Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.
Alternatives to Security Headers & Caching
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
Reliable WordPress email delivery with multiple providers, two connections, Return Path, Reply-To and visual AND/OR routing.
Adds the essential HTTP security headers WordPress leaves out—on every public site response.
Configure advanced HTTP security headers for your WordPress site.
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.
Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.
Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.
Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of …