Headers Security Advanced & HSTS WP v5.3.6
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
Tags / csp
28 WordPress plugins tagged “csp”. Every result links to a crawlable PlugIndex profile.
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors
Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.
Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.
Adds a CSP header compatible with most WP plugins without breaking styles.
No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.
Adds the essential HTTP security headers WordPress leaves out—on every public site response.
Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.
Collect and inspect Content Security Policy (CSP) reports with filtering, grouping, rate limits and automatic cleanup.
This plugin allows easy addition of Content Security Policy
Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.
Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.
Configure core HTTP security headers for your WordPress site in a few clicks.
Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.
Headit is a simple plugin to allow you to add custom HTTP response headers to your site.
Serve WordPress cleanly over .onion with URL rewriting, Onion-Location, and privacy hardening.
SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …
Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.
Configure advanced HTTP security headers for your WordPress site.
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.
Scan up to 10 public pages, review a generated CSP, deploy it locally, and optionally automate safe CSP drift handling.