Skip to main content
Agency Program 50% cashback. 10% commissions. Priority support. Built for growing agencies. 50% cashback for agencies Speak to the team Join free
Headers Security Advanced & HSTS WP icon

Headers Security Advanced & HSTS WP

v5.0.42
by Andrea Ferro · 4.9 (66 reviews)

Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.

70K+ active installs Updated Feb 17, 2025 Tested to 6.7.2 Requires PHP 7.4
Try Demo Download
Pre-installed Ready in ~10s No card
Headers Security Advanced & HSTS WP

About Headers Security Advanced & HSTS WP

Headers Security Advanced & HSTS WP is a free WordPress plugin that automatically implements HTTP response headers to increase the security of your website. It protects against various types of attacks and vulnerabilities, and also allows for customization of CSP rules. The plugin is regularly updated and comes with limited but free support.

Screenshots

Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot
Headers Security Advanced & HSTS WP screenshot

Frequently asked questions

What is Headers Security Advanced & HSTS WP?
Headers Security Advanced & HSTS WP is a free plugin for WordPress users that implements HTTP response headers to increase the security of their website.
What are the features of Headers Security Advanced & HSTS WP?
Some of the features of Headers Security Advanced & HSTS WP include HSA Limit Login to block brute force attacks, X-XSS-Protection, Expect-CT, Access-Control-Allow-Origin, Access-Control-Allow-Methods, and more.
How does Headers Security Advanced & HSTS WP protect WordPress sites?
Headers Security Advanced & HSTS WP is based on the OWASP CSRF standard to protect WordPress sites. It provides full CSRF mitigation without having to use nonce on the output.
What types of attacks do HTTP security headers protect against?
HTTP security headers implemented by Headers Security Advanced & HSTS WP protect against XSS, code injection, clickjacking, and other types of attacks.
What is FLoC and how does Headers Security Advanced & HSTS WP handle it?
FLoC (Federated Learning of Cohorts) is a new technology that Headers Security Advanced & HSTS WP allows users to opt out of. It prevents the browser from including your site in the 'cohort calculation' for FLoC.

Changelog

5.0.42

I don’t want to tell you what to do, but here’s the thing: When you update the Headers Security Advanced & HSTS WP plugin, you don’t just click a button, you enter a world of enhanced security and performance.

With version 5.0.42, I have gone above and beyond to ensure that your experience is nothing short of exceptional. I have eliminated numerous bugs, improved annoying pixels, and updated the graphics in a sleek and modern way. The result? A plugin that not only looks great, but works even better.

But that’s not all. This update brings seamless integration with the industry’s leading security monitoring platforms-Sentry, Datadog, and Report URI. These integrations offer enhanced reporting capabilities, providing detailed information on content security policy (CSP) violations and improving site security.

  • New: WordPress 6.7.1 compatibility
  • Preparation: Coming in the next updates is a new interface optimized to the smallest detail;
  • Fixed: Incorrect usage of 236 function causing a fatal error in the admin panel.
  • Fixed: Fixed a critical error that occurred when enabling the “Enable preload” option due to an invalid string format in the printf function . The error generated an “Unknown format specifier” message. Now the string contains the correct format specifiers (%s), preventing further crashes;

By updating to 5.0.42, you’re not just improving your site’s security – you’re optimizing it with the best tools available. Our goal is to provide you with the most beautiful, fastest, and most impressive plugin experience around. So, shall we get started? Hit “update” and step into a new era of security and performance with Headers Security Advanced & HSTS WP. Enjoy the upgrade!

Try other plugins

Yoast SEO icon

Yoast SEO

4.8 · 10M+ installs

Improve your WordPress SEO: Write better content and have a fully optimized WordPress site using the Yoast SEO…