Kevin Pirnie

This plugin generates the proper security HTTP response headers, attempts to generate a valid Content Security Policy, and sets browser permissions if configured.

Security Header Generator

Excellent

This plugin generates the proper security HTTP response headers to keep your site secured.

Muhammad Junaid Tariq

The WPS Protect: Login URL & Security Headers plugin enhances your WordPress site security with multiple layers of protection. It provides a comprehensive solution for securing your WordPress installation through custom login URL protection, advanced security headers, and SSL enforcement.
Key Features:
<ul>
<li>
Custom Login URL Protection
<ul>
<li>Change and hide the default WordPress login URL</li>
<li>Protect against brute force attacks</li>
<li>Maintain compatibility with wp-admin access</li>
</ul>
</li>
<li>
Advanced Security Headers
<ul>
<li>X-Frame-Options: Prevent clickjacking attacks</li>
<li>X-XSS-Protection: Enable browser’s XSS filtering</li>
<li>X-Content-Type-Options: Prevent MIME-type sniffing</li>
<li>Content-Security-Policy (CSP): Control resource loading</li>
<li>Permissions-Policy: Control browser features and APIs</li>
<li>Strict-Transport-Security (HSTS): Enforce HTTPS</li>
<li>Referrer-Policy: Control referrer information</li>
<li>Access-Control-Allow-Origin: Manage CORS policies</li>
</ul>
</li>
<li>
SSL Enforcement
<ul>
<li>Force HTTPS across your site</li>
<li>Secure cookie handling</li>
<li>Mixed content protection</li>
</ul>
</li>
<li>
User-Friendly Interface
<ul>
<li>Tab-based admin interface</li>
<li>Easy configuration of all security features</li>
<li>Recommended values for security headers</li>
<li>Real-time feedback on settings changes</li>
</ul>
</li>
</ul>

WPS Protect: Login URL & Security Headers

The WPS Protect: Login URL & Security Headers plugin enhances your WordPress site security with multiple layers of protection.

Security Header Generator vs WPS Protect: Login URL & Security Headers