Louis

This WordPress Plugin add secure headers to you WordPress site.
The Following Headers are included: 
– Strict-Transport-Security: Enforces SSL if your website is using SSL (which it should be) 
– X-Frame-Options: Prevents Clickjacking 
– X-XSS-Protection: Prevents XSS attacks 
– X-Content-Type-Options: set to ‘nosniff to prevent MIME-type sniffing 
– Referrer-Policy: set to ‘no-referrer-when-downgrade’
<ul>
<li>No setup required!</li>
</ul>

WP Secure HTTP Headers

License: GPLv2 or later WordPress plugin to add secure headers to your website.

Rob Scott

Eazy HTTP Headers provides three check boxes for settings on the general settings page. 
Two of the check boxes, activate two functions built into WordPress, send_frame_options_header() & send_nosniff_header(), while the other sets a header for X-XSS Protection. 
This allows you to control your sites HTTP Headers for X-Frame-Options & X-Content-Type-Options using functions built into WordPress functions.

Eazy HTTP Headers

Provides settings to activate three HTTP header settings for X-Frame-Options, X-XSS Protection & X-Content-Type-Options.

WP Secure HTTP Headers vs Eazy HTTP Headers