by Alex Hedström 1 (0 reviews)

EssentialHeaders

Name: EssentialHeaders
Author: Alex Hedström

Adds the essential HTTP security headers WordPress leaves out—on every public site response.

EssentialHeaders ranks #25,903 among WordPress.org plugins with 1+ active installations, is #2,394 of 4,566 in the Security category, a 1/5 rating from 0 reviews, and was last updated Aug 14, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v1.0.0 Current Version v1.0.0

Updated 1 month ago Last Update on 14 Aug, 2026

Refreshed 6 hours ago Last Refreshed on

#2,394 of 4,566 in Security

View on WordPress.org

Rank

#25,903

+304 this week

Active Installs

-83.3%

KW Avg Position

0.3 worse

Downloads

260

+2 today

Support Resolved

— No change

Rating

20%

Review 1 out of 5

1 (0 reviews)

Next Milestone 10

Total Progress 70%

0+ 10+

25,203

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 3 more installs to reach 10+

Rank Changes

Current #25,903

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

1.0

0 reviews

Overall 20%

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.0.0
Last Updated: Aug 14, 2026
Requires WP: 6.3+
Tested Up To: 7.1
PHP Version: 7.4 or higher
Author: Alex Hedström

Support & Rating

Rating: ★ ☆ ☆ ☆ ☆ 1
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

csp hardening headers hsts security

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,758

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

Frequently Asked Questions

Common questions about EssentialHeaders

The default set is conservative. Content-Security-Policy is off by default because a strict CSP can block scripts or styles your theme needs. Enable CSP when you are ready to tune it.

No. Strict-Transport-Security is only sent when the visitor reaches the site over HTTPS.

Yes. The login screen is treated as a public response. wp-admin, AJAX, REST, GraphQL, JSON API, and XML-RPC are excluded so dashboards and APIs are not broken by a strict CSP.

No. The plugin only stores its own options and adds HTTP response headers on public responses.