Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.
Alternatives to Strict Security Headers
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
HTTP Headers adds CORS & security HTTP headers to your website.
Configure advanced HTTP security headers for your WordPress site.
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
Recommended security headers with safe presets, never sent twice, plus a read-only self-check that explains what your site really sends.
Adds a CSP header compatible with most WP plugins without breaking styles.
This plugin generates the proper security HTTP response headers to keep your site secured.
This plugin enhances WordPress security by implementing measures like Security Headers, changing the Login URL, disabling WP JSON API, and more.
Your site's security, in plain English. See your real risks, honestly prioritized, and fix the safe ones in one click. No fear, no jargon.