Kinsoft Plugins
Start a project
Kinsoft Plugins /Plugins /Security Headers
SH

Security Headers v1.0.0

Send HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and other security headers with simple presets, and check what your site sends.

Start a 14-day free trial → Get the free version

No credit card for the trial. Pro from $3.25/mo, billed annually. 14-day money-back guarantee.

Security headers tell browsers how to protect your visitors: use HTTPS only, do not let other sites put your pages in a frame, do not guess file types, keep full addresses out of the referrer, and switch off browser features your site never uses. Security scanners and audits check for them. Security Headers sends them from WordPress itself, so it works on any host without editing server configuration.

Free

$0 forever

  • Hsts
  • X-frame
  • Referrer
  • Permissions headers with presets
Download free

Security Headers Pro

$39 per year, single site

Everything in Free, plus:

  • Csp builder
  • Csp report collector
  • Per-path rules
Try Pro free for 14 days

Screenshots

Settings > Security Headers: presets and the header settings
Settings > Security Headers: presets and the header settings
The header check: what the home page really sends compared with your settings
The header check: what the home page really sends compared with your settings
Pro: the Content-Security-Policy builder with report-only mode and nonce support
Pro: the Content-Security-Policy builder with report-only mode and nonce support
Pro: path rules that set or remove headers for parts of the site
Pro: path rules that set or remove headers for parts of the site
Pro: collected CSP violation reports, grouped and counted
Pro: collected CSP violation reports, grouped and counted

Pro pricing

One licence covers updates and support for a year. Pick the number of sites you run it on.

Single site

$39/year

$3.25 per month, billed annually

Buy Single site

5 sites

$78/year

$6.50 per month, billed annually

Buy 5 sites

25 sites

$156/year

$13.00 per month, billed annually

Buy 25 sites

Checkout and licensing run on Freemius, our merchant of record. 14-day money-back guarantee. Prices in USD; any applicable tax is shown at checkout.

Requirements

WordPress 6.4 or newer (tested up to 7.1), PHP 7.4 or newer. Works with the block editor and the classic editor.

Installation

  1. Download the free version or start the Pro trial above. Freemius emails you the zip and, for Pro, your licence key.
  2. In WordPress go to Plugins → Add New → Upload Plugin, choose the zip and activate it.
  3. Pro: paste the licence key when the plugin asks for it, or later under the plugin's Account screen.

Stuck? Open a support ticket and include your WordPress and PHP versions.