Recommended security headers with safe presets, never sent twice, plus a read-only self-check that explains what your site really sends.
Alternatives to Simple HSTS Preload
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Jeelsh HTTP Headersv1.0.2
Configure advanced HTTP security headers for your WordPress site.
360 Orbit Header Securityv1.0.30
Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.
Zen Site Securityv1.15.2
SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.
Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.
Kareva Security Headersv1.1.1
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
HeaderGenie Security Headersv1.2.59
Add HTTP security headers from WordPress. Scan what your site sends and enable safe defaults.
Security headers, a self-renewing security.txt (RFC 9116) and an optional CRA, GDPR and NIS2 compliance scanner for healthcare WordPress sites.
HSTS Readyv1.06
Enable easily HSTS on your website.
HeaderShieldv1.0.14
Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.