant	246
Guardian Covered by security advisories Module This module prevents users from logging in with a username and password directly. Instead, guarded users can only log in via a one-time login link generated by Drush or by using th... Active	10–11	Active	241
Prevent Version Disclosure Covered by security advisories Module This module prevents the disclosure of Drupal's version number in JavaScript asset URLs. It hashes the version query parameter, making it harder for malicious actors to identify sp... Active	10–11	Active	238
Rel Attributes Filter Covered by security advisories Module This module adds filters to the CKEditor that allow you to easily add `rel="noreferrer"`, `rel="noopener"`, and `rel="nofollow"` attributes to links. Slowing	8–11	Slowing	235
X-Originating-IP email header Covered by security advisories Module This module adds the X-Originating-IP header to outgoing emails, including the IP address of the user who submitted a request to your website. This helps track the source of spam o... Dormant	9–10	Dormant	222
Restrict route by IP Covered by security advisories Module This module allows you to restrict access to specific routes on your Drupal site based on IP addresses or IP address ranges. You can define these restrictions using various formats... Active	10–11	Active	213
Email Login OTP Module This module allows users to set up and use email-based One-Time Passwords (OTPs) for two-factor authentication. After setup, users will receive an OTP via email during login, which... Dormant	9–11	Dormant	212
Trusted Proxy Headers Debug Module This module helps debug and configure trusted proxy headers, essential for accurately detecting client IPs on sites behind proxies. It provides a report detailing proxy settings an... Active	8–10	Active	205