Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.

Do Not Iframe My Wordpress Site

This simple anticlickjacking script prevents your site from being clickjacked, following the owasp best practice using the Best-for-now Legacy Browser Frame Breaking Script.

Adds an HTTP header and OWASP's legacy browser frame breaking script to prevent clickjacking.

Add essential HTTP security headers to protect your WordPress site from attacks and improve security.