Headless REST API Security
by Md. Rakib Ullah · Uncategorized
Also makes 1 other plugin · 30+ installs across the portfolio →
Manage access to the WordPress REST API by restricting public endpoints, enabling specific route allow-listing, and handling API key authentication.
79 health vs 56 average across 16,379 Uncategorized plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Biggest win: Rating quality
To rank higher: Too few reviews to rank on quality — nudge happy users to leave one.
Get the full rank-higher report →Daily downloads
Since 2026-01-20 · 223 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
230
now · peak 230
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Occasionally updatedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
2
releases in the last 12 months
6mo ago
latest release · v2.3
2
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “30+”. Our estimate pins where the real number sits.
Refined from the date this plugin crossed into its current band.
At the current install trend, crossing 40+ in roughly 91 days.
Install history · since 2026-01-21 · 178 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.
Details
Recent reviews
All reviews on wp.org ↗- ★★★★★ Ridhwan Ahsan7mo ago
Excellent plugin! Secures my headless WordPress API quickly and easily. Works perfectly with Next.js and mobile apps
Read on wp.org ↗ - ★★★★★ Ashikjs7mo ago
Great plugin. Simple setup, easy to use, and it effectively secures my site’s REST API. Highly recommend.
Read on wp.org ↗
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-06-18 20+ → 30+ up after 61 days in tier
- 2026-04-18 10+ → 20+ up after 10 days in tier
- 2026-04-08 20+ → 10+ down after 27 days in tier
- 2026-03-12 10+ → 20+ up after 26 days in tier
- 2026-02-14 — → 10+ up
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
Sticklight 200+ installs · 3.6★ · 3 shared tags B -
WPGraphQL 30K+ installs · 4.7★ · 2 shared tags A -
BabyLoveGrowth Integration 2K+ installs · 3.6★ · 2 shared tags B -
CoCart – Headless REST API for WooCommerce 900+ installs · 4.5★ · 2 shared tags A - L Logged-in-only 700+ installs · 4.3★ · 2 shared tags A
-
Easy Basic Authentication – Add basic auth to site or admin area 700+ installs · 4.1★ · 2 shared tags A
Embed this report card
Drop a live Pulse card for Headless REST API Security into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/headless-rest-api-security" width="480" height="300" style="border:0" loading="lazy" title="Headless REST API Security — Plugin Pulse"></iframe> Headless REST API Security: 30+ active installs, 5.0★ (2 reviews). Plugin Pulse (WP Mayor), as of 2026-08-31. https://plugins.wpmayor.com/plugin/headless-rest-api-security