Best security headers plugins for WordPress

HTTP Headers

Up in the last 7 days:3#798

by Dimitar Ivanov23 days ago

HTTP Headers adds CORS & security HTTP headers to your website.

Content Security Policy Manager

Down in the last 7 days:4#4,847

by Patrick Sletvold4 years ago

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

HTTP Security Header

Down in the last 7 days:10#5,417

by MOHIT GOYAL10 months ago

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Security Headers

Down in the last 7 days:1#7,550

by Joseph Mendez9 days ago

Security headers are directives used by web applications to configure browser-side security defenses.

Security Header Generator

Down in the last 7 days:29#9,451

by Kevin Pirnie1 month ago

This plugin generates the proper security HTTP response headers to keep your site secured.

CSP Friendly Security

Up in the last 7 days:3#11,717

by Pascal CESCATO2 months ago

Adds a CSP header compatible with most WP plugins without breaking styles.

Zen Site Security

Down in the last 7 days:225#19,168

by Guram Zhgamadze1 month ago

SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.

Small WP Security

Up in the last 7 days:57#21,440

by Alex Kuimov8 years ago

Small WP Security is a WordPress plugin which provides the basic security of your site.

Improve Website Security

Down in the last 7 days:210#22,875

by ideasToCode2 months ago

This plugin enhances WordPress security by implementing measures like Security Headers, changing the Login URL, disabling WP JSON API, and more.

WT Hardening

Up in the last 7 days:46#26,602

by Webmasters.Team1 month ago

WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.

Abdal Security Headers

#31,430

by Ebrahim Shafiei (EbraSha)2 months ago

Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.

Strict Security Headers

Up in the last 7 days:57#34,014

by Justin Kopepasah3 years ago

Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.

Volixta SSL & Security Headers

Down in the last 7 days:1,730#34,633

by VOLIXTA TEAM8 days ago

Set up WordPress SSL, HTTPS redirects, Let’s Encrypt certificates, mixed content fixes, and security headers from one guided interface.

FlashSpeed

Down in the last 7 days:123#34,648

by Matt Biscay11 days ago

Make WordPress lighter by removing unused assets and head clutter. See the estimated savings and control exactly what your site loads.

Maasters Security Shield

#49,075

by The Maasters7 days ago

Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.

Unified

#51,284

by Daev.tech2 years ago

Unified is a plugin that combines functionalities that most sites use, all in one plugin, with a sharp focus on high performance and low memory usage.

CAS Antivirus

#53,638

by soysupercas1 month ago

Free WordPress security plugin with malware scanner, HTTP Security Headers, WordPress core restoration and TOTP Two-Factor Authentication.

Apexly DSGVO-Check

Up in the last 7 days:12,544#55,287

by pepelabs2 months ago

Audits your own site for cookies set before consent, third-party hosts, Google Fonts, security headers and missing legal links.

360 Orbit Header Security

Up in the last 7 days:16,508#56,278

by Jörg Liwa17 days ago

Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.

fepo CSP & Security Headers

#56,605

by fepo10 days ago

Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.

Aegistha Security Checkup

Down in the last 7 days:3,495#57,349

by timbalabuch2 months ago

Your site's security, in plain English. See your real risks, honestly prioritized, and fix the safe ones in one click. No fear, no jargon.

Cerrojo Security Toolkit

Up in the last 7 days:3,509#59,028

by carlose1191 month ago

Review security diagnostics and apply reversible WordPress hardening controls with explicit compatibility guidance.

Codo Content Security Policy

#59,798

by Codo Digital Ltd1 day ago

Just Content-Security-Policy, not a security suite. Starts in Report-Only, with draft policies, built-in violation reports and page scanning.

Security Headers Audit

Down in the last 7 days:2,415#60,811

by Chowdhari Chetan4 months ago

Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of …

WebSentry Security Monitor

#61,481

by Websentry Security9 days ago

Check your site's security from WordPress: SSL, security headers, cookies and DNS, graded A-F. Free account, no credit card.

Computernørden’s Security Panel

Down in the last 7 days:1,342#63,255

by Albert van Harten1 day ago

Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.

Jeelsh HTTP Headers

Up in the last 7 days:4,905#64,269

by jeelshy3 months ago

Configure advanced HTTP security headers for your WordPress site.

Stoutwall

#65,195

by Pitol2 days ago

Lightweight WordPress hardening with simple switches: limit login attempts, security headers, block PHP in uploads, disable XML-RPC and more.

Gmcfuerte Security Headers

Down in the last 7 days:7,440#65,955

by GMC Fuerte — Giulio Maria Cappellano24 days ago

Recommended security headers with safe presets, never sent twice, plus a read-only self-check that explains what your site really sends.

Tuning4Web

Up in the last 7 days:4,758#66,719

by Piotr Kunicki25 days ago

Checks your site the way an anonymous visitor sees it, verifies that your WordPress hardening actually works, and lists external scripts it loads.

Rooted Dev Studio Security Toolkit

Up in the last 7 days:930#68,557

by bigdawgdad21852 months ago

Practical WordPress hardening, two-factor authentication, login protection, file monitoring, and transparent security checks.

Script Sentinel

Down in the last 7 days:13,053#69,420

by scriptsentinel2 months ago

Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.

Balui Security Suite

#73,127

by Balui Digital6 days ago

Security from one clean dashboard: two-step verification, login limits, password policy, CAPTCHA, custom login URL, security headers and hardening.

WPS Protect

#73,447

by Muhammad Junaid Tariq2 months ago

Move your login URL, stop brute-force attacks, and send HTTP security headers on every response. Lightweight, cache-friendly, no bloat.

FBS Secure Optimize

#73,497

by Fazle Bari7 days ago

Modular speed optimization, database & autoload cleaner, HTTP security headers, login brute-force shield, and 6-layer malware scanner.

Blue Coral

#73,584

by Nguyen Le1 month ago

Site audit, plugin control, performance, security, maintenance, and administration tools for WordPress sites and multisite networks.