WordPress Security Headers plugins

Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.

HTTP Headers adds CORS & security HTTP headers to your website.

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

Security headers are directives used by web applications to configure security defenses.

This plugin generates the proper security HTTP response headers to keep your site secured.

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Adds a CSP header compatible with most WP plugins without breaking styles.

Small WP Security is a WordPress plugin which provides the basic security of your site.

This plugin enhances WordPress security by implementing measures like Security Headers, changing the Login URL, disabling WP JSON API, and more.

Add modern security headers, enable SSL/HTTPS, fix mixed content, and force 301 redirects. Fast and safe.

Enhance WordPress security with essential HTTP security headers, protecting against XSS, clickjacking, and other common web vulnerabilities.

Disable unused assets, optimize resources, and add smart headers for a blazing-fast, lightweight WordPress site.

Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.

Lightweight plugin by Digital Creatings that hides WordPress version info from source code, RSS feeds, scripts & HTTP headers for better protection.

Unified is a plugin that combines functionalities that most sites use, all in one plugin, with a sharp focus on high performance and low memory usage.

Secure your WordPress website with advanced HTTP headers, intelligent CSP management, and integrated Mozilla Observatory security analysis.