Documentation

Security model

Glimpse BI is powerful for admins and locked down for everyone else: read-only SQL, a capability gate, bound parameters, query timeouts, and an opt-in table allowlist.

Step by step

1Confirm only trusted roles have the Glimpse BI capability (manage_options by default).
2For shared installs, set Schema mode to Allowlist and list only the tables that may be charted.
3Keep SQL mode restricted to admins (the use_sql_mode capability) unless a Pro Editor explicitly needs it.
4Set conservative Query timeout and Max rows in Settings.
5Review active embed tokens periodically and revoke any you no longer need.

yoursite.com/wp-admin/admin.php?page=glimpsebi-settings

Glimpse BI Settings — cache TTL, query limits, and schema discovery controls.

Defense in depth

SQL is validated read-only by a real parser (not a regex): only SELECT / WITH … SELECT run, and writes, file access, sleeps, and multi-statements are rejected. Every filter value is bound via wpdb->prepare, queries run under a timeout, and results are row-capped.

Your rows stay on your server

The free plugin contacts no external service: there is no phone-home tracking and all assets are bundled locally. Ask (Pro) is the one feature that talks to Glimpse’s AI service, and by default it sends your schema only (table and column names, never the rows). Public embeds are gated by signed tokens with per-token and per-IP rate limits.

Reference

SQLRead-only, AST-validated

Capabilitymanage_options · use_sql_mode

ParametersAlways bound (wpdb->prepare)

Embed limits60/min per token · 600/min per IP

External callsNone (free plugin) · Ask (Pro): schema only by default

NextPresets

Install free in a minute. Ask when you’re ready.

Start with the free plugin from WordPress.org. Upgrade to Pro to unlock Ask, pre-computed charts and Editor roles.

Get the free plugin See Pro plans