Plugin Directory

Headers Security Advanced & HSTS WP

Andrea Ferro

Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.

Content Security Policy Manager

Patrick Sletvold

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

GD Security Headers

Milan Petrovic

Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.

Auto SRI

zfir

Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.

CSP Friendly Security

Pascal CESCATO

Adds a CSP header compatible with most WP plugins without breaking styles.

No unsafe-inline

Giuseppe

No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.

Security Headers & Caching

Studio Be4

Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.

CSP Violation Reporter

Guilherme Dumas Peres

Collect Content Security Policy violation reports through a WordPress REST endpoint and review them in the admin dashboard.

EssentialHeaders

Alex Hedström

Adds the essential HTTP security headers WordPress leaves out—on every public site response.

SeaSP Community Edition

bluetriangle

SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …

GDPR Helper using CSP

bpassini

This plugin allows easy addition of Content Security Policy

Fix It Easy Security Headers

WP Fix It - WordPress Experts

Configure core HTTP security headers for your WordPress site in a few clicks.

Abdal Security Headers

Ebrahim Shafiei (EbraSha)

Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.

Headit

StampyCode

Headit is a simple plugin to allow you to add custom HTTP response headers to your site.

Onionify – Onion Service for WP

Ivijan-Stefan Stipic

Serve WordPress cleanly over .onion with URL rewriting, Onion-Location, and privacy hardening.

BoundaryGuard Headers

Jay Suthar

Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.

WebKernelAI Security

Aamir Sahil

A secure WordPress connector to remotely manage, audit, and harden your site from the WebKernelAI dashboard with cryptographic signature verification.

Security Headers Audit

Chowdhari Chetan

Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of …

Jeelsh HTTP Headers

jeelshy

Configure advanced HTTP security headers for your WordPress site.

Beplus Security Headers & Script Auditor

rimbeplus

Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.

Webro Security

webro

Adds security headers, CSP, login protection, SMTP configuration and spam protection to harden your WordPress site.

VCNS Security Automation Manager

Simon Jackson

Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.

Script Sentinel

scriptsentinel

Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.

Rapid Security Manager

rapidplugins

WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.