VOLIXTA TEAM

Is your WordPress site still serving pages over HTTP instead of HTTPS? 
Do you see browser warnings like “Not Secure” even though you installed SSL? 
Are you getting mixed content errors in Chrome or Firefox after enabling HTTPS? 
Or is your Site Health report complaining about missing security headers?
👉 Volixta SSL & Security Headers fixes all of these in a few clicks. 
Easily activate SSL, force 301 redirects, repair mixed content, and add recommended WordPress security headers like HSTS, CSP, and X-Frame-Options.
<h3>🔐 What does Volixta do?</h3>
<ul>
<li>Activate SSL automatically: safely update your WordPress <code>home</code> and <code>siteurl</code> to use <code>https://</code>.</li>
<li>Force HTTPS with 301 redirect: adds a safe <code>.htaccess</code> block on Apache/LiteSpeed, or falls back to a PHP redirect if needed.</li>
<li>Fix mixed content: scans your posts, postmeta, and options for <code>http://</code> links and replaces them with <code>https://</code> (serialization-safe).</li>
<li>Apply modern HTTP Security Headers: HSTS, Content-Security-Policy (<code>upgrade-insecure-requests</code>), X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP. All values are editable before applying.</li>
<li>Nginx friendly: when <code>.htaccess</code> is not available, Volixta shows ready-to-use Nginx snippets for redirects and headers.</li>
<li>Site Health integration: new tests for SSL validity, HTTPS redirect, and security headers presence.</li>
</ul>
<h3>✅ Why choose Volixta?</h3>
<ul>
<li>Safe by design: 
Nothing is applied automatically. You choose what to enable. Each <code>.htaccess</code> write creates a timestamped backup. </li>
<li>Serialization-safe mixed content fixer: no risk of breaking complex data in <code>postmeta</code> or <code>options</code>. </li>
<li>Admin-only: no runtime overhead on the frontend (except optional PHP redirect). </li>
<li>Localhost aware: detects local environments (<code>localhost</code>, <code>.local</code>, <code>.test</code>) and shows guided instructions with <a href="https://github.com/FiloSottile/mkcert" rel="nofollow ugc">mkcert</a>. </li>
</ul>
<h3>🔎 Typical problems solved</h3>
<ul>
<li>
“How do I activate SSL in WordPress?” 
→ One click in Volixta updates your site to HTTPS safely.
</li>
<li>
“How do I force HTTPS with 301 redirects?” 
→ Volixta inserts a safe <code>.htaccess</code> 301 redirect or a PHP fallback.
</li>
<li>
“My Site Health report says ‘No security headers detected’.” 
→ Apply missing security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, etc.) in one click.
</li>
<li>
“How can I add WordPress security headers without editing code?” 
→ Use Volixta’s panel to configure and apply headers safely.
</li>
<li>
“After enabling SSL, my site still shows mixed content errors.” 
→ Run the Mixed Content Scan + Fixer to repair unsafe links automatically.
</li>
<li>
“I’m on Nginx, so .htaccess doesn’t work.” 
→ Copy/paste the Nginx-ready snippets Volixta provides for HTTPS redirects and headers.
</li>
</ul>
<h3>Privacy</h3>
This plugin does not collect, store, or transmit personal data. Only saves minimal config in <code>wp_options</code>.
<h3>Localization</h3>
Text domain: <code>volixta-ssl-security-headers</code> 
Load path: <code>/languages</code> (WP.org language packs auto-loaded)
<h3>What’s Next</h3>
If you like this plugin, then consider checking out our other plugins:
<ul>
<li>
<a href="https://volixta.com" rel="nofollow ugc">VOLIXTA Booking – The All-in-One WordPress Booking Plugin</a> 
Manage unlimited staff, services, clients, payments, and locations in one powerful system.
</li>
<li>
<a href="https://volixta.com/volixta-security-suite" rel="nofollow ugc">VOLIXTA Security Suite – Advanced WordPress Security Made Simple</a>
</li>
</ul>

Volixta SSL & Security Headers

Add modern security headers, enable SSL/HTTPS, fix mixed content, and force 301 redirects. Fast and safe.

Puneet Tiwari

Essentials by Digital Creatings is a lightweight and powerful WordPress plugin designed to improve security, optimize performance, and enhance email functionality. This plugin provides essential security features, removes unnecessary WordPress bloat, and allows you to customize SMTP settings for email delivery.
New in Version 1.3: 
✔ SMTP Email Configuration – Set up SMTP credentials for outgoing emails 
✔ Test Email Feature – Send test emails directly from the admin panel 
✔ Login Security – Customize the login URL to enhance security (Coming soon) 
✔ Additional Security Features – Disable REST API links, self-pingbacks, and Google Maps 
✔ Improved Performance – Remove jQuery Migrate, RSD links, shortlinks, and embed scripts
🔒 Security + Optimization + Email Control in one plugin!
Features: 
🔹 Security Enhancements: 
– Disable XML-RPC to prevent brute force attacks 
– Hide WordPress version details (meta, query strings, HTTP headers) 
– Remove REST API links to reduce exposure 
– Disable RSS feeds and feed links 
– Block self-pingbacks and comment spam 
– Remove RSD (Really Simple Discovery) link 
– Remove shortlinks for better privacy
🚀 Performance Optimizations: 
– Disable Emojis to reduce unnecessary script loads 
– Remove jQuery Migrate to improve front-end speed 
– Disable Google Maps API if unused 
– Remove WordPress embeds to prevent external content embedding
📧 SMTP Email Configuration: 
– Configure SMTP settings (Host, Port, Username, Password, Encryption) 
– Set custom “From Name” and “From Email” for outgoing emails 
– Send test emails directly from the admin panel
🔐 Login Security: 
– Customize the WordPress login URL to prevent brute force attacks
<h3>New Features in 1.3</h3>
🆕 SMTP Email Configuration – Custom SMTP settings for all WordPress emails 
🆕 Test Email Functionality – Verify email settings with a test email feature 
🆕 Login Security – Customize the login URL for added security 
🆕 Security Enhancements – Disable RSS feeds, REST API links, and more 
🆕 Performance Boost – Remove jQuery Migrate, Google Maps, and WordPress embeds
<h3>Support</h3>
For support, please visit <a href="https://www.digitalcreatings.com" rel="nofollow ugc">Digital Creatings</a>.

Essentials by Digital Creatings

Lightweight plugin by Digital Creatings that hides WordPress version info from source code, RSS feeds, scripts & HTTP headers for better protection.

Volixta SSL & Security Headers vs Essentials by Digital Creatings