Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
Alternatives to HTTP Security Header
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Script Sentinelv0.1.0
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.
CSP Friendly Securityv1.5.2
Adds a CSP header compatible with most WP plugins without breaking styles.
Security Header Generatorv6.1.04
This plugin generates the proper security HTTP response headers to keep your site secured.
Kareva Security Headersv1.1.1
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.
Abdal Security Headersv6.11.0
Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.
Jeelsh HTTP Headersv1.0.2
Configure advanced HTTP security headers for your WordPress site.