Best hsts plugins for WordPress
The most popular hsts plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Headers Security Advanced & HSTS WP leads with 90K+ active installs, ahead of Security Headers (3K+) and HSTS Ready (3K+). All 21 plugins tagged “hsts” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 hsts plugins
- 1.
Headers Security Advanced & HSTS WPThe most installed hsts plugin, with 90K+ active installs. Rated 4.9 from 79 reviews, updated 1 week ago.
- 2.
Security Headers3K+ active installs. Rated 5.0 from 8 reviews, last updated 7 years ago. Tested only up to WordPress 5.1.28.
- 3.
HSTS Ready3K+ active installs. Only 4 reviews so far, updated 2 months ago.
- 4.
LH HSTS600+ active installs. Rated 3.9 from 7 reviews, last updated 6 years ago. Tested only up to WordPress 5.4.25.
- 5.
Zen Site Security60+ active installs. Only 1 review so far, updated 1 month ago.
- 6.
EssentialHeaders60+ active installs. No reviews yet, updated 2 months ago.
- 7.
Security Headers & Caching30+ active installs. No reviews yet, last updated 1 year ago. Tested only up to WordPress 6.8.12.
- 8.
BaseCloud Security Manager20+ active installs. Only 2 reviews so far, updated 8 months ago. Tested only up to WordPress 6.8.12.
- 9.
HSTS strict-preload20+ active installs. No reviews yet, last updated 7 years ago. Tested only up to WordPress 5.1.28.
- 10.
Simple HSTS Preload20+ active installs. No reviews yet, last updated 7 years ago. Tested only up to WordPress 5.2.30.
All 21 plugins tagged “hsts”
Headers Security Advanced & HSTS WP
Up in the last 7 days:2#477by Andrea Ferro9 days ago
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
- Installs
- 90K+
- Rating
- 4.9(79)
- Downloads
- 1.3K/day
Security Headers
Down in the last 7 days:5#3,779by SimonRWaters7 years ago
Plug-in to ease the setting of TLS headers for HSTS and similar
- Installs
- 3K+
- Rating
- 5.0(8)
- Downloads
- 22/day
HSTS Ready
Down in the last 7 days:46#3,932by manu2252 months ago
Enable easily HSTS on your website.
- Installs
- 3K+
- Rating
- 5.0(4)
- Downloads
- 22/day
LH HSTS
Down in the last 7 days:22#8,501by shawfactor6 years ago
HSTS is HTTP Strict Transport Security, a means to enforce using SSL even if the user accesses the site through HTTP and not HTTPS.
- Installs
- 600+
- Rating
- 3.9(7)
- Downloads
- 60/day
Zen Site Security
Down in the last 7 days:225#19,168by Guram Zhgamadze1 month ago
SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.
- Installs
- 60+
- Rating
- 5.0(1)
- Downloads
- 11/day
EssentialHeaders
Up in the last 7 days:742#19,655by Alex Hedström2 months ago
Adds the essential HTTP security headers WordPress leaves out—on every public site response.
- Installs
- 60+
- Rating
- –
- Downloads
- 0/day
Security Headers & Caching
Up in the last 7 days:545#23,299by Studio Be41 year ago
Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day
BaseCloud Security Manager
Down in the last 7 days:44#27,871by BaseCloud8 months ago
🛡️ Enterprise-grade WordPress security made simple. Implement military-standard HTTP security headers with zero technical knowledge required.
- Installs
- 20+
- Rating
- 5.0(2)
- Downloads
- 0/day
HSTS strict-preload
Down in the last 7 days:1#28,004by timpet7 years ago
It adds HSTS headers to your wordpress site. No configuration required
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
Simple HSTS Preload
#28,035by kevin7 years ago
This plugin enables HSTS header on WordPress
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
Fix It Easy Security Headers
Up in the last 7 days:682#32,183by WP Fix It - WordPress Experts1 year ago
Configure core HTTP security headers for your WordPress site in a few clicks.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
BoundaryGuard Headers
#33,106by Jay Suthar2 months ago
Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
HeaderShield
#34,506by Vishwa7 months ago
Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
360 Orbit Header Security
Up in the last 7 days:16,508#56,278by Jörg Liwa17 days ago
Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
AiutoComputerHelp HTTP Header Audit
#57,565by aiutocomputerhelp27 days ago
Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Nubivio Security Headers, security.txt & NIS2 Compliance for Healthcare
Up in the last 7 days:7,805#59,038by nubivio3 days ago
Security headers, security.txt, a PHP2Shell runtime check and an optional CRA, GDPR and NIS2 scanner for healthcare WordPress sites.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
HeaderGenie Security Headers
#63,256by headergenie5 days ago
Add HTTP security headers from WordPress. Scan what your site sends and enable safe defaults.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day
Jeelsh HTTP Headers
Up in the last 7 days:4,905#64,269by jeelshy3 months ago
Configure advanced HTTP security headers for your WordPress site.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Gmcfuerte Security Headers
Down in the last 7 days:7,440#65,955by GMC Fuerte — Giulio Maria Cappellano24 days ago
Recommended security headers with safe presets, never sent twice, plus a read-only self-check that explains what your site really sends.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Kareva Security Headers
Up in the last 7 days:3,110#69,455by karevatechsol269 days ago
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day
VCNS Security Automation Manager
Down in the last 7 days:20,371#71,549by Simon Jackson11 days ago
Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day