360 Orbit Header Security

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Security headers are directives used by web applications to configure browser-side security defenses.

This plugin generates the proper security HTTP response headers to keep your site secured.

Adds a CSP header compatible with most WP plugins without breaking styles.

SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.

Small WP Security is a WordPress plugin which provides the basic security of your site.

Keeps a staging copy from doing anything real: blocks outgoing calls, catches emails, pauses scheduled tasks, keeps search engines away.

Finds unused media files and outdated image sizes and moves them to a reversible holding area. Nothing is deleted without your consent.

Short, permanent links under /shortlinks/ that never change, while the target address can be replaced at any time.

Measures why your site is slow, explains it in plain words and fixes common causes safely: caching, compression and cleanup via .htaccess.

Anonymizes comment IPs automatically, suggests a privacy-policy text block and (Pro) cleans up old spam/trash comments and lists data requests.

Protects your login against brute-force attacks: rate limiting, login history and generic error messages, with a safety net against admin lockout.