Subscription Timed Access and user Login - Control who gets access and for how long Control how long Joomla users stay logged in, how often they can log in, and how long their frontend access remains active. Session Length is a Joomla user-access management extension that controls frontend session duration, limits login frequency, and manages timed user subscriptions with automatic expiration. P...

Malware quarantine via hash baseline, shared IP blacklist, brute-force login protection, rate limiting, daily scan, and DB backups for Joomla — all in one component. Site Guard is an all-in-one security component for Joomla that combines several layers of protection that are normally scattered across separate extensions — with zero manual intervention required after setup. MALWARE QUARANTINE...

A Joomla system plugin that grants frontend access during Site Offline mode to a configurable list of IP addresses — without needing a Super User login or lowering the site's security posture for everyone else. Why Joomla's built-in Offline mode only lets in users with the core.login.offline permission (normally Super Users), which means logging in through the offline screen every time you wan...

Daily vulnerability scanning for your installed extensions and the Joomla core, using Joomla's own official vulnerability feeds. Alerts you only when something new is actually found. Houston checks your installed extensions and the Joomla core every day against Joomla's own official vulnerability feeds, and e-mails you only when a genuinely new finding appears. What it does Houston reads every i...

JoomION Admin URL hides your Joomla backend login behind a freely chosen path instead of the well-known /administrator. Features: - Choose an inconspicuous admin path (e.g. /office-k3x9qa7m) or generate a random one - The new path is redirected internally to the administrator login - Optionally block direct access to /administrator for visitors who did not come via your path - Quick icon in the...

Stop e-mailing passwords in plain text. Zero-knowledge encrypted, self-destructing one-time links on your own Joomla site - send credentials to clients, and let them send secrets back. What it does Every agency does it: hosting logins in an e-mail, an API key in a chat, "delete it once you've saved it". That password is still sitting in two Sent folders and a backup. Secure Messages adds zero-k...

MCP server for Joomla 5 and 6 Senso MCP lets AI assistants such as Claude or ChatGPT operate your Joomla site through the open Model Context Protocol (MCP): you ask in plain language, and the assistant does the work on your site. The MCP server runs inside Joomla itself. There is no separate server to host, no Node.js bridge and no script to maintain: install the package, connect your assistant,...

TemplinTech Admin Guard is a Joomla security extension that adds a dedicated pre-authentication access-control layer in front of the Joomla Administrator application. Instead of exposing the standard Administrator login flow directly to every unauthenticated request, TemplinTech Admin Guard allows administrative access to be placed behind an individually generated Gate URL and a separate Access K...

A native Joomla system plugin that disables printing, text selection/copy, image dragging, developer-tools keyboard shortcuts, and the browser's right-click menu on the frontend — with an optional popup message or a fully custom, ARIA-accessible context menu of your own. Rebuilt from the ground up as a Joomla 6-native plugin (PSR-4, SubscriberInterface, DI container via services/provider.php, W...

Know exactly what's hiding in your Joomla site. MuRu Guard is a free, open-source Joomla security suite: a malware scanner component plus a real-time Shield plugin, installed together in one package. It protects every Joomla 3, 4, 5 and 6 site, and it has extra, purpose-built coverage for sites that run SP Page Builder and Helix Ultimate. Built for SP Page Builder and Helix sites Generic scanners...

Send each person to the right page after they sign in, sign out, arrive for the first time, or open the site. One published rule list decides the winner. Login Redirect Manager is a Joomla component with a system plugin and a user plugin for Joomla 4.4, 5, and 6. Why site owners choose it One rule list: after login, after logout, first login, and opening the site Public site, administrator, or...