HTTP Security Header
v3.1by MOHIT GOYAL · updated 10 months ago
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
- Rank
- #5,422
- Up9 vs yesterday
- Active installs (est.)
- ≈ 1,580
- 1K+ reported · High
- Total downloads
- 7.2K
- 7,182 all-time
- Rating
- 5.0/5
- 3 reviews
- Support resolved
- –
- 0 of 0 threads, last 2 months
HTTP Security Header at a glance
HTTP Security Header is a WordPress plugin by MOHIT GOYAL with 1K+ active installs, the #5,422 most popular plugin on WordPress.org. On a typical day it’s downloaded about 19 times, 50% more than the month before. It’s rated 5.0 out of 5 from 3 reviews. Version 3.1 came out on Dec 30, 2025 and is tested up to WordPress 6.9.11. Among the 8 plugins tagged “clickjacking”, it ranks #3. It was first released in 2024.
Chart time range
Applies to every chart below. History from Oct 9, 2026, 31 days.
Downloads over time
Download stats422 downloads · the last 30 days
View as table
| Date | HTTP Security Header |
|---|---|
| Nov 3, 2026 | 24 |
| Nov 2, 2026 | 19 |
| Nov 1, 2026 | 28 |
| Oct 31, 2026 | 16 |
| Oct 30, 2026 | 24 |
| Oct 29, 2026 | 19 |
| Oct 28, 2026 | 17 |
| Oct 27, 2026 | 23 |
| Oct 26, 2026 | 17 |
| Oct 25, 2026 | 18 |
| Oct 24, 2026 | 8 |
| Oct 23, 2026 | 20 |
| Oct 22, 2026 | 18 |
| Oct 21, 2026 | 17 |
| Oct 20, 2026 | 14 |
| Oct 19, 2026 | 20 |
| Oct 18, 2026 | 5 |
| Oct 17, 2026 | 17 |
| Oct 16, 2026 | 13 |
| Oct 15, 2026 | 8 |
| Oct 14, 2026 | 25 |
| Oct 13, 2026 | 14 |
| Oct 12, 2026 | 6 |
| Oct 11, 2026 | 9 |
| Oct 10, 2026 | 13 |
| Oct 9, 2026 | 10 |
Unusual spikes are usually updates, not new installs.
Estimated installs
≈ 1,585 · -8.4% in the last 30 days
View as table
| Date | Estimated installs |
|---|---|
| Nov 8, 2026 | 1,585 |
| Nov 7, 2026 | 1,583 |
| Nov 5, 2026 | 1,587 |
| Nov 4, 2026 | 1,590 |
| Nov 3, 2026 | 1,590 |
| Nov 2, 2026 | 1,591 |
| Nov 1, 2026 | 1,585 |
| Oct 31, 2026 | 1,582 |
| Oct 30, 2026 | 1,581 |
| Oct 29, 2026 | 1,581 |
| Oct 28, 2026 | 1,586 |
| Oct 27, 2026 | 1,730 |
Rank over time
#5,422 · up 29 in the last 30 days
View as table
| Date | Daily snapshot |
|---|---|
| Nov 8, 2026 | #5,422 |
| Nov 7, 2026 | #5,431 |
| Nov 6, 2026 | #5,427 |
| Nov 5, 2026 | #5,420 |
| Nov 4, 2026 | #5,417 |
| Nov 3, 2026 | #5,414 |
| Nov 2, 2026 | #5,407 |
| Nov 1, 2026 | #5,422 |
| Oct 31, 2026 | #5,428 |
| Oct 30, 2026 | #5,439 |
| Oct 29, 2026 | #5,446 |
| Oct 28, 2026 | #5,455 |
| Oct 27, 2026 | #5,451 |
Growth %
Average -0.73% a day in the last 30 days
View as table
| Date | Growth |
|---|---|
| Nov 8, 2026 | +0.13% |
| Nov 7, 2026 | -0.13% |
| Nov 5, 2026 | -0.19% |
| Nov 4, 2026 | 0.00% |
| Nov 3, 2026 | -0.06% |
| Nov 2, 2026 | +0.38% |
| Nov 1, 2026 | +0.19% |
| Oct 31, 2026 | +0.06% |
| Oct 30, 2026 | 0.00% |
| Oct 29, 2026 | -0.32% |
| Oct 28, 2026 | -8.32% |
Active installs band
1K+ on WordPress.org
View as table
| Date | Daily snapshot |
|---|---|
| Nov 8, 2026 | 1K+ |
| Nov 7, 2026 | 1K+ |
| Nov 6, 2026 | 1K+ |
| Nov 5, 2026 | 1K+ |
| Nov 4, 2026 | 1K+ |
| Nov 3, 2026 | 1K+ |
| Nov 2, 2026 | 1K+ |
| Nov 1, 2026 | 1K+ |
| Oct 31, 2026 | 1K+ |
| Oct 30, 2026 | 1K+ |
| Oct 29, 2026 | 1K+ |
| Oct 28, 2026 | 1K+ |
| Oct 27, 2026 | 1K+ |
Search rankings
Where it appears in WordPress.org search for the searches you track, checked every day.
See where HTTP Security Header ranks in search
Track this plugin to check its position for the searches you choose, daily, with an alert when it moves.
Change log
From our daily snapshot of WordPress.org- Rank #5455 → #5420
- Tested up to 6.9.10 → 6.9.11
Versions in use
Share of active installs on each published version, from WordPress.org.
- v3.1100%
Rating trend
5.0★★★★★3 reviews · steady in the last 30 days
Requirements & info
Version history- Version
- 3.1
- Requires WordPress
- 5.0
- Tested up to
- 6.9.11
- Requires PHP
- 7.0
- First released
- Nov 1, 2024
- Last updated
- Dec 30, 2025
- Releases, last 12 months
- …
Questions about HTTP Security Header
How many websites use HTTP Security Header?
HTTP Security Header is active on 1K+ WordPress sites, as WordPress.org reports it. WordPress.org rounds the number down, so the real count is somewhat higher. That makes it the #5,422 most popular plugin on WordPress.org.
How many times has HTTP Security Header been downloaded?
7,182 times in total since 2024. On a typical day it’s downloaded about 19 times. See download stats
When was HTTP Security Header last updated?
Version 3.1 came out on Dec 30, 2025 (10 months ago). See every release
Is HTTP Security Header compatible with the latest WordPress?
HTTP Security Header’s readme says it’s tested up to WordPress 6.9.11, while the current version is 7.1. That doesn’t mean it breaks, but its author hasn’t confirmed it works with the latest releases.
Does HTTP Security Header have known security vulnerabilities?
No. WPVulnerability’s database lists no known vulnerabilities for HTTP Security Header. See its security record
Is HTTP Security Header still maintained?
Its last release was 10 months ago. No support threads were opened in the last two months.
What rating does HTTP Security Header have?
5.0 out of 5 from 3 reviews on WordPress.org.
What are the best alternatives to HTTP Security Header?
The plugins most like HTTP Security Header, by the tags they share, are Codo Content Security Policy (fewer than 10), Content Security Policy Manager (2K+) and CSP Friendly Security (200+). Compare all alternatives
Latest reviews
Analyze reviewsReview stats
5.0
★★★★★
3 reviews
- 5 stars: 3 reviews, 100%
- 4 stars: 0 reviews, 0%
- 3 stars: 0 reviews, 0%
- 2 stars: 0 reviews, 0%
- 1 stars: 0 reviews, 0%
- Positive
- 100%4–5★
- Mixed
- 0%3★
- Critical
- 0%1–2★
Compare with competitors
Add up to 1 competitor. No account needed.
| Metric | |
|---|---|
| Estimated installs | ≈ 1,580 |
| Reported installs | 1K+ |
| Rating | 5.0 |
| Reviews | 3 |
| Total downloads | 7.2K |
| Author | MOHIT GOYAL |
| First released | Nov 1, 2024 |
| Version | 3.1 |
| Requires WP | 5.0 |
| Requires PHP | 7.0 |
| Last updated | Dec 30, 2025 |
Alternatives to HTTP Security Header
Compare all alternativesPopular plugins with the same tags, the most in common first.
Codo Content Security Policy
by Codo Digital Ltd
Just Content-Security-Policy, not a security suite. Starts in Report-Only, with draft policies, built-in violation reports and page scanning.
- Rank
- #56,926
- Installs
- Fewer than 10
Content Security Policy Manager
by Patrick Sletvold
Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors
- Rank
- #4,835
- Installs
- 2K+
- 4.3
CSP Friendly Security
by Pascal CESCATO
Adds a CSP header compatible with most WP plugins without breaking styles.
- Rank
- #11,702
- Installs
- 200+
- 3.5
MalCare WordPress Security Plugin
by malcare
Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.
- Rank
- #288
- Installs
- 100K+
- 4.4
Headers Security Advanced & HSTS WP
by Andrea Ferro
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
- Rank
- #479
- Installs
- 90K+
- 4.9
HTTP Headers
by Dimitar Ivanov
HTTP Headers adds CORS & security HTTP headers to your website.
- Rank
- #797
- Installs
- 40K+
- 4.3
Side by side:HTTP Security Header vs Codo Content Security PolicyHTTP Security Header vs Content Security Policy ManagerHTTP Security Header vs CSP Friendly Security
More by MOHIT GOYAL
See everything by MOHIT GOYALOther plugins from this author in our catalog.
