G

Gmcfuerte Security Headers

Recommended security headers with safe presets, never sent twice, plus a read-only self-check that explains what your site really sends.

Gmcfuerte Security Headers ranks #63,562 among WordPress.org plugins with 0+ active installations, and was last updated Oct 15, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4
v1.0.1 Current Version v1.0.1
Updated 2 weeks ago Last Update on 15 Oct, 2026
Refreshed 2 days ago Last Refreshed on
Downloads -70.6% this week Actively maintained
View on WordPress.org
Rank
#63,562
— No change
Active Installs
0+
— No change
KW Avg Position
110.7
0.7 worse
Downloads
110
+4 today
Support Resolved
0%
— No change
Rating
0%
Review 0 out of 5
0 (0 reviews)

Next Milestone 10

Total Progress 20%
0+ 10+
35,994
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 8 more installs to reach 10+

Rank Changes

59,450 62,512 65,574 68,635 71,697 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
53,982 58,589 63,196 67,803 72,410 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Current #63,562
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
0 10 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0
0 reviews
Overall 0%
5
0 (0%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version
1.0.1
Last Updated
Oct 15, 2026
Requires WP
6.3+
Tested Up To
7.1.4
PHP Version
8.1 or higher

Support & Rating

Rating
☆ ☆ ☆ ☆ ☆ 0
Reviews
0
Support Threads
0
Resolved
0%

Keywords

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Frequently Asked Questions

Common questions about Gmcfuerte Security Headers

The defaults suit most sites, with two points to check: The Basic Permissions-Policy, on by default, turns off camera, microphone and location for your pages and for everything embedded in them. Maps that locate the visitor (including the "my location" button of an embedded map), video calls, voice input and QR scanners stop working. If your site uses any of them, set Permissions-Policy to Off. X-Frame-Options stops other sites from showing your pages in a frame: switch it off if another site of yours embeds these pages. The Strict Permissions-Policy preset also blocks browser payment buttons (Apple Pay, Google Pay): do not use Strict on shops that use them.
Headers are added by PHP. A page cache that serves stored pages without running PHP, or a CDN, may drop them. Some headers may also be left to your .htaccess file (the settings page lists them): if your server ignores the .htaccess file or lacks mod_headers, they are not sent. While the Pro edition is active this plugin sends nothing, and the Pro sends headers only with a valid licence.
Two layers set it, for example the server configuration and a plugin. This plugin never adds a header that is already present in PHP or declared in your .htaccess file, but it cannot see headers that the server or a proxy adds on its own. Keep one source.
Only when every page and file of your site works over HTTPS. Browsers that receive HSTS refuse plain HTTP for your
No. A Content-Security-Policy has to be tuned to the scripts and services each site uses. The self-check tells you whether your site sends one.

Sign In / Register

You need to sign in or register to use this feature.