StampyCode

<p>This plugin addresses the need for a simple way to add HTTP headers to outbound HTTP responses in your site.</p>
<p>These headers can include custom ones specific to your application, or can be security related. Some you may wish to specify to protect your site may include:</p>
<ul>
<li>Public-Key-Pins</li>
<li>Strict-Transport-Security</li>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>X-Content-Type-Options</li>
<li>Content-Security-Policy</li>
<li>Content-Security-Policy-Report-Only</li>
</ul>
<h3>Related Links</h3>
<ul>
<li><a href="http://www.troyhunt.com/2015/09/introducing-you-to-browser-security.html" rel="nofollow ugc">Troy Hunt – Introducing you to browser security headers on Pluralsight</a></li>
<li><a href="https://app.pluralsight.com/library/courses/browser-security-headers" rel="nofollow ugc">PluralSight.com – Introduction to Browser Security Headers</a></li>
<li><a href="https://www.owasp.org/index.php/List_of_useful_HTTP_headers" rel="nofollow ugc">OWASP – List of useful HTTP headers</a></li>
<li><a href="https://scotthelme.co.uk/hardening-your-http-response-headers/" rel="nofollow ugc">Scott Helme – Hardening your HTTP response headers</a></li>
</ul>


Headit

Headit is a simple plugin to allow you to add custom HTTP response headers to your site.

Max Harmony

<p>Add NSA Header uses a list of keywords known to be sensitive to mass spying operations. It randomly selects a few of those keywords with each page request and includes them in an NSA-Keywords HTTP header. This introduces useless information to mass spying operations, reducing their effectiveness.</p>
<p>It is recommended that this be used only on WordPress sites that are only accessible via TLS.</p>


Add NSA Header

Add NSA Header adds an NSA-Keywords HTTP header to reduce the effectiveness of mass spying operations.

Headit vs Add NSA Header