Lightweight plugin by Digital Creatings that hides WordPress version info from source code, RSS feeds, scripts & HTTP headers for better protection.
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
Your site's security, in plain English. See your real risks, honestly prioritized, and fix the safe ones in one click. No fear, no jargon.
Disable unused assets, optimize resources, and add smart headers for a blazing-fast, lightweight WordPress site.
Secure your WordPress website with advanced HTTP headers, intelligent CSP management, and integrated Mozilla Observatory security analysis.
Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.
SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.
Security headers are directives used by web applications to configure browser-side security defenses.
Unified is a plugin that combines functionalities that most sites use, all in one plugin, with a sharp focus on high performance and low memory usage.
This plugin generates the proper security HTTP response headers to keep your site secured.
External uptime monitoring with downtime alerts, daily Lighthouse and Core Web Vitals scores, security header grade, and SSL expiry warnings.
Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.
Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of security configuration changes.
Configure advanced HTTP security headers for your WordPress site.
Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.
Set up WordPress SSL, HTTPS redirects, Let’s Encrypt certificates, mixed content fixes, and security headers from one guided interface.
Practical WordPress hardening, two-factor authentication, login protection, file monitoring, and transparent security checks.