Protection Against DDoS

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ Eli

   6.4y ago

   Our site was being attacked heavily using exactly the technics for which this plugin was creating for. I cannot thank the creator enough for providing it to the public free of charge. Thank you so much for your contribution. My only concern is that it hasn’t been updated for quite sometime, I really hope it’s not abandoned. I’m surprised this product doesn’t have more reviews and more downloads, I guess it hasn’t had enough promotion. Thank you so much @wpchef, please keep it alive!

   Read on wp.org ↗
2. ★★★★★ kcwebguy

   7.0y ago

   I was having a major DDOS against a number of my websites… the attack was taking down my entire VPS and affecting my entire business. I deployed this plugin to all of my sites and saw immediate relief from the attack. I took a screenshot of my load graph with an arrow at the point in time I deployed this plugin. My thanks to this author for a clever and effective plugin. This topic was modified 6 years, 10 months ago by Jan Dembowski. Reason: Deleted link

   Read on wp.org ↗
3. ★★★★★ Gahapati

   9.9y ago

   When I first came across Protection Against DDoS, I was impressed by the simplicity of the idea and the effectiveness of its execution. Assuming that DDoS attacks will hardly be carried out by lone hackers armed with web browsers, it’s reasonably safe also to assume that accepting and returning cookies will be among the least of their concerns. In which case the attack is stopped dead in its track very early on, in fact before WordPress is even asked to start up its engine. When I first tested this plugin, unfortunately it was not compatible with WP Multisite, yet. But within days of pointing this out to the developer, Protection Against DDoS was updated accordingly! The plugin has earned a permanent resident status in my toolbox! This topic was modified 9 years, 2 months ago by Gahapati. Reason: Updated WP Version

   Read on wp.org ↗
4. ★★★★★ 2by2host

   10.1y ago

   We use this when a WordPress site gets bombarded with bogus traffic and see the results within minutes. We can see how HTTP requests drop right after the plugin is installed. This plugin should be a must for any site.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.5.2 Added access control for autodiscover/autodiscover.xml and wpad.dat. 1.5.2
2. — Version 1.5.1 Can deny access to xmlrpc, RSS and certain countries now. 1.5.1
3. — Version 1.4.1 Multisite compatibility implemented. 1.4.1
4. — Version 1.3 Validation cookie is set via JavaScript now and encrypted. 1.3
5. — Version 1.2 Redirect POST-requests only for login page. 1.2
6. — Version 1.1 Set validation cookie for all GET-requests. Use random cookie name for better security. 1.1

Automated install-time checks, tested on PHP 7.2.16 · WP 5.3

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-09-05 4K+ → 3K+ down after 488 days in tier
2. 2023-05-06 5K+ → 4K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP Ghost (Hide My WP Ghost) – Security & Firewall 100K+ installs · 4.5★ · 3 shared tags A
• WP fail2ban – Advanced Security 60K+ installs · 4.1★ · 3 shared tags C
• XO Security 30K+ installs · 4.4★ · 3 shared tags A
• IP Geo Block 8K+ installs · 4.1★ · 3 shared tags D
• Stop XML-RPC Attacks 6K+ installs · 4.2★ · 3 shared tags A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Protection Against DDoS into a readme, a review or a deck. It updates itself.

Protection Against DDoS: 3K+ active installs, 5.0★ (4 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/protection-against-ddos