Security Suite for Drupal

Main Features

• Easy to install. Unzip the module into the modules folder of your website and install it in Extend; a "Security Suite" item appears in the administration menu.
• Security dashboard. One protection score for six measures: file scan, database scan, blacklists, firewall, login protection and 24/7 monitoring, with a link to fix each one.
• Server-side file scan. Your files are checked on the SiteGuarding servers against our malware database and heuristic rules; the report opens on SiteGuarding.com and a copy is sent by email.
• Database scan. The body of your content (basic pages, articles), custom blocks, taxonomy term descriptions and the site configuration are checked for injected external links, hidden frames, scripts and spam words; nothing leaves your server.
• Blacklist check. Your domain is checked with Google and more than 30 other security vendors that browsers and antivirus software use.
• Login protection. A Google reCAPTCHA check before the login and password reset pages, and for the login block on any page, stops automated password guessing.
• Two-factor authentication. Each administrator can add a code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others); the code is also asked for one-time login links and the JSON login, and repeated wrong codes lock the account for 15 minutes.
• Trusted addresses. No code is asked from the IP addresses you trust, for example your office.
• Login log and alerts. See the recent logins and get an email or Telegram message about successful logins and failed logins to existing accounts.
• Administrator accounts review. User 1 and all accounts with the administrator role in one list, so an unknown account is easy to spot.
• Update overview. Your Drupal version and the Security Suite updates on one screen.
• SiteGuarding firewall. With the SiteGuarding subscription our team installs the firewall that blocks SQL injection, file inclusion, web shells, malicious uploads and bad bots before they reach your website.
• SiteGuarding dashboard. Connect your website to your SiteGuarding account for cloud monitoring and one-click malware removal requests.
• Works behind Cloudflare and proxies. The real visitor address is read from trusted proxies only, so a visitor cannot fake it with a header.
• Free support. Our team answers your questions by email; malware removal by our security experts is available any time.