Configure advanced HTTP security headers for your WordPress site.
Alternatives to HTTP Headers
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.
Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.
Adds a CSP header compatible with most WP plugins without breaking styles.
Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of …
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.
Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.