# HTTP Security Header

> HTTP Security Header has 1K+ active installs, a 5/5 rating from 3 reviews and 335 downloads in the last 30 days. Health score 49/100, keyword rankings, version adoption and the best alternatives.

**Verdict: Use with caution.** HTTP Security Header works, but test it on a staging site before relying on it in 2026. It runs on 1K+ sites, is rated 5/5 and was last updated 9 months ago, and scores 49/100 on our health check.

**HTTP Security Header helps protect your WordPress site by adding critical HTTP headers to each response — with no code required. These headers provide additional layers of protection against attacks such as cross-site…**

## Key facts

- **Overall rank:** —
- **Active installs:** 1K+
- **Total downloads:** 6,600
- **Downloads (30 days):** 335 (-21.5% vs previous 30 days)
- **Rating:** 5/5 from 3 reviews
- **Health score:** 49/100 (Fair)
- **Version:** 3.1
- **Last updated:** Dec 30, 2025
- **Tested up to:** WordPress 6.9.9
- **Requires:** WordPress 5.0+, PHP 7.0+
- **Support resolved:** 0 of 0 threads (last 2 months)
- **Developer:** MOHIT GOYAL (https://pageforge.pro/directory/authors/mohitgoyal1108/)
- **WordPress.org:** https://wordpress.org/plugins/security-header/

## Category rankings

| Category | Rank | Plugins |
|---|---|---|
| [clickjacking](https://pageforge.pro/directory/plugins/tag/clickjacking/) | #3 | 5 |
| [content security policy](https://pageforge.pro/directory/plugins/tag/content-security-policy/) | #3 | 16 |
| [http security header](https://pageforge.pro/directory/plugins/tag/http-security-header/) | #1 | 1 |
| [Security Headers](https://pageforge.pro/directory/plugins/tag/security-headers/) | #3 | 25 |
| [wordpress security](https://pageforge.pro/directory/plugins/tag/wordpress-security/) | #5 | 54 |

## WordPress.org search positions

| Keyword | Position | Results |
|---|---|---|
| clickjacking | #8 | 48 |
| content security policy | #24 | 4,882 |
| http security header | #10 | 4,056 |
| Security Headers | #24 | 5,480 |
| wordpress security | #57 | 10,000 |

## Version adoption

- 3.1: 100%

## Alternatives

| # | Name | Active installs | Rating | Updated | Health |
|---|---|---|---|---|---|
| 1 | [Headers Security Advanced & HSTS WP](https://pageforge.pro/directory/plugins/headers-security-advanced-hsts-wp/) | 90K+ | 4.9/5 (79) | Sep 4, 2026 | 78/100 |
| 2 | [WP Anti-Clickjack](https://pageforge.pro/directory/plugins/wp-anti-clickjack/) | 4K+ | 5/5 (3) | Jan 12, 2026 | 51/100 |
| 4 | [Do Not Iframe Me](https://pageforge.pro/directory/plugins/do-not-iframe-me/) | 10+ | — | Mar 12, 2013 | 23/100 |
| 5 | [iframe Killer](https://pageforge.pro/directory/plugins/iframe-killer/) | <10 | — | Jun 12, 2017 | 21/100 |

## Frequently asked questions

### Is HTTP Security Header free?
Yes. HTTP Security Header is free to download and use from the official WordPress.org plugin directory.

### Is HTTP Security Header safe to use in 2026?
HTTP Security Header works, but test it on a staging site before relying on it in 2026. It runs on 1K+ sites, is rated 5/5 and was last updated 9 months ago, and scores 49/100 on our health check.

### How many websites use HTTP Security Header?
HTTP Security Header is active on 1K+ WordPress websites and has been downloaded 6,600 times since it launched in November 2024. It was downloaded 335 times in the last 30 days.

### Does HTTP Security Header work with WordPress 7.1?
HTTP Security Header is officially tested up to WordPress 6.9.9, while the latest release is 7.1.2. It may still work, but try it on a staging site first.

### What PHP version does HTTP Security Header need?
HTTP Security Header requires PHP 7.0 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.

### When was HTTP Security Header last updated?
The latest version, 3.1, was released on December 30, 2025 (9 months ago).

### Who makes HTTP Security Header?
HTTP Security Header is developed and maintained by MOHIT GOYAL.

### What are the best alternatives to HTTP Security Header?
The most popular alternatives to HTTP Security Header are Headers Security Advanced &… (90K+ installs), WP Anti-Clickjack (4K+ installs) and Do Not Iframe Me (10+ installs).


---
Source: live WordPress.org data · HTML version: https://pageforge.pro/directory/plugins/security-header/ · Generated 2026-10-01 07:35 UTC by PageForge