Headers Security Advanced & HSTS WP — WordPress Security Plugin
by Andrea Ferro · WordPress.org page · Website
Headers Security Advanced & HSTS WP has 90,000+ active installs on WordPress.org and 1,625,287 downloads all time. It was downloaded 19,091 times in the last 30 days. The last update was on September 4, 2026, tested up to WordPress 7.0.7.
Headers Security Advanced & HSTS WP at a glance
Is Headers Security Advanced & HSTS WP well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- X-XSS-Protection (Deprecated)
- Pragma (Deprecated)
- Public-Key-Pins (Deprecated)
- Expect-CT (Deprecated)
- Access-Control-Allow-Origin
- Access-Control-Allow-Methods
- Access-Control-Allow-Headers
- X-Content-Security-Policy
- X-Content-Type-Options
- X-Frame-Options
- X-Permitted-Cross-Domain-Policies
- X-Powered-By
Headers Security Advanced & HSTS WP reviews and ratings
80 reviews on WordPress.org, with the most recent ones as their authors posted them.
80 reviews
- 5★
-
73
- 4★
-
3
- 3★
-
1
- 2★
-
2
- 1★
-
1
-
used it on 10+ websites, all work fine
before I would have to write the security headers per setup: some hosting providers would already write some, some setups have cloudflare, other setups have nginx and it's more complicated to do that. This is just a simple plug & play, if you have issues then use the settings. for now it worked fine, hopefully it will keep doing it's job properly! many thanks to the author!
Eduard Doloc -
Adds too much and slows the pageload
Adds a lot of unnecessary headers that accomplish nothing. And it seems to slow page load. You're better off manually editing the htaccess file with just a few absolutely necessary headers.
mesmer7 -
Fantastic!
Fantastic Plugin!
Ben -
Awesome
I already loved the plugin! But the help I received from Andrea Ferro when a problem arose was also fantastic. Fantastic!Thanks
ElsBer -
Great plugin and support
A very usefull and efficient plugin which bring important security to websites by just installing it !I have some questions and the support was very friendly and quick to answer. Thanks for your great plugin and your kindness !
Fantou -
Great plugin and even better developer!
5 stars for this plugin. It's well done and Andrea is super helpful and fast with questions! Highly recommended. Thank you.
boxhamster
Download and install history
78,945 downloads over the last 48 days. Snapshots taken daily from WordPress.org.
Where Headers Security Advanced & HSTS WP ranks on WordPress.org
The rankings we track that Headers Security Advanced & HSTS WP appears in, and how its position changed over 30 days.
| Ranking | WordPress.org placement | Position | 30 days |
|---|---|---|---|
| Best Security Plugins | #22 in search, not tagged | #49 | ▼4 |
| Best CDN Plugins | #57 in search, not tagged | #100 | ▼12 |
Headers Security Advanced & HSTS WP alternatives
Plugins that solve the same problem, ranked by how closely they overlap with Headers Security Advanced & HSTS WP.
-
WP Hide & Security Enhancer 50,000+ installs · 4.3 -
BackWPup 400,000+ installs · 4.0 -
Autoptimize 800,000+ installs · 4.7 -
W3 Total Cache 900,000+ installs · 4.4 -
User Role Editor 700,000+ installs · 4.5
Details
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
The full description, screenshots and every review live on the WordPress.org page.
Tags
- clickjacking
- csp
- headers
- headers security
- hsts
- Version
- 5.3.5
- Last updated
- Sep 4, 2026
- First published
- Sep 4, 2021
- Requires WordPress
- 4.7
- Tested up to
- 7.0.7
- Requires PHP
- 7.4
- Pricing
- Free on WordPress.org
Headers Security Advanced & HSTS WP FAQ
What does Headers Security Advanced & HSTS WP do?
According to its WordPress.org readme, Headers Security Advanced & HSTS WP offers X-XSS-Protection (Deprecated), Pragma (Deprecated), Public-Key-Pins (Deprecated), Expect-CT (Deprecated) and Access-Control-Allow-Origin.
How many active installs does Headers Security Advanced & HSTS WP have?
WordPress.org reports 90,000+ active installs for Headers Security Advanced & HSTS WP as of October 22, 2026.
Is Headers Security Advanced & HSTS WP still maintained?
Yes. The last release was on September 4, 2026 and it is tested up to WordPress 7.0.7.
Does Headers Security Advanced & HSTS WP have good support?
On the WordPress.org forum, 0 of 7 recent support threads for Headers Security Advanced & HSTS WP are marked resolved. That is the developer's free support; a paid version usually comes with its own channel.
Is Headers Security Advanced & HSTS WP free?
Headers Security Advanced & HSTS WP is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.
Where does Headers Security Advanced & HSTS WP rank among Security Plugins?
Headers Security Advanced & HSTS WP is #49 in the WordPress.org Security Plugins ranking.