HTTP Security Header — WordPress Security Plugin
by MOHIT GOYAL · WordPress.org page
HTTP Security Header has 1,000+ active installs on WordPress.org and 6,318 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on December 30, 2025, tested up to WordPress 6.9.7.
HTTP Security Header at a glance
Is HTTP Security Header well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Lightweight and performance-focused
- No front-end impact
- Choose default or custom header values
- Secure validation and auto-fallbacks
- Seamless plugin compatibility (including WP Rocket)
- Fully translation-ready and i18n-compliant
- Nonce-protected admin save actions
- Optional reset-to-default support
- Reset or disable all headers with one click
HTTP Security Header reviews and ratings
3 reviews on WordPress.org, with the most recent ones as their authors posted them.
3 reviews
- 5★
-
3
- 4★
-
0
- 3★
-
0
- 2★
-
0
- 1★
-
0
-
pretty good
each security header fix is well illustrated
Mahmoud Adel Mahmoud Mostafa el-Ashry -
Works Great
Works Great very simple to use woerks great with Divi
mejoudal -
Essential for Enhancing Website Security
I recently integrated the Security Header plugin into my WordPress site, and it has significantly improved my website's security posture. The user-friendly interface made it easy to enable essential HTTP security headers with just a few clicks.
MOHIT GOYAL
Where HTTP Security Header ranks on WordPress.org
The rankings we track that HTTP Security Header appears in, and how its position changed over 30 days.
| Ranking | WordPress.org placement | Position | 30 days |
|---|---|---|---|
| Best Security Plugins | #47 in search, not tagged | #79 | – |
HTTP Security Header alternatives
Plugins that solve the same problem, ranked by how closely they overlap with HTTP Security Header.
-
Cookies and Content Security Policy 10,000+ installs · 4.9 -
Headers Security Advanced & HSTS WP 90,000+ installs · 4.9 -
SecuPress 40,000+ installs · 4.1 -
MalCare WordPress Security 200,000+ installs · 4.4 -
YOP Poll 10,000+ installs · 4.4
Details
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
The full description, screenshots and every review live on the WordPress.org page.
Rankings HTTP Security Header competes in
Tags
- clickjacking
- content security policy
- http security header
- Security Headers
- wordpress security
More from MOHIT GOYAL
-
Geo Targeting for Bricks Builder fewer than 10 installs
- Version
- 3.1
- Last updated
- Dec 30, 2025
- First published
- Nov 1, 2024
- Requires WordPress
- 5.0
- Tested up to
- 6.9.7
- Requires PHP
- 7.0
- Pricing
- Free on WordPress.org
HTTP Security Header FAQ
What does HTTP Security Header do?
According to its WordPress.org readme, HTTP Security Header offers Lightweight and performance-focused, No front-end impact, Choose default or custom header values, Secure validation and auto-fallbacks and Seamless plugin compatibility (including WP Rocket).
How many active installs does HTTP Security Header have?
WordPress.org reports 1,000+ active installs for HTTP Security Header as of September 7, 2026.
Is HTTP Security Header still maintained?
Yes. The last release was on December 30, 2025 and it is tested up to WordPress 6.9.7.
Is HTTP Security Header free?
HTTP Security Header is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.
Where does HTTP Security Header rank among Security Plugins?
HTTP Security Header is #79 in the WordPress.org Security Plugins ranking.