Block XSS vulnerabilities by adding a Content Security Policy header, plugin receives violations to easily maintain the security policy.

Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.

This plugin generates the proper security HTTP response headers to keep your site secured.

Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.

Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.

Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.

Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.