Protect your WordPress site from brute force attacks, API abuse, and DDoS attacks with customizable rate limiting rules.

Ilan Firsov

uPress

Mondo Design

Booter – Bots & Crawlers Manager

Booter - Bots & Crawlers Manager is a preventative measure (treatment in advance) and treatment of damages caused by crawlers and bots.

zazell

Rate limiting for Contact Form 7

Adds support to limit the number of Contact Form 7 form submissions per ip per period

Sébastien Dumont

CoCart Headless

CoCart – Rate Limiting

Enables the rate limiting feature for CoCart.

seconet

MioGuard for Contact Form 7

Spam and bot protection for Contact Form 7 forms with honeypot and rate limiting.

jetbuilder

JetBuilder Daily Comment Limit

A lightweight plugin to block comment spammers by restricting the number of comments an IP can make per day. Includes a beautiful dashboard stats widg …

ahriad

<p>Turbo Rate Limiter is a powerful yet easy-to-use security plugin that helps protect your WordPress site from various types of abuse by limiting the rate at which visitors can make requests.</p>
<h3>Features</h3>
<ul>
<li><strong>URI-based filtering</strong> – Set rate limits for specific URLs, paths, or patterns</li>
<li><strong>Multiple match types</strong> – Exact match, contains, starts with, ends with, or regex</li>
<li><strong>Flexible time windows</strong> – Configure rate limits per second, minute, or hour</li>
<li><strong>Multiple actions</strong> – Return HTTP 429, redirect to URL, or redirect to page</li>
<li><strong>Test mode</strong> – Preview rate limiting behavior without blocking visitors</li>
<li><strong>Debug panel</strong> – Visual debug panel for administrators</li>
<li><strong>Cloudflare support</strong> – Full IPv4 and IPv6 proxy detection</li>
<li><strong>Localization ready</strong> – Translations available for multiple languages</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li><strong>API protection</strong> – Limit API calls to prevent abuse</li>
<li><strong>Login protection</strong> – Prevent brute force attacks on login pages</li>
<li><strong>Form spam prevention</strong> – Limit form submission rates</li>
<li><strong>Resource protection</strong> – Protect heavy database queries</li>
<li><strong>CDN compatibility</strong> – Works with Cloudflare and other proxies</li>
</ul>
<h3>Arbitrary section</h3>
<h3>Developer API</h3>
<p>Turbo Rate Limiter provides hooks and filters for developers:</p>
<pre><code>// Add trusted proxy IPs
add_filter('turbo_rate_limiter_trusted_proxies', function() {
    return [
        '173.245.48.0/20',
        '2400:cb00::/32',
        // More ranges...
    ];
});

// Access rate limiter instance
$rate_limiter = TURBORL_Rate_Limiter::get_instance();
</code></pre>
<p>For full API documentation, see docs/developer-api.md.</p>


Alternatives to Turbo Rate Limiter

Top alternatives