Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.
Alternatives to CSP Friendly Security
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.
Security Header Generatorv6.1.04
This plugin generates the proper security HTTP response headers to keep your site secured.
Script Sentinelv0.1.0
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.
Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
No unsafe-inlinev1.3.0
No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.
Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.