Best http-headers plugins for WordPress
The most popular http-headers plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. HTTP Headers leads with 40K+ active installs, ahead of GNU Terry Pratchett (1K+) and Simple Iframe Buster (100+). All 12 plugins tagged “http-headers” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 http-headers plugins
- 1.
HTTP HeadersThe most installed http-headers plugin, with 40K+ active installs. Rated 4.3 from 70 reviews, updated 3 weeks ago.
- 2.
GNU Terry Pratchett1K+ active installs. Rated 5.0 from 13 reviews, updated 5 months ago.
- 3.
Simple Iframe Buster100+ active installs. Only 2 reviews so far, last updated 5 years ago. Tested only up to WordPress 5.7.21.
- 4.
WP Secure HTTP Headers30+ active installs. No reviews yet, last updated 7 years ago. Tested only up to WordPress 5.2.30.
- 5.
Eazy HTTP Headers20+ active installs. No reviews yet, last updated 8 years ago.
- 6.
SeaSP Community Edition10+ active installs. Only 3 reviews so far, last updated 5 years ago. Tested only up to WordPress 5.8.19.
- 7.
BoundaryGuard Headers10+ active installs. No reviews yet, updated 2 months ago.
- 8.
Strict Security Headers10+ active installs. No reviews yet, last updated 3 years ago. Tested only up to WordPress 6.3.14.
- 9.
360 Orbit Header SecurityFewer than 10 active installs. No reviews yet, updated 2 weeks ago.
- 10.
Jeelsh HTTP HeadersFewer than 10 active installs. No reviews yet, updated 3 months ago.
All 12 plugins tagged “http-headers”
HTTP Headers
Up in the last 7 days:3#797by Dimitar Ivanov23 days ago
HTTP Headers adds CORS & security HTTP headers to your website.
- Installs
- 40K+
- Rating
- 4.3(70)
- Downloads
- 617/day
GNU Terry Pratchett
Down in the last 7 days:2#6,587by Nick C5 months ago
Add an X-Clacks-Overhead header with “GNU Terry Pratchett” to all non-admin pages.
- Installs
- 1K+
- Rating
- 5.0(13)
- Downloads
- 11/day
Simple Iframe Buster
Down in the last 7 days:114#14,649by Mikel King5 years ago
Provides a method of setting the X-Frame-Options header to SAMEORIGIN. Also enqueues a javascript based iframe blocker.
- Installs
- 100+
- Rating
- 5.0(2)
- Downloads
- 0/day
WP Secure HTTP Headers
Down in the last 7 days:1,155#24,507by WP Academic7 years ago
License: GPLv2 or later WordPress plugin to add secure headers to your website.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day
Eazy HTTP Headers
Down in the last 7 days:55#25,778by Rob Scott8 years ago
Provides settings to activate three HTTP header settings for X-Frame-Options, X-XSS Protection & X-Content-Type-Options.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
SeaSP Community Edition
#28,960by bluetriangle5 years ago
SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …
- Installs
- 10+
- Rating
- 4.7(3)
- Downloads
- 0/day
BoundaryGuard Headers
Down in the last 7 days:407#33,095by Jay Suthar2 months ago
Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Strict Security Headers
Up in the last 7 days:57#34,014by Justin Kopepasah3 years ago
Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
360 Orbit Header Security
Up in the last 7 days:16,508#56,278by Jörg Liwa17 days ago
Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Jeelsh HTTP Headers
#69,174by jeelshy3 months ago
Configure advanced HTTP security headers for your WordPress site.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Beplus Security Headers & Script Auditor
Down in the last 7 days:7,135#70,598by rimbeplus21 days ago
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
WP Remove Authors Sitemap from Yoast SEO
Down in the last 7 days:7,939#73,661by WP Academic7 years ago
License: GPLv2 or later WordPress plugin to remove authors from the Yoast SEO Sitemap
- Installs
- <10
- Rating
- –
- Downloads
- 0/day