/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Headers Security Advanced & HSTS WP

Headers Security Advanced & HSTS WP

By Andrea Ferro

Security & Privacy / Security Scanning & Malware Protection

Headers Security Advanced & HSTS WP Review - In-Depth Analysis

Headers Security Advanced & HSTS WP is a comprehensive security plugin for WordPress. It implements HTTP response headers to protect against vulnerabilities like XSS and clickjacking. The plugin ensures your site is secure with minimal effort.

Performance Overview

WPS Score

6.69/10

User Rating

4.9/5 (based on 78+ reviews)

Active Installations

90,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

Headers Security Advanced & HSTS WP is a free plugin designed for all WordPress users. When deactivated, it restores your site to its previous configuration.

This plugin implements HTTP response headers that enhance your website's security. It automatically sets up best practices, preventing modern browsers from encountering predictable vulnerabilities. The goal is to increase awareness and usage of these headers among WordPress users.

Developed by TentaclePlugins, Headers Security Advanced & HSTS WP focuses on WordPress security and best practices.

Key features include protection against XSS, code injection, and clickjacking through various HTTP security headers. The plugin is based on the OWASP CSRF standard, providing full CSRF mitigation without additional methods. This ensures your site remains secure even with potentially vulnerable plugins.

With Headers Security Advanced & HSTS WP, you can customize Content Security Policy (CSP) rules for enhanced security. The plugin supports integration with various services for optimal monitoring and security management.

All features are available for free, and the plugin is regularly updated. Feedback is welcomed for improvements and compatibility issues.

Comparing to Alternatives

Headers Security Advanced & HSTS WP stands out as a straightforward and effective solution for managing security headers in WordPress, especially when compared to other similar plugins.

Top alternatives

Headers Security Advanced & HSTS WP

Strengths

Easy to install and configure with no technical skills required.
Provides comprehensive header management including HSTS support.
Consistently achieves high security scores on external testing sites.
Responsive and helpful developer support.
Efficiently fixes header errors that other plugins may miss.

Weaknesses

No pro version or advanced premium features available.
Limited to header security without broader security functionalities.
May lack integration options with other security tools.

User Sentiment Analysis

User feedback highlights the plugin's ease of use, effectiveness, and excellent support, though some limitations are noted.

Positive highlights

"Works great and helped me get a good security header score." - pikapower
"Well done plugin with super helpful and fast developer support." - boxhamster
"Very useful and efficient, brings important security by just installing." - Fantou
"Just installed and got an A+ on securityheaders.com." - amirse
"Fixed all header errors that other plugins reported." - sgasson

Common complaints

No paid version limits advanced feature access.
Focuses solely on headers, lacking broader security features.

Weaknesses

No pro version means limited advanced options.
May not suit users needing all-in-one security solutions.

Who Should Use This?

Best for

Website owners and administrators seeking a simple, effective way to manage HTTP security headers without needing technical expertise.

Not ideal for

Users looking for a comprehensive security suite or advanced premium features beyond header management.

Pricing & Value

Free version includes

The free version offers full functionality for managing and configuring security headers, including HSTS, with no apparent restrictions.

Final Verdict

Headers Security Advanced & HSTS WP is a reliable and user-friendly plugin that effectively enhances website security through header management.

Its free availability and excellent support make it a valuable tool for WordPress users focused on improving security headers without complexity.

Other Notable Features

Here are a few other notable features of this free Headers Security Advanced & HSTS WP plugin.

Headers Security

HSTS

CSP

Clickjacking

XSS Protection

Screenshots

FAQ

Report URI will monitor content security policy (CSP) violations and provide detailed reports on detected violations.

I chose Sentry, URIports, Datadog, and Report URI for integration with this plugin because they are highly reputable and functional platforms in the field of security monitoring. Here’s a brief overview of each:

Sentry

Sentry is a well-known platform for monitoring and tracking errors and exceptions in applications. It provides comprehensive tools for logging and analyzing JavaScript errors, making it an excellent choice for monitoring Content Security Policy (CSP) violations. By integrating with Sentry, users can benefit from detailed error reports and proactive issue resolution.

Datadog

Datadog is a powerful platform for monitoring infrastructure, applications, and logs. It offers extensive capabilities for tracking security and performance metrics, including CSP violations. The integration with Datadog allows users to gain insights into the health and security of their websites, providing real-time monitoring and alerting features that are essential for maintaining a secure and performant environment.

Report URI

Report URI is a dedicated service for collecting and analyzing security violation reports, including CSP, HPKP, and other security headers. It is designed specifically to handle large volumes of security reports and provide detailed analytics and visualizations. By using Report URI, users can easily monitor and analyze CSP violations, helping them to quickly identify and mitigate potential security threats.

Each of these platforms offers unique strengths and capabilities, making them ideal choices for comprehensive security monitoring and reporting. By integrating with these well-established services, we aim to provide users with reliable and effective tools to enhance the security of their WordPress websites.

URIports

URIports is a well-known platform for monitoring and tracking errors and exceptions in applications. It provides comprehensive tools for logging and analyzing JavaScript errors, making it an excellent choice for monitoring Content Security Policy (CSP) violations. By integrating with URIports, users can benefit from detailed error reports and proactive issue resolution.