Bromate REST API Firewall
Security, access control and data protection for headless WordPress. Authentication, JWT support, route policies, rate limiting, response hardening and WordPress security tools in a single plugin.
by Sophabed · github.com/afterglowweb/wordpress-rest-api-firewall-v2
★ 0stars
0forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/afterglowweb/wordpress-rest-api-firewall-v2/archive/refs/heads/main.zipReadme
Bromate REST API Firewall
Bromate REST API Firewall sits between WordPress and your client applications.
| Feature | Description |
|---|---|
| Authentication | JWT and WordPress Users Application Passwords |
| Rate Limiting | Configurable request quotas with auto-blacklist on violations |
| Login Hardening | Login form limiting protection |
| IP Filtering | IPv4/IPv6 blacklisting, CIDR ranges, country-level blocking (GeoIP) |
| Routes Control | Enforce authentication, disable sensitive routes, per-route authenticated users |
| Response Transforms | resolve embedded data, flatten rendered fields, strip domain from URLs |
| Response Cache | |
| WordPress Security | Disable XML-RPC, comments, pingbacks, RSS; enforce security headers; secure file permissions |
| Application Only Mode | Enforces headless-only access |
Requirements
- WordPress 6.0+
- PHP 7.4+
Install
1. Download or clone this repository into your wp-content/plugins/ directory
cd wp-content/plugins/
git clone https://github.com/AfterglowWeb/wordpress-rest-api-firewall-v2.git bromate-rest-api-firewall2. Activate the plugin through the WordPress admin
3. Navigate to the Bromate REST API Firewall admin page.
Contributing
Contributions are welcome! Please open an issue or submit a pull request.
License
GPL-2.0-or-later