1
Sucuri Security Partial
Can configure CSP (report-only), CORS and Cache-Control headers.
87feature score
WordPress Security Plugins with Security headers
Set HSTS, CSP, X-Frame-Options and other HTTP security headers. 7 of the 12 plugins we track include it.
2
Defender Security Included
Hardening includes adding headers such as HSTS and XSS protection.
79feature score
3
Shield Security Paid version Plus
Security headers and Content Security Policy are PRO features.
84feature score
4
Kadence Security (formerly Solid Security) Partial
Settings for X-Frame-Options, X-Content-Type-Options, Referrer-Policy and CSP; no HSTS.
77feature score
5
All-In-One Security (AIOS) Partial
Limited header protections such as frame blocking; no full header manager.
61feature score
6
Really Simple Security Paid version Pro
HSTS, X-Frame-Options, Referrer-Policy and auto-generated CSP.
54feature score
7
Patchstack Paid version Personal protection
Hardening toggle adds a standard set of security headers via .htaccess.
60feature score