Records what admin users change, their logins and pages visited, lets staff restore changes, end active sessions and get emails about login attempts.
Verified Magento 2 Directory
Magento 2 Security Extensions
Two-factor authentication, CAPTCHA, CSP, fraud prevention and admin hardening.
Choosing the Right Security Extension for Your Store
Looking for the best Magento 2 Security extensions? Our verified catalog breaks down features, pricing, and architecture compatibility across all top vendors.
Verified Security Extensions
Showing 40 extensions with verified pricing and architecture compatibility.
Records admin logins, failed logins and changes to products, categories and customers in filterable grids, with CSV/XML export and scheduled cleanup of old logs.
Records what admin users change, visit and log into, lets you roll back recent changes, manage active sessions and get alerts about suspicious logins.
Logs admin actions, failed logins and page visits, shows changed fields and allows reverting edits.
Limits what each admin role can see and do, by store view, category, product, attribute, customer and sales section, with time windows and an edit log.
Limits what each admin role can see and edit, by website, store view, category, product, attribute, customer and order, with product ownership controls.
Lets storefront customers sign in to their Magento account with Microsoft Azure Active Directory single sign-on instead of a separate store password.
GraphQL
Lets shoppers register a fingerprint or face scan through WebAuthn and then sign in to the store without typing a password.
GraphQL
Creates scheduled or manual Magento backups of database, media and system files and uploads them to Google Drive or Dropbox, removing old copies automatically.
Displays a cookie consent bar or popup with Google Consent Mode v2 signals and country-based targeting so stores can collect visitor consent before tracking.
Cookie consent banner and settings panel with consent log, cookie blocking, geo-targeting and Google Consent Mode v2 support.
Free extension that shows a simple cookie notice popup with an accept button and a link to a policy page, with editable text and colors.
Requires shoppers to sign in before viewing the store or chosen products, categories, CMS, cart or checkout pages, with a configurable login popup and redirects.
GraphQL
Official Forter module connecting Magento orders to Forter's fraud prevention service.
Scores orders against MaxMind minFraud services and can hold risky orders automatically based on a configurable threshold.
GDPR tools covering cookie consent, data export, account deletion and anonymisation of old order data.
Protects storefront forms and checkout from bots and carding attempts using Google invisible reCAPTCHA with adjustable sensitivity.
Lets admins open a customer's storefront account in one click from customer or order screens, with a log of every login session.
Puts the storefront behind a maintenance or coming soon page with countdown, signup form and IP whitelist, and switches back to live at a set time.
GraphQL
Riskified's Magento 2 decider module connecting store orders to Riskified's fraud review service.
Blocks orders that match configurable rules, with add-ons for email, IP and geo matching.
Store security toolkit with a vulnerability scanner, file access checks and admin account monitoring free, plus malware detection and login and file alerts in paid plans.
Bundle of four admin and storefront security modules covering bot protection, admin activity logging, two-factor login and role permissions.
Bundle of admin login security, security checklist and admin action log.
Official Signifyd module connecting Magento orders to Signifyd's fraud protection service.
Protects storefront forms from spambots with honeypot fields and email or domain restrictions, logging blocked submissions and emailing daily reports.
Adds time-based one-time password login to the Magento admin, with QR setup and trusted IP exceptions.
US state privacy compliance toolkit with consumer rights dashboard, data access, opt-out, deletion, consent checkboxes and geo-targeting.
Logs admin user actions for auditing.
Hardens admin login with lockouts, IP and country restrictions.
Age Gate/Verification/Restriction for Magento 2 developed by Ulmod. Enhances your store with reliable e-commerce functionality.
Akismet spam filtering for store forms.
Blocks spam queries in catalog search.
CSP Reports for Magento 2 developed by Plumrocket. Enhances your store with reliable e-commerce functionality.
Manages Content Security Policy whitelist entries from the admin.
Cloudflare Turnstile CAPTCHA for Magento 2 developed by Webkul. Enhances your store with reliable e-commerce functionality.
Discourages copying of store text and images.
CSP helper utilities
DDoS Firewall Protection for Magento 2 developed by Webkul. Enhances your store with reliable e-commerce functionality.
Option to turn off admin two-factor authentication (dev use)