Security Suite

 Security Suite extension for Magento helps store owners protect their Magento stores with a complete set of security and monitoring features in one place. It combines 2 Factor Authentication (2FA), Brute Force Protection, IP and country-based access restriction, and Admin Activity logging to secure both the storefront and admin panel against unauthorized access, suspicious traffic, and risky backend activity.

The security suite extension for Magento adds a second-factor authentication for your admins and customers. To access the account, one must go through an additional layer of authentication in addition to the standard login and password verification method. Security suite extension also monitors failed login attempts across admin and customer accounts, applies delays after invalid login attempts, temporarily or permanently locks suspicious accounts, and helps prevent automated brute force attacks. It also protects forgot-password forms, making it harder for attackers and bots to abuse authentication-related pages. At the same time, store owners can restrict access based on IP address or country, allowing them to block malicious visitors, reduce unwanted traffic, and prevent access from high-risk regions before threats even reach critical areas of the store.

In addition to protection controls, Security Suite provides full visibility into backend activity. It records admin login and logout activity, captures login attempt details such as username, timestamp, IP address, and success or failure status, and tracks important CRUD actions across products, categories, orders, customers, CMS content, taxes, admin users, roles, and permissions. It also helps store owners monitor active admin sessions, review suspicious behavior, and maintain a reliable audit trail for security, compliance, and operational review.

With per-store and per-site configuration support, Security Suite is suitable for multi-store Magento environments. It offers a centralized way to strengthen store security, control access, monitor administrative activity, and maintain better visibility across the entire Magento ecosystem.

Account & Pricing -

You do not need to create an account or register with miniOrange to use our free version. 

If you face any issues while setting up this extension please contact us at magentosupport@xecurify.com

To use extensions premium features, you can upgrade to our premium plans. You can check the features and pricing for Premium versions here.

Features -

• Authentication Methods - 15+ 2nd factor authentication methods including OTP over Email, OTP over SMS and OTP over SMS and Email, Google Authenticator, Microsoft Authenticator, Duo Authenticator etc.
• Admin 2FA :- Enable 2FA for your store admins with an option to enable specific method or allow admins to choose 2A method of their choice. 
• Customer 2FA : - Enable 2FA for customers with KBA as a back method. Also, allow customers to authenticate with a specific 2FA method or allow them to choose the method of their choice.
• Brute Force Protection for Admin and Customer Accounts - Secures both admin and customer login areas against repeated unauthorized login attempts.
• Failed Login Attempt Monitoring and Alerts - Tracks failed login attempts and sends warning emails for suspicious login activity.
• Login Delay and Account Lockout Controls - Applies delays, temporary lockouts, and permanent locks after repeated failed attempts.
• Forgot Password Form Protection - Protects admin and customer forgot-password forms from abuse and automated attacks.
• One-Click Account Unblock - Allows admins to quickly unblock locked accounts directly from the Magento admin panel.
• IP-Based Access Restriction - Blocks specific IP addresses from accessing the storefront, login pages, or admin panel.
• Country-Based Blocking with GeoIP - Restricts store access for visitors from selected countries using GeoIP-based detection.
• Admin Login Activity Tracking - Logs admin login and logout events with details such as username, timestamp, IP address, and login status.
• Active Session Monitoring and Session Control - Displays active backend sessions, shows concurrent sessions per admin, and allows session termination.
• Complete Admin Audit Trail - Tracks create, update, and delete actions across products, categories, orders, customers, CMS, taxes, shipments, invoices, and more.
• User, Role, and Permission Change Logging - Records admin user management, role changes, and permission updates for accountability and compliance.
• Exportable Logs and Multi-Store Configuration - Supports log export in CSV and Excel XML formats, automated log cleanup via cron, and per-store/per-site configuration for multi-store setups.
  

Custom feature requirements -

If you want any custom changes or features in this extension, let us know your requirement on magentosupport@xecurify.com and we will add that feature in the extension for you.

Dependencies

NONE

24/7 Support

In case you face any issues or if you have any questions, please feel free to reach out to us on our 24*7 active support at magentosupport@xecurify.com or Contact us.

Website

Check out our website for other extensions from the link here or visit https://plugins.miniorange.com/magento to see all our listed Magento extensions. For more support or info email us at magentosupport@xecurify.com. You can also submit your query from the extension’s  configuration page.