WordPress Security Headers plugins

Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.

HTTP Headers adds CORS & security HTTP headers to your website.

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Security headers are directives used by web applications to configure browser-side security defenses.

This plugin generates the proper security HTTP response headers to keep your site secured.

Adds a CSP header compatible with most WP plugins without breaking styles.

Add modern security headers, enable SSL/HTTPS, fix mixed content, and force 301 redirects for WordPress. Fast, safe, and easy to use.

Small WP Security is a WordPress plugin which provides the basic security of your site.

This plugin enhances WordPress security by implementing measures like Security Headers, changing the Login URL, disabling WP JSON API, and more.

Enhance WordPress security with essential HTTP security headers, protecting against XSS, clickjacking, and other common web vulnerabilities.

Speed up WordPress & WooCommerce sites instantly. Disable unused assets, optimize Core Web Vitals, add security headers. Boost SEO & conversions.

Lightweight WordPress essentials for security, performance, SMTP email, and custom code — built by Digital Creatings.

Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.

Manage contact info, business hours, schema SEO, and harden login security with custom slugs and CAPTCHA from a single premium admin panel.

Unified is a plugin that combines functionalities that most sites use, all in one plugin, with a sharp focus on high performance and low memory usage.

Secure your WordPress website with advanced HTTP headers, intelligent CSP management, and integrated Mozilla Observatory security analysis.

WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.