zackdesign

AliasIO

Note: This plugin requires PHP 5
Using WordPress security docs as a guide we have targeted a lot of the issues and endeavoured to make the process of strengthening your WP installation as easy as possible by providing the information you need to be able to set things up.
Features:
<pre><code>* Scan the database for possible XSS issues.
* Limit login attempts to one per ten seconds per user.
* Check all file permissions.
* Check for presence of index.html files in all directories.
* Check if WordPress is up-to-date.
* Remove the version number from HTML source.
* Log all POST requests.
* Log all failed login attempts.
* Change the admin username.
* Randomize the database table prefix.
* Require stronger passwords.
* Detect SSH.
</code></pre>
This plugin was commisioned by <a href="http://www.michaelpenner.com/" title="MJ Penner Consulting" rel="nofollow ugc">MJ Penner Consulting</a> and released to the general public as a gesture of good will.

MJP Security Plugin

MJP Security Tools is a plugin designed to fix a lot of Wordpress security issues, as well as providing extra support.

StampyCode

This plugin addresses the need for a simple way to add HTTP headers to outbound HTTP responses in your site.
These headers can include custom ones specific to your application, or can be security related. Some you may wish to specify to protect your site may include:
<ul>
<li>Public-Key-Pins</li>
<li>Strict-Transport-Security</li>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>X-Content-Type-Options</li>
<li>Content-Security-Policy</li>
<li>Content-Security-Policy-Report-Only</li>
</ul>
<h3>Related Links</h3>
<ul>
<li><a href="http://www.troyhunt.com/2015/09/introducing-you-to-browser-security.html" rel="nofollow ugc">Troy Hunt – Introducing you to browser security headers on Pluralsight</a></li>
<li><a href="https://app.pluralsight.com/library/courses/browser-security-headers" rel="nofollow ugc">PluralSight.com – Introduction to Browser Security Headers</a></li>
<li><a href="https://www.owasp.org/index.php/List_of_useful_HTTP_headers" rel="nofollow ugc">OWASP – List of useful HTTP headers</a></li>
<li><a href="https://scotthelme.co.uk/hardening-your-http-response-headers/" rel="nofollow ugc">Scott Helme – Hardening your HTTP response headers</a></li>
</ul>

Headit

Headit is a simple plugin to allow you to add custom HTTP response headers to your site.

MJP Security Plugin vs Headit