[ad_1]
[ad_2]
I've developed a WordPress site, but my client has SOC 2 compliance and the site is not meeting a Pen test due to this line being visible: /wp-json/wp/v2/users/ [followed by user names here] – note, only author user names appearing, not all user names.
Apparently this didn't come up in their last website.
Any ideas how to overcome this?

[https://templ.io/blog/how-to-remove-hide-users-from-wp-json/](https://templ.io/blog/how-to-remove-hide-users-from-wp-json/)