Plugin Pulse
← Pulse

Honeypot Toolkit

by Jeff Sterup · Login & Users

Also makes 1 other plugin · 10.4K+ installs across the portfolio →

Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.

⚠ Few reviews
How scoring works →
78 Health · B
Maintenance 85/100
Rating quality 77/100
Support 70/100

78 health vs 59 average across 1,442 Login & Users plugins

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

76 / 100

Well optimized

Biggest win: Support resolution

Update recency 95/100
WP compatibility 100/100
Rating quality 61/100
Listing tuning 100/100
Support resolution 0/100

To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.

Get the full rank-higher report →

Daily downloads

Since 2022-10-05 · 1,425 days · wp.org + Plugin Pulse archive

+39% vs prior 30d
0Downloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

147

now · peak 1.2K

15130d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Honeypot Toolkit · #9404 you eSherpa Login Guard · #57406 Kadence Security · #87 CF7 Apps · #161

Rating trend

Star average over time · dips mark rough releases

4.3Stars · Aug 26

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

378per 1k installs · Aug 26

Release cadence

Occasionally updated
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

1

releases in the last 12 months

7mo ago

latest release · v5.0.4

45

tagged releases on record

Recent releases

5.0.4 · 7mo ago5.0.3 · 1.1y ago5.0.2 · 1.3y ago5.0.1 · 1.3y ago5.0 · 1.4y ago4.5.2 · 1.4y ago4.5.1 · 1.5y ago4.5 · 1.6y ago4.4.4 · 3.4y ago4.4.3 · 3.4y ago4.4.2 · 3.4y ago4.4.1 · 3.8y ago4.4 · 3.8y ago4.3.1 · 4.1y ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 87% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v5.0 87%
v4.4 10%
v4.0 2.4%

Estimated active installs

The public count shows “400+”. Our estimate pins where the real number sits.

tracked estimate
400–500 ≈490

Refined from the date this plugin crossed into its current band.

Install history · since 2020-09-24 · 1,422 observations

400Installs · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

Details

Version
5.0.4
Last updated
7mo ago
Added
2017-12-22 · 8 yrs old
Requires WP
4.6.0
Tested up to
6.9.7
Requires PHP

Recent reviews

All reviews on wp.org ↗
  1. techguysa
    4mo ago

    Warning to all make your white list range short. I thought i white listed it i know its the case on wordfence but i manage to let it think i the admin made it think it was a bot and locked me out. If this is the case use Tor browser to log in since it changes the IP there. 3 stars cause im not 100% sure if this is really working its doing some good heavy lifting but support from these pages seem non existant. not mine just other people. but if your IP is 80.50.10.125 make it 80.50.10.124 – 80.50.10.126 if it happens again cause i swear i did this im gonna loose my mind spent 1 hour trying to figure out WHIHC WAF got triggered

    Read on wp.org ↗
  2. dichternebel
    2.8y ago

    This plugin does the job very well. Besides using Project Honyepot and Spamcop, I really love the additional Login and 404 handling that protects from brute force attacks. In combination with a 2FA login plugin this makes me finally feel a lot safer using WordPress. Thanks a lot!

    Read on wp.org ↗
  3. thorsten107
    3.6y ago

    Nevertheless, 10 messages come to spam on day via the contact form. This plugin does not block anything

    Read on wp.org ↗
  4. Andrea
    4.7y ago

    with version 5.8.2 (also multiste)

    Read on wp.org ↗
  5. ogbcashdown
    5.4y ago

    Has been very effective in blocking malicious traffic to my site.

    Read on wp.org ↗
  6. Boretsyan
    5.5y ago

    Hi there, I have installed Honeypot Toolkit plugin on my website, the status is: @ – Honey Pot Active but I haven’t any data in activity list in plugin. I have verified script and the dedicated link is on all my pages but now activity yet! What should I do to enable this plugin and make it working?

    Read on wp.org ↗
  7. caffeinefiend
    6.7y ago

    I’m really enjoying using the Honeypot. In the past i was using cloudflare and plugins just to block the little blights. Now its a enjoyable sport to see how many of the pests i caught each morning. So to me this is much like going fishing, but here we are just catching the invasive pests. The plugin works really well and even though my version of WordPress is quite a bit newer (5.3.2) than the supported i’ve had no problems at all. Its nice to run a plugin that benefits the larger community whilst making everything so simple to install and use. I’ve even taken to using an advertisement manager plugin to switch the trap links and allow me to change my trap bait as i call it. Like i said its a great sport!

    Read on wp.org ↗
  8. jodisolbrig
    8.3y ago

    This plugin is working very well and gives easy logging of failed logins, spammers, and bots.

    Read on wp.org ↗

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Low memory footprint
Low page-speed impact
Runs on latest PHP + WP
No PHP errors
No JS errors
Activates cleanly
No resource errors
No external HTTP errors
Optimized database use
Frequently updated

Languages

via translate.wordpress.org

Translated into 2 languages, 0 at 90% or more

Dutch (Belgium) 80%
Swedish 80%

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2025-06-17 500+ → 400+ down after 1 days in tier
  2. 2025-06-16 400+ → 500+ up after 1 days in tier
  3. 2025-06-15 500+ → 400+ down after 1 days in tier
  4. 2025-06-14 400+ → 500+ up after 1 days in tier
  5. 2025-06-13 500+ → 400+ down after 1 days in tier
  6. 2025-06-12 400+ → 500+ up after 1 days in tier
  7. 2025-06-11 500+ → 400+ down after 1 days in tier
  8. 2025-06-10 400+ → 500+ up after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for Honeypot Toolkit into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/honeypot-toolkit" width="480" height="300" style="border:0" loading="lazy" title="Honeypot Toolkit — Plugin Pulse"></iframe>
Preview card ↗

Honeypot Toolkit: 400+ active installs, 4.3★ (9 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/honeypot-toolkit