API Security: Is your WordPress REST-API secure?

Over 40% of the internet are running websites with WordPress. 40% ‒ Most site owners may not even know that WordPress has a REST API to begin with, and those that do may not even use it or know how to disable it. The WordPress REST API has been around for over a decade and for all that time. Not one plugin or even WordPress themselves have provided the security and privacy where it matters the most for the REST API. That is a lot of sites essentially letting hackers, bots, spammers and scalpers to read data that you didn’t know you were even sharing out in the open. So I felt it was about time a solution was made. 👋Hi there. I'm Sébastien and with API Security—your REST API instantly locks down blocking unknown outsiders, limits abusive requests, and protects your data. I built it for site owners & developers who want smart defaults, zero headaches, and full control when needed to keep their REST-APIs secure always. The mission is to put practical security with smart defaults, minimal friction, and clear extensibility for the API. It literally takes only a minute to install and activate and with developer‑first filters and action hooks, you have full control. Hackers love unsecured APIs so they can scrape data, spam requests, and poke for vulnerabilities, or even manipulate content. Don't keep giving them the opportunity to do so. As part of the launch campaign, I'm running a lifetime deal for early adopters. The deal includes: * Lifetime license of 3, 10, 50 sites. * Permanent 25% discount on all future purchases. * Access to private Discord group where you can vote for features, give feedback, and help shape the future of API Security. * 1 year support * 30 day compatibility guarantee Sales runs until the 31st August 2025. To learn more, head over to https://apisecurity.pro If you have any questions, just comment here and I will do my best to answer them.