WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.
Headit is a simple plugin to allow you to add custom HTTP response headers to your site.
Collect Content Security Policy violation reports through a WordPress REST endpoint and review them in the admin dashboard.
Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.
A secure WordPress connector to remotely manage, audit, and harden your site from the WebKernelAI dashboard with cryptographic signature verification.
Block XSS vulnerabilities by adding a Content Security Policy header, plugin receives violations to easily maintain the security policy.
Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.
Adds the essential HTTP security headers WordPress leaves out—on every public site response.
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
Configure core HTTP security headers for your WordPress site in a few clicks.
Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.
Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of security configuration changes.
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
Configure advanced HTTP security headers for your WordPress site.
Serve WordPress cleanly over .onion with URL rewriting, Onion-Location, and privacy hardening.
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.
Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.