Search Drupal Projects

Find modules, themes, and distributions by name or by what they do. Descriptions are matched against each project's plain-language summary, and results can be narrowed to a Drupal core version or to projects that are still actively maintained.

479 projects matching these filters · most installed first

Project	Drupal	Maintenance	Installs
File Visibility Covered by security advisories Module This module automatically manages file storage, moving files to private storage when an entity using them is not publicly accessible, and to public storage when the entity becomes... Dormant	—	Dormant	90
AbuseIPDB Module This module connects your Drupal site to the AbuseIPDB database, allowing you to check IP addresses for malicious activity and report suspicious traffic. It can help protect your s... Slowing	10–11	Slowing	89
Webform Ban Module This module integrates with the core Ban module to automatically ban IP addresses that submit webforms, helping to prevent spam. Active	9–11	Active	89
Lockr Covered by security advisories Module Lockr is an off-site secrets management service that securely stores API and encryption keys for your Drupal site. It encrypts your secrets and stores them using industry best prac... Dormant	9–10	Dormant	84
Email change verification Covered by security advisories Module This module adds an extra step to the email change process for users. When a user changes their email, a verification email is sent to the new address. The email change only become... Dormant	9–10	Dormant	81
HTTP Parameter Pollution Module This module helps prevent security vulnerabilities by cleaning up duplicate query parameters in URLs. It automatically removes earlier instances of repeated parameters and redirect... Active	9–11	Active	81
HTTP-Headers Cleaner Covered by security advisories Module This module allows you to remove unnecessary or sensitive information from HTTP headers and meta tags. You can configure which elements to remove and define custom patterns to iden... Slowing	10–11	Slowing	80
SAML SSO - Identity Provider Covered by security advisories Module This module allows your Drupal site to act as a central authentication system, enabling single sign-on (SSO) for users to access multiple other applications using their Drupal logi... Active	9–11	Active	78
Seckit CSP Nonce Module This module enhances website security by automatically adding unique "nonce" attributes to all inline JavaScript. It allows you to enforce strict Content Security Policy (CSP) rule... Active	9–11	Active	77
Website Security - Secure Login / Network Security Covered by security advisories Module This module enhances Drupal website security by preventing brute-force attacks, monitoring and blocking malicious IP addresses, enforcing strong passwords, and offering denial-of-s... Active	8–11	Active	75
Configurable Anonymizer Covered by security advisories Module This module provides a Drush command to anonymize data in configured fields within Drupal. It allows for field-level anonymization with an extensible plugin system for different fi... Slowing	11	Slowing	75
Drupal Website Security Module This project provides a collection of essential contributed modules and configurations designed to enhance the security of a Drupal website. It aims to streamline the process of im... Active	11	Active	74
PHP Password Covered by security advisories Module This module enhances Drupal's password security by replacing the default hashing algorithm with a more modern and secure method provided by PHP. It also includes forward compatibil... Dormant	10–11	Dormant	71
Session Inspector Covered by security advisories Module This module allows users to view and manage their active sessions on a Drupal site, enabling them to close any sessions they don't recognize for improved security. Users can access... Active	10–11	Active	71
OneLogin Integration Covered by security advisories Module This module allows users to log in to Drupal using OneLogin via SAML authentication. It provides a Drupal 8 compatible implementation of SAML login functionality. Slowing	11	Slowing	71
Session Invalidator Module This module automatically invalidates all active user sessions when a user changes their password. This ensures that any unauthorized access is immediately revoked, forcing users t... Dormant	8–10	Dormant	70
Anonymous Publishing Covered by security advisories Module This module enhances control over anonymous content publishing, allowing users to post without an account or enabling authenticated users to publish anonymously. It offers features... Dormant	—	Dormant	69
Role Log Covered by security advisories Module This module logs changes to user roles and their active or blocked status within Drupal. These events, including UI, Drush, or programmatic changes, are recorded in Drupal's event... Dormant	9–11	Dormant	67
Cryptolog Covered by security advisories Module Cryptolog enhances user privacy by logging a daily rotating, hashed version of client IP addresses instead of their actual values. This allows for basic statistical analysis while... Active	11	Active	65
Encrypt KMS Covered by security advisories Module This module integrates with AWS KMS (Key Management Service) to encrypt data for your Drupal site. It allows you to use your AWS KMS encryption key to protect sensitive information... Active	8–11	Active	63
HTTP Anti-virus Covered by security advisories Module This module sends uploaded files to a configurable HTTP service for validation. The service's response determines whether Drupal accepts the file, offering a way to integrate antiv... Active	10–11	Active	62
REST Mail Login Module This module enables user login via email and password through a RESTful API. It provides a new route where you can send an email and password to log in, receiving a response simila... Dormant	8–10	Dormant	62
TFA Email Support Module This module adds email as a Two-Factor Authentication (2FA) option to the core TFA module. It allows users to receive a one-time passcode via email as a second step during login. Slowing	10–11	Slowing	62
EXIF Manipulate Covered by security advisories Module This module removes privacy-sensitive EXIF metadata, such as location data, from uploaded images. It aims to offer extension points for both stripping unwanted data and inserting n... Active	10–11	Active	61
Logout Redirect Module This module prevents users from seeing cached pages of a previous session after logging out by redirecting them to the login page or a custom URL. This is useful for public compute... Dormant	9–10	Dormant	61