StampyCode

This plugin addresses the need for a simple way to add HTTP headers to outbound HTTP responses in your site.
These headers can include custom ones specific to your application, or can be security related. Some you may wish to specify to protect your site may include:
<ul>
<li>Public-Key-Pins</li>
<li>Strict-Transport-Security</li>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>X-Content-Type-Options</li>
<li>Content-Security-Policy</li>
<li>Content-Security-Policy-Report-Only</li>
</ul>
<h3>Related Links</h3>
<ul>
<li><a href="http://www.troyhunt.com/2015/09/introducing-you-to-browser-security.html" rel="nofollow ugc">Troy Hunt – Introducing you to browser security headers on Pluralsight</a></li>
<li><a href="https://app.pluralsight.com/library/courses/browser-security-headers" rel="nofollow ugc">PluralSight.com – Introduction to Browser Security Headers</a></li>
<li><a href="https://www.owasp.org/index.php/List_of_useful_HTTP_headers" rel="nofollow ugc">OWASP – List of useful HTTP headers</a></li>
<li><a href="https://scotthelme.co.uk/hardening-your-http-response-headers/" rel="nofollow ugc">Scott Helme – Hardening your HTTP response headers</a></li>
</ul>

Headit

Headit is a simple plugin to allow you to add custom HTTP response headers to your site.

PureDevs

ympervej86

Do you need a secure layer over your registration process to prevent malicious site interactions? Secure User Registration is a reliable security solution designed to protect both standard and WooCommerce user registrations against CSRF attacks and bot registrations. It includes advanced features such as custom nonce implementation, email or domain blocking, and Google reCAPTCHA integration.
Features include: 
– CSRF protection for user and WooCommerce registration forms. 
– Enable or disable custom nonce fields for registration forms. 
– Block specific emails or domains using a comma-separated list. 
– Integrate Google reCAPTCHA to mitigate bot registrations. 
– Customize error messages for invalid nonce, email/domain blocklist, and captcha errors.
<h3>External Services</h3>
This plugin integrates with <a href="https://www.google.com/recaptcha/about/" rel="nofollow ugc">Google reCAPTCHA</a> to protect your site from spam and abuse.
What the service is and what it is used for: 
Google reCAPTCHA is a free service that helps protect websites from spam and abuse by using advanced risk analysis techniques to tell humans and bots apart.
What data is sent and when: 
When a user interacts with the registration form where reCAPTCHA is enabled, the following data is collected and sent to Google:
<ul>
<li>User’s IP address</li>
<li>Browser and device information</li>
<li>Cookies</li>
<li>Mouse movements and keystrokes while interacting with the reCAPTCHA widget</li>
</ul>
This data is collected by Google when the reCAPTCHA challenge is displayed or solved, to determine whether the user is a human or a bot.
Links to terms of service and privacy policy: 
– <a href="https://policies.google.com/terms" rel="nofollow ugc">Google reCAPTCHA Terms of Service</a> 
– <a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy Policy</a>
Please review these policies to understand how Google processes this data.

Secure User Registration by PureDevs

The plugin enhances site security by implementing layers of protection to user registration forms, safeguarding the site from attacks like CSRF and au …

Headit vs Secure User Registration by PureDevs