Best csp plugins for WordPress

Headers Security Advanced & HSTS WP

Up in the last 7 days:2#477

by Andrea Ferro9 days ago

Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.

Content Security Policy Manager

Down in the last 7 days:4#4,847

by Patrick Sletvold4 years ago

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

GD Security Headers

Down in the last 7 days:25#5,908

by Milan Petrovic6 months ago

Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.

Auto SRI

Down in the last 7 days:96#8,788

by zfir6 months ago

Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.

CSP Friendly Security

Up in the last 7 days:3#11,717

by Pascal CESCATO2 months ago

Adds a CSP header compatible with most WP plugins without breaking styles.

No unsafe-inline

Down in the last 7 days:74#12,286

by Giuseppe11 months ago

No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.

EssentialHeaders

Up in the last 7 days:742#19,655

by Alex Hedström2 months ago

Adds the essential HTTP security headers WordPress leaves out—on every public site response.

Security Headers & Caching

Up in the last 7 days:545#23,299

by Studio Be41 year ago

Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.

CSP Violation Reporter

Up in the last 7 days:3,502#23,765

by Guilherme Dumas Peres1 month ago

Collect and inspect Content Security Policy (CSP) reports with filtering, grouping, rate limits and automatic cleanup.

GDPR Helper using CSP

Down in the last 7 days:218#28,184

by bpassini4 years ago

This plugin allows easy addition of Content Security Policy

SeaSP Community Edition

Up in the last 7 days:18#29,089

by bluetriangle5 years ago

SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …

Abdal Security Headers

#31,430

by Ebrahim Shafiei (EbraSha)2 months ago

Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.

Fix It Easy Security Headers

Up in the last 7 days:682#32,183

by WP Fix It - WordPress Experts1 year ago

Configure core HTTP security headers for your WordPress site in a few clicks.

BoundaryGuard Headers

#33,106

by Jay Suthar2 months ago

Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.

HeaderShield

#34,506

by Vishwa7 months ago

Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.

Onionify

#36,730

by Ivijan-Stefan Stipic10 days ago

Serve WordPress cleanly over .onion with URL rewriting, Onion-Location, and privacy hardening.

Headit

Down in the last 7 days:5,654#43,503

by StampyCode9 years ago

Headit is a simple plugin to allow you to add custom HTTP response headers to your site.

fepo CSP & Security Headers

#56,605

by fepo10 days ago

Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.

AiutoComputerHelp HTTP Header Audit

#57,565

by aiutocomputerhelp27 days ago

Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.

WebKernelAI Security

Up in the last 7 days:3,268#58,820

by Aamir Sahil20 days ago

A secure WordPress connector to remotely manage, audit, and harden your site from the WebKernelAI dashboard with cryptographic signature verification.

Codo Content Security Policy

#59,798

by Codo Digital Ltd1 day ago

Just Content-Security-Policy, not a security suite. Starts in Report-Only, with draft policies, built-in violation reports and page scanning.

Security Headers Audit

Down in the last 7 days:2,415#60,811

by Chowdhari Chetan4 months ago

Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of …

Rapid Security Manager

Up in the last 7 days:9,548#63,205

by rapidplugins1 month ago

WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.

Jeelsh HTTP Headers

Up in the last 7 days:4,905#64,269

by jeelshy3 months ago

Configure advanced HTTP security headers for your WordPress site.

Script Sentinel

Down in the last 7 days:13,053#69,420

by scriptsentinel2 months ago

Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.

Kareva Security Headers

Up in the last 7 days:3,110#69,455

by karevatechsol269 days ago

Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.

Beplus Security Headers & Script Auditor

Down in the last 7 days:7,135#70,598

by rimbeplus21 days ago

Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.

VCNS Security Automation Manager

Down in the last 7 days:20,371#71,549

by Simon Jackson11 days ago

Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.

Webro Security

Down in the last 7 days:9,492#73,890

by webro1 month ago

Adds security headers, CSP, login protection, SMTP configuration and spam protection to harden your WordPress site.