Detects a visitor's country using GeoIP data. Provides a REST API and PHP interface to retrieve the country code, with fallback options.
Integrates Umami, a privacy-focused open-source web analytics service, with your storefront for cookie-free visitor tracking.
Blocks customer registration with disposable and temporary email addresses by validating against a database of 90,000+ known throwaway domains. Supports custom blocklists and whitelists for fine-grained control.
Tracks admin actions — add, edit, delete, view, mass updates, and failed logins — recording user, IP, and changed fields, with the ability to revert modifications. Maintained fork of the archived KiwiCommerce module.
Intercepts the customer address file upload endpoint and returns a 403 Forbidden response, effectively disabling address file uploads for security hardening.
Allows administrators to disable two-factor authentication for specific admin users. Provides both admin panel and command-line options for managing user 2FA status.
Looking for contributors - Help fix build issues
Detects and blocks suspicious IP addresses based on failed login attempts. Sends warning emails to store owners about potential security threats.
Looking for contributors - Help fix build issues
Enforces stronger admin password rules (forbidden words, upper/lowercase and special-character requirements) and automatically deactivates admin users who have not logged in for 90 days.
Looking for contributors - Help fix build issues
Patches the CVE-2025-54236 (Session Reaper) account-takeover/RCE vulnerability as a universal Magento 2.3/2.4 extension, without using preferences so the store stays upgradable.
Prevents Magento orders from being placed based on configurable rules, with pluggable matchers for blocking by IP, email, or geolocation.
Looking for contributors - Help fix build issues
Manages Magento 2 database variables using files. Allows sharing, versioning, and environment-specific configuration.
Looking for contributors - Help fix build issues
Syncs Magento 2 order and customer data to VESSOT's encrypted storage service, with queue-based processing, mass-action and cron-driven sync, and an admin view of stored data keys.
Looking for contributors - Help fix build issues