Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
HTTP Headers
HTTP Headers adds CORS & security HTTP headers to your website.
The facts
- Rating
- 4.3★ from 70
- Active installs
- 50k+
- Price
- Free
- Last updated
- 27 Apr 2026
- Added
- May 2016
- Requires WP
- 3.2
- Tested up to
- WP 6.9.7
- Requires PHP
- 5.3
- Downloads
- 781,039
Our analysis
AI-assistedHTTP Headers is a WordPress plugin that allows you to manage the HTTP headers returned by your website. It supports a wide range of headers, including security-related options such as Content-Security-Policy and Strict-Transport-Security, which can help enhance your site's security and performance.
This plugin is suitable for website administrators who want to have more control over the HTTP headers for their site, particularly those focused on improving security and compliance with modern web standards.
Best for: Website administrators looking to enhance security and manage HTTP headers.
What it does well
- ✓Allows control over various HTTP headers
- ✓Supports a wide range of security-related headers
- ✓Free to use from the WordPress.org directory
- ✓Active installation count of 50,000
- ✓High directory score of 82/100
Where it falls short
- •Limited information on specific configuration options
- •No advanced features mentioned
Verdict
HTTP Headers provides a straightforward way to manage HTTP headers for your WordPress site. It is particularly useful for those focused on security and compliance.
From the developer
Dimitar Ivanov's own description of HTTP Headers, lightly tidied.
HTTP Headers gives your control over the http headers returned by your blog or website.
Headers supported by HTTP Headers includes:
- Access-Control-Allow-Origin
- Access-Control-Allow-Credentials
- Access-Control-Max-Age
- Access-Control-Allow-Methods
- Access-Control-Allow-Headers
- Access-Control-Expose-Headers
- Age
- Content-Security-Policy
- Content-Security-Policy-Report-Only
- Cache-Control
- Clear-Site-Data
- Connection
- Content-Encoding
- Content-Type
- Cross-Origin-Embedder-Policy
- Cross-Origin-Opener-Policy
- Cross-Origin-Resource-Policy
- Expect-CT
- Expires
- Feature-Policy
- NEL
- Permissions-Policy
- Pragma
- P3P
- Referrer-Policy
- Report-To
- Strict-Transport-Security
- Timing-Allow-Origin
- Vary
- WWW-Authenticate
- X-Content-Type-Options
- X-DNS-Prefetch-Control
- X-Download-Options
- X-Frame-Options
- X-Permitted-Cross-Domain-Policies
- X-Powered-By
- X-Robots-Tag
- X-UA-Compatible
- X-XSS-Protection
Tagged as
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)