Add Subresource Integrity hashes to enqueued scripts and styles, approve changed files before they are trusted, and scan pages for missing SRI.
Alternatives to Auto SRI
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
Local WebP optimizer for WordPress. Free converts images to WebP; Pro adds AVIF and site-wide image tools.
Diagnose. Understand. Fix. Protect. Local-first health, security, compatibility, performance, database and plugin-conflict auditing for WordPress.
Adds a CSP header compatible with most WP plugins without breaking styles.
Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.
Adds security headers, CSP, login protection, SMTP configuration and spam protection to harden your WordPress site.
Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.
Modular speed optimization, database & autoload cleaner, HTTP security headers, login brute-force shield, and 6-layer malware scanner.
Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.