WP Secure HTTP Headers

This WordPress Plugin add secure headers to you WordPress site.
The Following Headers are included:
– Strict-Transport-Security: Enforces SSL if your website is using SSL (which it should be)
– X-Frame-Options: Prevents Clickjacking
– X-XSS-Protection: Prevents XSS attacks
– X-Content-Type-Options: set to ‘nosniff to prevent MIME-type sniffing
– Referrer-Policy: set to ‘no-referrer-when-downgrade’
- No setup required!
Download & install the zip archive
The plugin package installer can be downloaded from the WP2E project tab called “code”.
1 – Select the version to download if this option is available otherwise the “latest” version of the main plugin will be used.
2 – After downloading the zip archive install the plugin package installer in you local environment and activate the script from the plugin list.
3 – Under the section “Plugins” of the admin dashboard you should see a new “Dependencies & Licenses” link. Follow the instructions from this panel to finalize the installation of the missing dependencies.
- Give a name to your project
- Download the Installer Package
- Install & activate the plugin locally
- Install the suggested dependencies
Tips: Use the WP2E panel to add/suggest new dependencies to the local installation. Press F5 in the list of dependencies if the changes are not displayed right away.



