Forge

This plugin allows your application to securely store secrets such as usernames, passwords, tokens, certificates or other sensitive information (strings) on iOS & Android phones.

This plug-in provides an extra layer of security to HTTPS communications.

This plugin enables you to keep your mobile application's sensitive data safe using a ciphered Local Storage database.

Encrypt and decrypt strings.

The ClientIPVerifier component allows restrict the access to applications for specific IP Networks or a list of IP addresses.

The goal is to enable the IP filtering on Reactive and Mobile applications, similar with what we can achieve with the InternalOnly flag on Traditional web applications.

Function for encrypting information, ideal for use in IDs in screen transitions, according to the demo.

This is a demo of implementing 2FA using Time based OTP with apps like Google Authenticator or Microsoft Authenticator. 

The component helps you manage password policies

Easy declarative client & server data validation

Implementation of the FIDO2 .NET Library (Webauthn)

This library will allow users to web authenticate using passkey using the concept of Webauthn.

This application consists of an example, how to hide url parameters which get exposed when we navigate from any list screen to details screen, where we need to pass input parameters to filter query result over the screen.

File inspector, using MIME Detective integration for binary content sniffing.

Mime-Detective is a blazing-fast, low-memory file type detector for .NET. It uses Magic-Number and Magic-Word signatures to accurately identify over 14,000 different file variants by analyzing a raw stream or array of bytes.
https://github.com/MediatedCommunications/Mime-Detective

Connector for HashiCorp Vault Core API methods including authentication via Userpass, AppRole and JSON Web Token.

Cloudmersive Virus API lets you scan files and content for viruses and identify security issues with content.

Integration with HashiCorp Vault Time-based One-Time Password (TOTP) secrets engine. Generate one time codes for TOTP providers or act as a TOTP provider and verify one-time passwords.

ALTCHA is a free, open-source CAPTCHA alternative that protects your website from spam and abuse.

ALTCHA uses a proof-of-work mechanism to protect your website, APIs, and online services from spam and unwanted content. Unlike other CAPTCHA solutions, ALTCHA is free, open-source and self-hosted, does not use cookies nor fingerprinting, does not track users, and is fully compliant with GDPR.

Crypto Keys Manager is a solution to provide RSA keys to encrypt/decrypt data

Integration with the generic key value store version 2 of HashiCorp Vault. Securly store and retrieve arbitrary data with versioning support.

Integration with HashiCorp Vault AWS secrets engine. Create on-demand, time based Amazon Web Services credentials.

Use this plugin to add an extra layer of security for your app by detecting if the device was rooted (on android) or jailbreaked (on iOS).

The WebOTP API component for OutSystems Forge is a powerful tool designed to enhance user authentication in web applications by seamlessly integrating One-Time Password (OTP) functionality. This component allows developers to easily implement OTP reading capabilities directly within their screens or blocks, streamlining the verification process for users. By leveraging the WebOTP API, this component enables automatic detection and retrieval of OTPs sent via SMS, improving user experience and reducing friction during login or transaction verification. With simple integration, the WebOTP API component is an essential addition for any web application seeking to enhance security and user convenience.