Best content security policy plugins for WordPress
The most popular content security policy plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Cookies and Content Security Policy leads with 10K+ active installs, ahead of Content Security Policy Manager (2K+) and HTTP Security Header (1K+). All 18 plugins tagged “content security policy” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 content security policy plugins
- 1.
Cookies and Content Security PolicyThe most installed content security policy plugin, with 10K+ active installs. Rated 4.9 from 67 reviews, updated 5 days ago.
- 2.Content Security Policy Manager
2K+ active installs. Rated 4.3 from 6 reviews, last updated 4 years ago. Tested only up to WordPress 6.1.16.
- 3.
HTTP Security Header1K+ active installs. Only 3 reviews so far, updated 10 months ago. Tested only up to WordPress 6.9.11.
- 4.GD Security Headers
1K+ active installs. Rated 4.0 from 8 reviews, updated 5 months ago.
- 5.
Security Header Generator400+ active installs. Rated 4.9 from 7 reviews, updated 1 month ago.
- 6.
CSP Friendly Security200+ active installs. Only 4 reviews so far, updated 2 months ago.
- 7.
No unsafe-inline200+ active installs. Rated 5.0 from 5 reviews, updated 11 months ago. Tested only up to WordPress 6.9.11.
- 8.
CSP Violation Reporter30+ active installs. Only 1 review so far, updated 1 month ago.
- 9.GDPR Helper using CSP
20+ active installs. No reviews yet, last updated 4 years ago. Tested only up to WordPress 6.0.18.
- 10.
SeaSP Community Edition10+ active installs. Only 3 reviews so far, last updated 5 years ago. Tested only up to WordPress 5.8.19.
All 18 plugins tagged “content security policy”

Cookies and Content Security Policy
Down in the last 7 days:1#1,507by Johan Jonk Stenström5 days ago
Be fully GDPR and CCPA compliant through Content Security Policy. Blocks cookies and unwanted external content.
- Installs
- 10K+
- Rating
- 4.9(67)
- Downloads
- 133/day
Content Security Policy Manager
Down in the last 7 days:4#4,847by Patrick Sletvold4 years ago
Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors
- Installs
- 2K+
- Rating
- 4.3(6)
- Downloads
- 19/day

HTTP Security Header
Down in the last 7 days:10#5,417by MOHIT GOYAL10 months ago
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
- Installs
- 1K+
- Rating
- 5.0(3)
- Downloads
- 22/day
GD Security Headers
Down in the last 7 days:25#5,908by Milan Petrovic6 months ago
Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.
- Installs
- 1K+
- Rating
- 4.0(8)
- Downloads
- 38/day

Security Header Generator
Down in the last 7 days:29#9,451by Kevin Pirnie1 month ago
This plugin generates the proper security HTTP response headers to keep your site secured.
- Installs
- 400+
- Rating
- 4.9(7)
- Downloads
- 22/day

CSP Friendly Security
Up in the last 7 days:3#11,717by Pascal CESCATO2 months ago
Adds a CSP header compatible with most WP plugins without breaking styles.
- Installs
- 200+
- Rating
- 3.5(4)
- Downloads
- 0/day

No unsafe-inline
Down in the last 7 days:74#12,286by Giuseppe11 months ago
No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.
- Installs
- 200+
- Rating
- 5.0(5)
- Downloads
- 11/day

CSP Violation Reporter
Up in the last 7 days:3,502#23,765by Guilherme Dumas Peres1 month ago
Collect and inspect Content Security Policy (CSP) reports with filtering, grouping, rate limits and automatic cleanup.
- Installs
- 30+
- Rating
- 5.0(1)
- Downloads
- 0/day
GDPR Helper using CSP
Down in the last 7 days:218#28,184by bpassini4 years ago
This plugin allows easy addition of Content Security Policy
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day

SeaSP Community Edition
Up in the last 7 days:18#29,089by bluetriangle5 years ago
SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …
- Installs
- 10+
- Rating
- 4.7(3)
- Downloads
- 0/day

Abdal Security Headers
#31,430by Ebrahim Shafiei (EbraSha)2 months ago
Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 11/day

fepo CSP & Security Headers
#56,605by fepo11 days ago
Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day
Codo Content Security Policy
#59,798by Codo Digital Ltd1 day ago
Just Content-Security-Policy, not a security suite. Starts in Report-Only, with draft policies, built-in violation reports and page scanning.
- Installs
- <10
- Rating
- –
- Downloads
- 96/day
Computernørden’s Security Panel
Down in the last 7 days:1,342#63,255by Albert van Harten1 day ago
Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Script Sentinel
Down in the last 7 days:13,053#69,420by scriptsentinel2 months ago
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Kareva Security Headers
Up in the last 7 days:3,110#69,455by karevatechsol269 days ago
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day
Beplus Security Headers & Script Auditor
Down in the last 7 days:7,135#70,598by rimbeplus22 days ago
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

VCNS Security Automation Manager
Down in the last 7 days:20,371#71,549by Simon Jackson11 days ago
Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day