"Have I Been Pwned?" is a free service to check if an account was compromised in a data breach: Syncope can use it to make stronger checks on passwords
Security-centric Enduser application enabled with CSRF / XSRF and CAPTCHA
Need to comply with cumbersome account or password policies?