HSTS strict-preload

Configure core HTTP security headers for your WordPress site in a few clicks.

Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.

Adds the essential HTTP security headers WordPress leaves out—on every public site response.

SSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.

HSTS is HTTP Strict Transport Security, a means to enforce using SSL even if the user accesses the site through HTTP and not HTTPS.

Configure advanced HTTP security headers for your WordPress site.