Libraries tagged by Magento 2 Admin Security

Content Security Policy management for Magento 2: admin whitelist per store and area, violation reports with conversion, semantics-preserving header optimisation and splitting, script hashes for CMS content

Go to Download

Magento2 Admin IP based restriction - Member of MageSpecialist SecuritySuite

Go to Download

Magento2 Admin IP based restriction - Member of MageSpecialist SecuritySuite

Go to Download

Enterprise-grade Magento 2 Admin security suite: passkey (WebAuthn) login with Magento 2FA fallback, trusted devices, lockouts, recovery, migration and health dashboards, diagnostics, security scoring, and audit logging. Admin UI only.

Go to Download

MageSteady CSP Backoffice module for Magento 2 allows you to manage and edit the Content Security Policy (CSP) directly from the admin panel

Go to Download

Active malware prevention + on-disk scanner for Magento 2. Three real-time guards (REST API, universal upload, custom-options) block PolyShell webshells, polyglot files and PHP-object-injection payloads BEFORE they touch disk. A nightly recursive scanner finds anything that slipped through, auto-quarantines critical findings inside writable upload zones, and ships with a built-in vendor allowlist that prevents false positives on legitimate composer dependencies. Includes admin grid, in-admin documentation, signature catalog and email notifications.

Go to Download

A lnot so ightweight Magento 2 module that restricts Admin API token creation to whitelisted IP addresses, enhancing store security.

Go to Download

Security-posture checks (admin hygiene, config hygiene, filesystem exposure, webshell/tamper heuristics) for StackNuts StackGauge, split out so sites that already have dedicated security scanning aren't paying its cost for nothing.

Go to Download

Magento 2 Admin Security

Go to Download

Magento2 Admin IP based restriction - Member of MageSpecialist SecuritySuite

Go to Download

Magento 2 module that adds the ability to whitelist IP addresses for all requests that generate or use an OAuth admin token.

Go to Download

Two-factor authentication for Magento administrators: a passkey or an authenticator app, with a panel-wide policy and per-administrator reset.

Go to Download

Read-only Magento 2 admin grid and REST API over core_config_data. Encrypted values are redacted by default in both; plaintext reveal is REST-only and gated behind a system toggle, an ACL resource, and an explicit request flag.

Go to Download

Manage Magento 2 Content Security Policy whitelist hosts from the admin.

Go to Download

Magento 2 firewall: IP-based visitor tracking, request logging, wildcard IP-range blocking, and exact-IP blocking across storefront, admin, REST, SOAP and GraphQL, with an extensible checker chain for future country, User-Agent, and rate-limit rules.

Go to Download