Modern role editor, multiple roles, content control and smart role rules for WordPress.
Alternatives to Birim REST Lock – Disable REST API & Stop User Enumeration
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
WPBuoy Endpoint Managerv2.4.3
View, search, filter, and disable WordPress REST API endpoints. Reduce your attack surface and log blocked requests — no code required.
Hides the list of user accounts that the WordPress REST API shows to visitors who are not logged in, which helps prevent user enumeration.
EnumGuardv1.0.0
Stops WordPress user enumeration through author URLs, REST, login errors, XML-RPC, sitemaps, and oEmbed.
Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.
Blocks common WordPress user enumeration methods and optionally hides public author archives.
ETBS Account Guardv1.3.0
Protects the accounts that manage your site. Hides the login names of your users from visitors who are not logged in.
Turn Off REST APIv1.1.4
Disable the WordPress REST API for logged out visitors and lock down your /wp-json endpoints, with a per route allow list so you stay in control.
Disable WP REST APIv2.6.9
Disables the WP REST API for visitors not logged into WordPress.