Plugin Directory

HTTP Headers

Dimitar Ivanov

HTTP Headers adds CORS & security HTTP headers to your website.

Content Security Policy Manager

Patrick Sletvold

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

HTTP Security Header

MOHIT GOYAL

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Security Headers

Joseph Mendez

Security headers are directives used by web applications to configure browser-side security defenses.

Security Header Generator

Kevin Pirnie

This plugin generates the proper security HTTP response headers to keep your site secured.

CSP Friendly Security

Pascal CESCATO

Adds a CSP header compatible with most WP plugins without breaking styles.

Zen Site Security

Guram Zhgamadze

SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.

Small WP Security – SP SWS

Alex Kuimov

Small WP Security is a WordPress plugin which provides the basic security of your site.

Improve Website Security

ideasToCode

This plugin enhances WordPress security by implementing measures like Security Headers, changing the Login URL, disabling WP JSON API, and more.

Volixta SSL & Security Headers

VOLIXTA TEAM

Set up WordPress SSL, HTTPS redirects, Let’s Encrypt certificates, mixed content fixes, and security headers from one guided interface.

FlashSpeed

Matt Biscay

Make WordPress lighter by removing unused assets and head clutter. See the estimated savings and control exactly what your site loads.

Strict Security Headers

Justin Kopepasah

Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.

WT Hardening

Webmasters.Team

WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.

Abdal Security Headers

Ebrahim Shafiei (EbraSha)

Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.

PingView — External Uptime Monitoring

marcinatpingview

External uptime monitoring with downtime alerts, daily Lighthouse and Core Web Vitals scores, security header grade, and SSL expiry warnings.

Unified – Email Log, Email Queue, Page cache and more

Daev.tech

Unified is a plugin that combines functionalities that most sites use, all in one plugin, with a sharp focus on high performance and low memory usage.

Jeelsh HTTP Headers

jeelshy

Configure advanced HTTP security headers for your WordPress site.

Blue Coral – Site Audit, Performance, Admin Toolkit

Nguyen Le

Site audit, plugin control, performance, security, maintenance, and administration tools for WordPress sites and multisite networks.

Aegistha Security Checkup

timbalabuch

Your site's security, in plain English. See your real risks, honestly prioritized, and fix the safe ones in one click. No fear, no jargon.

Apexly DSGVO-Check

pepelabs

Audits your own site for cookies set before consent, third-party hosts, Google Fonts, security headers and missing legal links.

WPS Protect: Login URL & Security Headers

Muhammad Junaid Tariq

Move your login URL, stop brute-force attacks, and send HTTP security headers on every response. Lightweight, cache-friendly, no bloat.

Rooted Dev Studio Security Toolkit

bigdawgdad2185

Practical WordPress hardening, two-factor authentication, login protection, file monitoring, and transparent security checks.

Script Sentinel

scriptsentinel

Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.

Cerrojo Security Toolkit

carlose119

Review security diagnostics and apply reversible WordPress hardening controls with explicit compatibility guidance.