PluginScout

Security Headers — WordPress Security Plugin

by Joseph Mendez · WordPress.org page · Website

v1.4.0 Tested up to WP 6.9.7 PHP 7.4+

Security Headers has 700+ active installs on WordPress.org and 6,055 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on March 26, 2026, tested up to WordPress 6.9.7.

Security Headers at a glance

Active installs
700+
Total downloads
6,055
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is Security Headers well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Behind
tested up to WordPress 6.9.7, not yet with the current 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Admin settings page under Settings > Security Headers
  • HSTS controls with preload warning
  • Referrer-Policy and X-Frame-Options settings
  • Permissions-Policy custom value field
  • Content-Security-Policy builder with Report-Only mode
  • Diagnostics screen showing configured headers
  • Test tool to fetch and inspect your live response headers
  • Import, export, and reset settings tools
  • Cleanup on uninstall

Security Headers reviews and ratings

2 reviews on WordPress.org, with the most recent ones as their authors posted them.

All reviews
3.0 out of 5

2 reviews

5★
1
4★
0
3★
0
2★
0
1★
1

  • Site Killer

    No warning, no instruction of what to do if you site goes down, no configuration options, deleting the plugin directory does not resort your website. From my experience, unless you have hours with nothing better to do except rebuild your WordPress website, installing advise not to install this plugin

    nofarrell

  • great work - A+ score indeed!!!!

    I installed the plugin. great work!!!!!! from F score to A+ score. Thank you for creating this plugin, t was really hard to do it on a htaccess file and server configuration stuff not familiar... and with this plugin i dont need to touch teh htaccess file, it works.

    vevsglobal

Where Security Headers ranks on WordPress.org

The rankings we track that Security Headers appears in, and how its position changed over 30 days.

Ranking WordPress.org placement Position 30 days
Best Security Plugins #60 in search, not tagged #96 –

Details

Security headers are directives used by web applications to configure browser-side security defenses.

The full description, screenshots and every review live on the WordPress.org page.

Tags

  • Security Headers
  • seo security headers

More from Joseph Mendez

Version
1.4.0
Last updated
Mar 26, 2026
First published
Sep 24, 2022
Requires WordPress
6.0
Tested up to
6.9.7
Requires PHP
7.4
Pricing
Free on WordPress.org

Security Headers FAQ

What does Security Headers do?

According to its WordPress.org readme, Security Headers offers Admin settings page under Settings > Security Headers, HSTS controls with preload warning, Referrer-Policy and X-Frame-Options settings, Permissions-Policy custom value field and Content-Security-Policy builder with Report-Only mode.

How many active installs does Security Headers have?

WordPress.org reports 700+ active installs for Security Headers as of September 7, 2026.

Is Security Headers still maintained?

Yes. The last release was on March 26, 2026 and it is tested up to WordPress 6.9.7.

Is Security Headers free?

Security Headers is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.

Where does Security Headers rank among Security Plugins?

Security Headers is #96 in the WordPress.org Security Plugins ranking.