Headers Security Advanced & HSTS WP
v5.3.6by Andrea Ferro · updated 9 days ago
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
- Rank
- #477
- Up2 vs yesterday
- Active installs (est.)
- ≈ 95,000
- 90K+ reported · Medium
- Total downloads
- 1.7M
- 1,679,691 all-time
- Rating
- 4.9/5
- 79 reviews
- Support resolved
- 0%
- 0 of 4 threads, last 2 months
Headers Security Advanced & HSTS WP at a glance
Headers Security Advanced & HSTS WP is a WordPress plugin by Andrea Ferro with 90K+ active installs, the #477 most popular plugin on WordPress.org. On a typical day it’s downloaded about 1,280 times, 33% fewer than the month before. It’s rated 4.9 out of 5 from 79 reviews. Version 5.3.6 came out on Oct 30, 2026 and is tested up to WordPress 7.0.8. It leads the 8 plugins tagged “clickjacking”. It was first released in 2021.
Chart time range
Applies to every chart below. History from Oct 10, 2026, 31 days.
Downloads over time
Download stats60.2K downloads · the last 30 days
View as table
| Date | Headers Security Advanced & HSTS WP |
|---|---|
| Nov 8, 2026 | 638 |
| Nov 7, 2026 | 742 |
| Nov 6, 2026 | 1,818 |
| Nov 5, 2026 | 2,319 |
| Nov 4, 2026 | 2,693 |
| Nov 3, 2026 | 3,462 |
| Nov 2, 2026 | 5,055 |
| Nov 1, 2026 | 3,055 |
| Oct 31, 2026 | 29,695 |
| Oct 30, 2026 | 499 |
| Oct 29, 2026 | 525 |
| Oct 28, 2026 | 625 |
| Oct 27, 2026 | 653 |
| Oct 26, 2026 | 682 |
| Oct 25, 2026 | 301 |
| Oct 24, 2026 | 291 |
| Oct 23, 2026 | 705 |
| Oct 22, 2026 | 1,028 |
| Oct 21, 2026 | 810 |
| Oct 20, 2026 | 505 |
| Oct 19, 2026 | 528 |
| Oct 18, 2026 | 202 |
| Oct 17, 2026 | 224 |
| Oct 16, 2026 | 399 |
| Oct 15, 2026 | 484 |
| Oct 14, 2026 | 541 |
| Oct 13, 2026 | 613 |
| Oct 12, 2026 | 566 |
| Oct 11, 2026 | 256 |
| Oct 10, 2026 | 257 |
Unusual spikes are usually updates, not new installs.
Estimated installs
≈ 94,611 · -0.4% in the last 30 days
View as table
| Date | Estimated installs |
|---|---|
| Nov 9, 2026 | 94,611 |
| Nov 8, 2026 | 94,301 |
| Nov 7, 2026 | 94,611 |
| Nov 5, 2026 | 94,852 |
| Nov 4, 2026 | 94,522 |
| Nov 3, 2026 | 94,447 |
| Nov 2, 2026 | 94,428 |
| Nov 1, 2026 | 94,502 |
| Oct 31, 2026 | 94,774 |
| Oct 30, 2026 | 94,699 |
| Oct 29, 2026 | 94,753 |
| Oct 28, 2026 | 95,012 |
| Oct 27, 2026 | 95,019 |
Rank over time
#477 · down 2 in the last 30 days
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | #477 |
| Nov 8, 2026 | #479 |
| Nov 7, 2026 | #477 |
| Nov 6, 2026 | #476 |
| Nov 5, 2026 | #476 |
| Nov 4, 2026 | #478 |
| Nov 3, 2026 | #478 |
| Nov 2, 2026 | #479 |
| Nov 1, 2026 | #479 |
| Oct 31, 2026 | #478 |
| Oct 30, 2026 | #478 |
| Oct 29, 2026 | #478 |
| Oct 28, 2026 | #477 |
| Oct 27, 2026 | #477 |
| Oct 16, 2026 | #475 |
Growth %
Average -0.03% a day in the last 30 days
View as table
| Date | Growth |
|---|---|
| Nov 9, 2026 | +0.33% |
| Nov 8, 2026 | -0.33% |
| Nov 7, 2026 | -0.13% |
| Nov 5, 2026 | +0.35% |
| Nov 4, 2026 | +0.08% |
| Nov 3, 2026 | +0.02% |
| Nov 2, 2026 | -0.08% |
| Nov 1, 2026 | -0.29% |
| Oct 31, 2026 | +0.08% |
| Oct 30, 2026 | -0.06% |
| Oct 29, 2026 | -0.27% |
| Oct 28, 2026 | -0.01% |
Active installs band
90K+ on WordPress.org
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | 90K+ |
| Nov 8, 2026 | 90K+ |
| Nov 7, 2026 | 90K+ |
| Nov 6, 2026 | 90K+ |
| Nov 5, 2026 | 90K+ |
| Nov 4, 2026 | 90K+ |
| Nov 3, 2026 | 90K+ |
| Nov 2, 2026 | 90K+ |
| Nov 1, 2026 | 90K+ |
| Oct 31, 2026 | 90K+ |
| Oct 30, 2026 | 90K+ |
| Oct 29, 2026 | 90K+ |
| Oct 28, 2026 | 90K+ |
| Oct 27, 2026 | 90K+ |
| Oct 16, 2026 | 90K+ |
Search rankings
Where it appears in WordPress.org search for the searches you track, checked every day.
See where Headers Security Advanced & HSTS WP ranks in search
Track this plugin to check its position for the searches you choose, daily, with an alert when it moves.
Change log
From our daily snapshot of WordPress.org- Rank #478 → #477Downloads +376%
- Released 5.3.6 (was 5.3.5)
- Rank #477 → #476Downloads +385.2%
- Tested up to 7.0.7 → 7.0.8
Versions in use
Share of active installs on each published version, from WordPress.org.
- v5.383%
- v5.012%
- Other5.0%
Rating trend
4.9★★★★★79 reviews · steady in the last 30 days
Requirements & info
Version history- Version
- 5.3.6
- Requires WordPress
- 4.7
- Tested up to
- 7.0.8
- Requires PHP
- 7.4
- First released
- Sep 4, 2021
- Last updated
- Oct 30, 2026
- Releases, last 12 months
- …
Questions about Headers Security Advanced & HSTS WP
How many websites use Headers Security Advanced & HSTS WP?
Headers Security Advanced & HSTS WP is active on 90K+ WordPress sites, as WordPress.org reports it. WordPress.org rounds the number down, so the real count is somewhat higher. That makes it the #477 most popular plugin on WordPress.org.
How many times has Headers Security Advanced & HSTS WP been downloaded?
1,679,691 times in total since 2021. On a typical day it’s downloaded about 1,280 times. See download stats
When was Headers Security Advanced & HSTS WP last updated?
Version 5.3.6 came out on Oct 30, 2026 (1 week ago). See every release
Is Headers Security Advanced & HSTS WP compatible with the latest WordPress?
It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.
Does Headers Security Advanced & HSTS WP have known security vulnerabilities?
No. WPVulnerability’s database lists no known vulnerabilities for Headers Security Advanced & HSTS WP. See its security record
Is Headers Security Advanced & HSTS WP still maintained?
Yes. Its last release was 1 week ago. Its authors resolved 0 of the 4 support threads opened in the last two months.
What rating does Headers Security Advanced & HSTS WP have?
4.9 out of 5 from 79 reviews on WordPress.org. 92% of them give 5 stars.
What are the best alternatives to Headers Security Advanced & HSTS WP?
The plugins most like Headers Security Advanced & HSTS WP, by the tags they share, are Security Headers & Caching (30+), Fix It Easy Security Headers (10+) and Kareva Security Headers (fewer than 10). Compare all alternatives
Latest reviews
Analyze reviewsReview stats
4.9
★★★★★
79 reviews
- 5 stars: 73 reviews, 92%
- 4 stars: 3 reviews, 4%
- 3 stars: 1 reviews, 1%
- 2 stars: 2 reviews, 3%
- 1 stars: 0 reviews, 0%
- Positive
- 96%4–5★
- Mixed
- 1%3★
- Critical
- 3%1–2★
- About 142 more 5★ reviews would lift it to 5.0.
- Each new 1★ review takes 28 five-star reviews to balance out.
Compare with competitors
Add up to 1 competitor. No account needed.
| Metric | |
|---|---|
| Estimated installs | ≈ 95,000 |
| Reported installs | 90K+ |
| Rating | 4.9 |
| Reviews | 79 |
| Total downloads | 1.7M |
| Author | Andrea Ferro |
| First released | Sep 4, 2021 |
| Version | 5.3.6 |
| Requires WP | 4.7 |
| Requires PHP | 7.4 |
| Last updated | Oct 30, 2026 |
Alternatives to Headers Security Advanced & HSTS WP
Compare all alternativesPopular plugins with the same tags, the most in common first.
Security Headers & Caching
by Studio Be4
Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.
- Rank
- #23,299
- Installs
- 30+

Fix It Easy Security Headers
by WP Fix It - WordPress Experts
Configure core HTTP security headers for your WordPress site in a few clicks.
- Rank
- #32,183
- Installs
- 10+
Kareva Security Headers
by karevatechsol26
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
- Rank
- #69,455
- Installs
- Fewer than 10

AiutoComputerHelp HTTP Header Audit
by aiutocomputerhelp
Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.
- Rank
- #57,565
- Installs
- Fewer than 10

BaseCloud Security Manager
by BaseCloud
🛡️ Enterprise-grade WordPress security made simple. Implement military-standard HTTP security headers with zero technical knowledge required.
- Rank
- #27,871
- Installs
- 20+
- 5.0

Headit
by StampyCode
Headit is a simple plugin to allow you to add custom HTTP response headers to your site.
- Rank
- #43,503
- Installs
- 10+
Side by side:Headers Security Advanced & HSTS WP vs Security Headers & CachingHeaders Security Advanced & HSTS WP vs Fix It Easy Security HeadersHeaders Security Advanced & HSTS WP vs Kareva Security Headers