/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Security Headers

Security Headers

By SimonRWaters

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Security Headers Review - In-Depth Analysis

This plugin simplifies the configuration of TLS headers for HSTS and related security measures. It provides controls for various security headers to enhance website protection.

Performance Overview

WPS Score

6.88/10

User Rating

5/5 (based on 8+ reviews)

Active Installations

3,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin simplifies the configuration of TLS headers, making it easier for users to manage security settings without direct access to server configurations.

It offers controls for HSTS (Strict-Transport-Security), HPKP (Public-Key-Pins), and other important security headers.

HSTS ensures that future connections to your site always use TLS, while HPKP allows for more control over certificate issuance. The plugin also helps disable content sniffing and provides XSS protection, enhancing overall site security.

Comparing to Alternatives

Security Headers is a specialized plugin focused on implementing security headers with simplicity and effectiveness. It has a couple of direct alternatives that offer similar functionality with varying features.

Top alternatives

Strengths

Extremely easy to install and configure
Effectively improves site security by managing headers
No known security vulnerabilities
Highly rated with consistent positive user feedback
Lightweight and focused on core security header features

Weaknesses

Lacks advanced features like Content-Security-Policy and Expect-CT options
Potential compatibility issues with some third-party widgets like Tawk.to
No pro version with extended capabilities
Limited customization options compared to some alternatives

User Sentiment Analysis

With a perfect 5-star rating from all reviewers, users overwhelmingly praise the plugin's ease of use and effectiveness. The sentiment is highly positive with no recorded negative reviews.

Positive highlights

Excellent plugin, easy to use. (tjdurden)
Perfect and works like a charm! (WebBever)
Works really well and reliable. (bozon)
Makes security much easier. (flch)
Handles security points no one else does. (tone_milazzo)

Common complaints

Weaknesses

Incompatibility with Tawk.to widget in some browsers
Lacks some advanced security header options

Who Should Use This?

Best for

Users seeking a straightforward, reliable plugin to implement essential security headers without complexity will find this plugin ideal.

Not ideal for

Those needing advanced security header configurations or compatibility with all third-party widgets, such as Tawk.to, may find this plugin limiting.

Pricing & Value

Free version includes

The free version includes all core features necessary to implement key security headers effectively.

Final Verdict

Security Headers is a highly effective and user-friendly plugin that delivers essential security header functionality with no known vulnerabilities. Its perfect rating reflects strong user satisfaction and trust in its capabilities.

While it lacks advanced features and has minor compatibility issues, it remains a top choice for users wanting a simple, reliable security header solution without additional cost. Alternatives exist for those needing more customization.