Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/afterglowweb/wordpress-rest-api-firewall-v2/archive/refs/heads/main.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Bromate REST API Firewall sits between WordPress and your client applications.
| Feature | Description |
|---|---|
| Authentication | JWT and WordPress Users Application Passwords |
| Rate Limiting | Configurable request quotas with auto-blacklist on violations |
| Login Hardening | Login form limiting protection |
| IP Filtering | IPv4/IPv6 blacklisting, CIDR ranges, country-level blocking (GeoIP) |
| Routes Control | Enforce authentication, disable sensitive routes, per-route authenticated users |
| Response Transforms | resolve embedded data, flatten rendered fields, strip domain from URLs |
| Response Cache | |
| WordPress Security | Disable XML-RPC, comments, pingbacks, RSS; enforce security headers; secure file permissions |
| Application Only Mode | Enforces headless-only access |
Requirements
- WordPress 6.0+
- PHP 7.4+
Install
1. Download or clone this repository into your wp-content/plugins/ directory
cd wp-content/plugins/
git clone https://github.com/AfterglowWeb/wordpress-rest-api-firewall-v2.git bromate-rest-api-firewall2. Activate the plugin through the WordPress admin
3. Navigate to the Bromate REST API Firewall admin page.
Contributing
Contributions are welcome! Please open an issue or submit a pull request.
License
GPL-2.0-or-later