Forge

This plugin allows your application to securely store secrets such as usernames, passwords, tokens, certificates or other sensitive information (strings) on iOS & Android phones.

This plug-in provides an extra layer of security to HTTPS communications.

This plugin enables you to keep your mobile application's sensitive data safe using a ciphered Local Storage database.

Encrypt and decrypt strings.

The ClientIPVerifier component allows restrict the access to applications for specific IP Networks or a list of IP addresses.

The goal is to enable the IP filtering on Reactive and Mobile applications, similar with what we can achieve with the InternalOnly flag on Traditional web applications.

Function for encrypting information, ideal for use in IDs in screen transitions, according to the demo.

This is a demo of implementing 2FA using Time based OTP with apps like Google Authenticator or Microsoft Authenticator. 

The component helps you manage password policies

This application consists of an example, how to hide url parameters which get exposed when we navigate from any list screen to details screen, where we need to pass input parameters to filter query result over the screen.

Easy declarative client & server data validation

Implementation of the FIDO2 .NET Library (Webauthn)

This library will allow users to web authenticate using passkey using the concept of Webauthn.

File inspector, using MIME Detective integration for binary content sniffing.

Mime-Detective is a blazing-fast, low-memory file type detector for .NET. It uses Magic-Number and Magic-Word signatures to accurately identify over 14,000 different file variants by analyzing a raw stream or array of bytes.
https://github.com/MediatedCommunications/Mime-Detective

Connector for HashiCorp Vault Core API methods including authentication via Userpass, AppRole and JSON Web Token.

ALTCHA is a free, open-source CAPTCHA alternative that protects your website from spam and abuse.

ALTCHA uses a proof-of-work mechanism to protect your website, APIs, and online services from spam and unwanted content. Unlike other CAPTCHA solutions, ALTCHA is free, open-source and self-hosted, does not use cookies nor fingerprinting, does not track users, and is fully compliant with GDPR.

Crypto Keys Manager is a solution to provide RSA keys to encrypt/decrypt data

Cloudmersive Virus API lets you scan files and content for viruses and identify security issues with content.

Integration with the generic key value store version 2 of HashiCorp Vault. Securly store and retrieve arbitrary data with versioning support.

Integration with HashiCorp Vault Time-based One-Time Password (TOTP) secrets engine. Generate one time codes for TOTP providers or act as a TOTP provider and verify one-time passwords.

This Plugin is a security plugin for Cordova that detects:
Root access
Frida instrumentation
Jailbreak status
Frida runtime detection

Smart Screen Lock (PIN & Auto-Lock) adds an extra security layer to any OutSystems Reactive application by automatically locking the screen after user inactivity and requiring a PIN to unlock. The lock remains active even after page refresh, ensuring sensitive dashboards and data stay protected at all times. Fully reusable and configurable, it is ideal for finance, HR, healthcare, admin, and any screen containing confidential information.

The OutSystems 11 (O11) Service Account Manager is the server-side Forge component that acts as the Authorization Server for the OutSystems 11 and ODC interoperability solution.

Its main responsibilities are:

Managing "Service Accounts" (Client IDs and Secrets).

Generating and storing Private/Public key pairs for signing tokens.

Issuing time-limited, signed JSON Web Token (JWT) Access Tokens upon receiving credentials.

Validating incoming tokens on O11 REST API requests to verify the signature and expiration.

It implements the Service Account pattern using RS256 asymmetric encryption.