36 plugins tagged with security-headers
HTTP Headers adds CORS & security HTTP headers to your website.
Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
Security headers are directives used by web applications to configure browser-side security defenses.
This plugin generates the proper security HTTP response headers to keep your site secured.
Adds a CSP header compatible with most WP plugins without breaking styles.
SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.
Small WP Security is a WordPress plugin which provides the basic security of your site.
This plugin enhances WordPress security by implementing measures like Security Headers, changing the Login URL, disabling WP JSON API, and more.
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.
Set up WordPress SSL, HTTPS redirects, Let’s Encrypt certificates, mixed content fixes, and security headers from one guided interface.
Make WordPress lighter by removing unused assets and head clutter. See the estimated savings and control exactly what your site loads.
Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.
Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.
Your site's security, in plain English. See your real risks, honestly prioritized, and fix the safe ones in one click. No fear, no jargon.
Security from one clean dashboard: two-step verification, login limits, password policy, CAPTCHA, custom login URL, security headers and hardening.
Audits your own site for cookies set before consent, third-party hosts, Google Fonts, security headers and missing legal links.
Just Content-Security-Policy, not a security suite. Starts in Report-Only, with draft policies, built-in violation reports and page scanning.
Move your login URL, stop brute-force attacks, and send HTTP security headers on every response. Lightweight, cache-friendly, no bloat.
Practical WordPress hardening, two-factor authentication, login protection, file monitoring, and transparent security checks.
Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.
Lightweight WordPress hardening with simple switches: limit login attempts, security headers, block PHP in uploads, disable XML-RPC and more.