As of April 2026, HeaderShield is a WordPress csp plugin with 0 active installations and a 0/5 rating0. It has been downloaded 84 times in total. Requires WordPress 5.0+ and PHP 7.4+. Available on WordPress.org since 2026. Actively maintained — updated within the last month. Top alternative: Headers Security Advanced & HSTS WP.
0/5Rating
0active installs
84total downloads
1 monthsince 2026
Overview
HeaderShield adds a conservative set of security headers that improve browser protection without breaking most sites. It also provides optional strict cross-origin protections for sites that are ready for them.
Default headers include:
- X-Frame-Options
- X-Content-Type-Options
- X-XSS-Protection (legacy)
- Referrer-Policy
- Permissions-Policy
- Content-Security-Policy (upgrade-insecure-requests)
- Strict-Transport-Security (HTTPS only)
Strict Mode can additionally enable COEP, COOP, and CORP for stronger isolation, but may break third‑party scripts or embeds. Use with care and test on staging first.
Source code for third-party assets
The admin UI uses SlimSelect for the multi-select dropdown. Human-readable source is included in the plugin:
- JavaScript:
assets/js/slimselect.js(minified build:asset…
Ratings & Reviews
00 reviews
5 ★
0
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 5.0+ requiredTested up to 6.9.4 |
| PHP | 7.4+ required |
Top Alternatives to HeaderShield
Frequently Asked Questions
Changelog
1.0.14
- Initial public release.
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.