Plugin Directory

Cookies and Content Security Policy

Johan Jonk Stenström

Be fully GDPR and CCPA compliant through Content Security Policy. Blocks cookies and unwanted external content.

Content Security Policy Manager

Patrick Sletvold

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

HTTP Security Header

MOHIT GOYAL

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

GD Security Headers

Milan Petrovic

Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.

Security Header Generator

Kevin Pirnie

This plugin generates the proper security HTTP response headers to keep your site secured.

CSP Friendly Security

Pascal CESCATO

Adds a CSP header compatible with most WP plugins without breaking styles.

No unsafe-inline

Giuseppe

No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.

CSP Violation Reporter

Guilherme Dumas Peres

Collect Content Security Policy violation reports through a WordPress REST endpoint and review them in the admin dashboard.

SeaSP Community Edition

bluetriangle

SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …

GDPR Helper using CSP

bpassini

This plugin allows easy addition of Content Security Policy

Abdal Security Headers

Ebrahim Shafiei (EbraSha)

Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.

EffortLess Custom Meta Tags

domclic

A simple and lightweight plugin to easily manage meta tags including Content-Security-Policy, description, Open Graph, and Twitter Cards.

Computernørden's Security Panel

Albert van Harten

Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.

Beplus Security Headers & Script Auditor

rimbeplus

Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.

VCNS Security Automation Manager

Simon Jackson

Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.

Script Sentinel

scriptsentinel

Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.