Plugin Pulse
← Pulse

Security Hardener

by Marc Armengou · Security

Also makes 2 other plugins · 200+ installs across the portfolio →

Basic hardening: secure headers, login honeypot, user enumeration blocking, generic login errors, rate limiting, and more.

⚠ Few reviews
How scoring works →
80 Health · B
Maintenance 100/100
Rating quality 65/100
Support 70/100

80 health vs 64 average across 997 Security plugins

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

88 / 100

Excellent listing optimization

Biggest win: Rating quality

Update recency 100/100
WP compatibility 100/100
Rating quality 49/100
Listing tuning 100/100

To rank higher: Too few reviews to rank on quality — nudge happy users to leave one.

Get the full rank-higher report →

Daily downloads

Since 2025-11-05 · 300 days · wp.org + Plugin Pulse archive

+71% vs prior 30d
9Downloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

257

now · peak 623

31730d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Security Hardener · #12752 you Limit Login Attempts · #33 Anti-Malware Securit · #303 CloudSecure WP Secur · #304

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

1.6Kper 1k installs · Aug 26

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

14

releases in the last 12 months

3mo ago

latest release · v2.4.4

14

tagged releases on record

Recent releases

2.4.4 · 3mo ago2.4.3 · 3mo ago2.4.2 · 4mo ago2.4.1 · 4mo ago2.4.0 · 5mo ago2.3.1 · 5mo ago2.3.0 · 5mo ago2.2.0 · 5mo ago2.1.1 · 5mo ago2.1.0 · 5mo ago2.0.2 · 5mo ago2.0.1 · 5mo ago2.0.0 · 5mo ago1.0 · 6mo ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 16% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v1.5 23%
v1.7 18%
v2.4 16%
v1.4 13%
v1.6 12%
v1.3 9.2%
v2.2 9.2%

Estimated active installs

The public count shows “200+”. Our estimate pins where the real number sits.

tracked estimate
200–300 ≈260

Refined from the date this plugin crossed into its current band.

At the current install trend, crossing 300+ in roughly 121 days.

Install history · since 2025-11-04 · 256 observations

200Installs · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

Details

Version
2.4.5
Last updated
12d ago
Added
2025-11-03
Requires WP
6.9
Tested up to
7.1
Requires PHP
8.2

Known vulnerabilities

via Wordfence Intelligence

1 disclosed vulnerability on record for this plugin, fixed in the current version. Sites on older versions stay exposed until they update.

  1. 2026-08-22 CVE-2026-16149 Improper Privilege Management Affects <= 2.4.4 Patched in 2.4.5

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Low memory footprint
Low page-speed impact
Runs on latest PHP + WP
No PHP errors
No JS errors
Activates cleanly
No resource errors
No external HTTP errors
Optimized database use
Frequently updated

Languages

via translate.wordpress.org

Translated into 3 languages, 3 at 90% or more

Catalan 100%
Spanish (Chile) 99%
Spanish (Spain) 99%

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-04-12 100+ → 200+ up after 157 days in tier
  2. 2025-11-06 — → 100+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for Security Hardener into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/security-hardener" width="480" height="300" style="border:0" loading="lazy" title="Security Hardener — Plugin Pulse"></iframe>
Preview card ↗

Security Hardener: 200+ active installs, 0.0★ (0 reviews). Plugin Pulse (WP Mayor), as of 2026-08-31. https://plugins.wpmayor.com/plugin/security-hardener