Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Security Headers
Security headers are directives used by web applications to configure browser-side security defenses.
The facts
- Rating
- 3★ from 2
- Active installs
- 700+
- Price
- Free
- Last updated
- 26 Mar 2026
- Added
- Sep 2022
- Requires WP
- 6.0
- Tested up to
- WP 6.9.7
- Requires PHP
- 7.4
- Downloads
- 5,998
Our analysis
AI-assistedSecurity Headers is a WordPress plugin designed to help site owners manage browser security headers directly from their WordPress dashboard. It provides an admin settings page where users can configure various security header options, such as HSTS controls, Referrer-Policy, and Content-Security-Policy settings.
This plugin is suitable for anyone looking to enhance their website's security by implementing and managing security headers. It is particularly useful for content publishers who want to protect their sites from potential hacks that could lead to loss of traffic and customers.
Best for: This plugin suits website owners who want to improve their site's security through proper header management.
What it does well
- ✓Admin settings page for easy management
- ✓Includes HSTS controls and Content-Security-Policy builder
- ✓Test tool to inspect live response headers
- ✓Import, export, and reset settings tools available
- ✓Cleans up on uninstall
Where it falls short
- •Limited user ratings may indicate mixed experiences
- •No details on specific security header effectiveness
Verdict
Security Headers provides essential tools for managing security headers in WordPress. It may be beneficial for users focused on enhancing their site's security.
From the developer
Joseph Mendez's own description of Security Headers, lightly tidied.
Security Headers helps site owners manage modern browser security headers from inside WordPress.
Features include:
- Admin settings page under Settings > Security Headers
- HSTS controls with preload warning
- Referrer-Policy and X-Frame-Options settings
- Permissions-Policy custom value field
- Content-Security-Policy builder with Report-Only mode
- Diagnostics screen showing configured headers
- Test tool to fetch and inspect your live response headers
- Import, export, and reset settings tools
- Cleanup on uninstall
Why security headers important?
When auditing websites, security headers are frequently forgotten.
Although some may argue that website security is unrelated to SEO, it does become so when a site is compromised and search traffic completely disappears.
Everyone who publishes content online should pay special attention to security headers.
Getting hacked is not good. You lose traffic, customers and it’s a pain to resolve all the issues.
But good thing you’re smart and have searched for this plugin :).
Tagged as
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)