Honeypot Toolkit
by Jeff Sterup · Login & Users
Also makes 1 other plugin · 10.4K+ installs across the portfolio →
Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.
78 health vs 59 average across 1,442 Login & Users plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Well optimized
Biggest win: Support resolution
To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.
Get the full rank-higher report →Daily downloads
Since 2022-10-05 · 1,425 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
147
now · peak 1.2K
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Rating trend
Star average over time · dips mark rough releases
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Occasionally updatedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
1
releases in the last 12 months
7mo ago
latest release · v5.0.4
45
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin · 87% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “400+”. Our estimate pins where the real number sits.
Refined from the date this plugin crossed into its current band.
Install history · since 2020-09-24 · 1,422 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.
Details
Recent reviews
All reviews on wp.org ↗- ★★★★★ techguysa4mo ago
Warning to all make your white list range short. I thought i white listed it i know its the case on wordfence but i manage to let it think i the admin made it think it was a bot and locked me out. If this is the case use Tor browser to log in since it changes the IP there. 3 stars cause im not 100% sure if this is really working its doing some good heavy lifting but support from these pages seem non existant. not mine just other people. but if your IP is 80.50.10.125 make it 80.50.10.124 – 80.50.10.126 if it happens again cause i swear i did this im gonna loose my mind spent 1 hour trying to figure out WHIHC WAF got triggered
Read on wp.org ↗ - ★★★★★ dichternebel2.8y ago
This plugin does the job very well. Besides using Project Honyepot and Spamcop, I really love the additional Login and 404 handling that protects from brute force attacks. In combination with a 2FA login plugin this makes me finally feel a lot safer using WordPress. Thanks a lot!
Read on wp.org ↗ - ★★★★★ thorsten1073.6y ago
Nevertheless, 10 messages come to spam on day via the contact form. This plugin does not block anything
Read on wp.org ↗ - ★★★★★ Andrea4.7y ago
with version 5.8.2 (also multiste)
Read on wp.org ↗ - ★★★★★ ogbcashdown5.4y ago
Has been very effective in blocking malicious traffic to my site.
Read on wp.org ↗ - ★★★★★ Boretsyan5.5y ago
Hi there, I have installed Honeypot Toolkit plugin on my website, the status is: @ – Honey Pot Active but I haven’t any data in activity list in plugin. I have verified script and the dedicated link is on all my pages but now activity yet! What should I do to enable this plugin and make it working?
Read on wp.org ↗ - ★★★★★ caffeinefiend6.7y ago
I’m really enjoying using the Honeypot. In the past i was using cloudflare and plugins just to block the little blights. Now its a enjoyable sport to see how many of the pests i caught each morning. So to me this is much like going fishing, but here we are just catching the invasive pests. The plugin works really well and even though my version of WordPress is quite a bit newer (5.3.2) than the supported i’ve had no problems at all. Its nice to run a plugin that benefits the larger community whilst making everything so simple to install and use. I’ve even taken to using an advertisement manager plugin to switch the trap links and allow me to change my trap bait as i call it. Like i said its a great sport!
Read on wp.org ↗ - ★★★★★ jodisolbrig8.3y ago
This plugin is working very well and gives easy logging of failed logins, spammers, and bots.
Read on wp.org ↗
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0.1
Languages
via translate.wordpress.orgTranslated into 2 languages, 0 at 90% or more
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2025-06-17 500+ → 400+ down after 1 days in tier
- 2025-06-16 400+ → 500+ up after 1 days in tier
- 2025-06-15 500+ → 400+ down after 1 days in tier
- 2025-06-14 400+ → 500+ up after 1 days in tier
- 2025-06-13 500+ → 400+ down after 1 days in tier
- 2025-06-12 400+ → 500+ up after 1 days in tier
- 2025-06-11 500+ → 400+ down after 1 days in tier
- 2025-06-10 400+ → 500+ up after 2 days in tier
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
eSherpa Login Guard — installs · 3.6★ · 2 shared tags B -
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection 700K+ installs · 4.6★ · 1 shared tag A
-
CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 300K+ installs · 3.8★ · 1 shared tag B -
Spam protection, Honeypot, Anti-Spam by CleanTalk 200K+ installs · 4.7★ · 1 shared tag A -
Gravity Forms Zero Spam 100K+ installs · 4.2★ · 1 shared tag A -
Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter 50K+ installs · 4.4★ · 1 shared tag A
Embed this report card
Drop a live Pulse card for Honeypot Toolkit into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/honeypot-toolkit" width="480" height="300" style="border:0" loading="lazy" title="Honeypot Toolkit — Plugin Pulse"></iframe> Honeypot Toolkit: 400+ active installs, 4.3★ (9 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/honeypot-toolkit