License: GPLv2 or later WordPress plugin to add secure headers to your website.

Dimitar Ivanov

HTTP Headers

HTTP Headers adds CORS & security HTTP headers to your website.

Rob Scott

Eazy HTTP Headers

Provides settings to activate three HTTP header settings for X-Frame-Options, X-XSS Protection & X-Content-Type-Options.

bluetriangle

SeaSP Community Edition

SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security  …

Justin Kopepasah

Strict Security Headers

Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.

Louis

WP Remove Authors Sitemap from Yoast SEO

License: GPLv2 or later WordPress plugin to remove authors from the Yoast SEO Sitemap

Alex Lion (阿力獅)

Andrea Ferro

Rimas

Augusto Bombana

Headers Security Advanced & HSTS WP

Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.

Nick C

GNU Terry Pratchett

Add an X-Clacks-Overhead header with “GNU Terry Pratchett” to all non-admin pages.

Mikel King

Simple Iframe Buster

Provides a method of setting the X-Frame-Options header to SAMEORIGIN. Also enqueues a javascript based iframe blocker.

Sentinel Headers Unlimited Extension

This WordPress Plugin add secure headers to you WordPress site.
The Following Headers are included: 
– Strict-Transport-Security: Enforces SSL if your website is using SSL (which it should be) 
– X-Frame-Options: Prevents Clickjacking 
– X-XSS-Protection: Prevents XSS attacks 
– X-Content-Type-Options: set to ‘nosniff to prevent MIME-type sniffing 
– Referrer-Policy: set to ‘no-referrer-when-downgrade’
<ul>
<li>No setup required!</li>
</ul>

Alternatives to WP Secure HTTP Headers

Top alternatives