WPIntell

Market

security headers

Security Headers matters only if the evidence supports a paid workflow around keeping sites trusted, protected, and recoverable, not a list of isolated fixes. The current commercial thesis is: Security, spam, and trust failures create business risk that owners struggle to triage. The entry wedge is to turn security and abuse signals into prioritized actions, audit trails, and recovery-ready reporting.

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

72 / 88 rows with source links

81.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

16 rows with no attached evidence

0 rows have source counts but still need direct links.

Opportunity Summary

Full report

Build a trust and abuse-prevention operations plugin for site owners, agencies, and maintenance teams: Security, spam, and trust failures create business risk that owners struggle to triage. The first wedge is to turn security and abuse signals into prioritized actions, audit trails, and recovery-ready reporting.

The unmet need is not the individual complaint. It is the recurring business workflow: Security, spam, and trust failures create business risk that owners struggle to triage. Current stage: commercial watchlist.

Competitors

6 shown
HTTP Headers 50.0K installs · 4.3
weak incumbent
-100.0%momentum 55.1weakness 29/23pain/praise

Pain still appears around missing feature, bugs despite praise for quality, value.

source 1 source 2
HTTP Security Header 1.0K installs · 5.0
praise owner
-100.0%momentum 22.3weakness 2/3pain/praise

Pain still appears around missing feature, support despite praise for easy, security.

source 1 source 2
Security Headers 700 installs · 3.0
praise owner
-100.0%momentum 22.1weakness 2/1pain/praise

Pain still appears around missing feature, setup despite praise for reliable, quality.

source 1 source 2
CSP Friendly Security 200 installs · 3.5
praise owner
-100.0%momentum 28.1weakness 4/3pain/praise

Pain still appears around bugs, support despite praise for quality.

source 1 source 2

Evidence

Open evidence explorer
complaint how to fill sites

how to fill sites: users show security, bugs, support pain that may indicate a product gap.

Content Security Policy Manager · how to fill sites I’m on the report only, had lists of errors from Sentry, but how do I fill the sites in the box? complaint How to set up Content Security Policy?

How to set up Content Security Policy?: users show security, bugs, missing feature pain that may indicate a product gap.

HTTP Headers · How to set up Content Security Policy? complaint Custom Settings

Custom Settings: users show security, bugs, missing feature pain that may indicate a product gap.

HTTP Security Header · Custom Settings Hello Mohit, I just installed the new version and was pleased to find that I could now open the headers to add custom settings, which had not been possible previously. complaint [NOTICE] Updating to Version 6

[NOTICE] Updating to Version 6: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · [NOTICE] Updating to Version 6 Heads up: Settings migration in version 5.6.03 If you’re updating from a previous version, please read this before updating. complaint Include HSTS support for fixed files like .css

Include HSTS support for fixed files like .css: users show security, compatibility, missing feature pain that may indicate a product gap.

HTTP Headers · Include HSTS support for fixed files like .css Hello, all – I’m trying to figure out why HSTS is only applied to .php and .HTML files. complaint Cannot save

Cannot save: users show security, bugs, compatibility pain that may indicate a product gap.

Abdal Security Headers · Cannot save On clicking Save changes displays Error An error occurred while saving the settings. complaint Site broken after setting CSP

Site broken after setting CSP: users show security, bugs, missing feature pain that may indicate a product gap.

HTTP Headers · Site broken after setting CSP Hi, I just installed HTTP Headers for the first time. mixed Can’t edit Font Source field

Can’t edit Font Source field: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · I’ve tried: Entering the full font URL Using your recommended wildcard format Deleting default entries After saving, my entries disappear, and default values reappear. mixed Problem with caching plugin

Problem with caching plugin: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Unfortunately, I have a challenge working with the WP Fastest Cahce plugin. mixed No response from command line command

No response from command line command: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · No response from command line command Our dev site is hosted with WP Engine. mixed Problem: Content-Security-Policy

Problem: Content-Security-Policy: users show security, bugs, compatibility pain that may indicate a product gap.

HTTP Security Header · Problem: Content-Security-Policy Hallo, ist es beabsichtigt bei der Aktivierung von “Content-Security-Policy”, dass dann auf der Seite kein AdSense, kein YouTube-Video, kein Cloudflare Turnstile und andere Sachen mehr angezeigt werden? mixed PHP Warnings

PHP Warnings: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · PHP Warnings Hello Kevin, Using WordPress 6.8 with PHP 8.3, I have the following PHP warnings flooding the wp_debug log file: PHP Warning: Undefined array key "fp_bluetooth_src_domain" in /wp-content/plugins/security-header-generator/work/inc/kcp-cspgen-headers.php on line 791 PHP Warning: Undefined array key "fp_captured-surface-control_src_domain" in /wp-c mixed Does the plugin require update to .htaccess?

Does the plugin require update to .htaccess?: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · I am a little confused about how this plugin works. mixed hash, strict-dynamic, nonce, report-sample, report-to directives

hash, strict-dynamic, nonce, report-sample, report-to directives: users show security, compatibility, missing feature pain that may indicate a product gap.

Security Header Generator · Edit: I noticed that hash, strict-dynamic, nonce, report-sample directives are also missing. mixed Menu item “Security Headers” not visible

Menu item “Security Headers” not visible: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Menu item “Security Headers” not visible WordPress version: 6.6.1-de_DE Security Header Generator version: 5.1.29 Themes: “Responsive” on one website, “ExS Medic” on two other websites Problem: After logging into my three WordPress self-hosted websites as an administrator, the “Security Headers” menu item in the left menu is no longer visible. mixed Strict-Transport-Security

Strict-Transport-Security: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Strict-Transport-Security Hi I’m working through a pen test report and some file paths have been flagged as not returning a Strict-Transport-Security. mixed Nothing

Nothing: users show security, missing feature, support pain that may indicate a product gap.

Security Header Generator · Nothing Hi Thank you for the free CSP generator plugin however, seems it did not work I installed the plugin, login to root and move the website’s root folder, run the command, >> Success Everyting is ok, clear cache, check at securityheaders.com then nothing You didn’t have any documents for users, no FAQ too. mixed Error message on loading site

Error message on loading site: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Error message on loading site I just installed your plugin and after a few minutes of reading and testing everything seems to work fine. mixed Error message in a special case

Error message in a special case: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Error message in a special case Today I came across a special error message: WordPress-Version 6.1.1 Aktives Theme: Twenty Seventeen (Version 3.1) Aktuelles Plugin: Security Header Generator (Version 3.6.02) PHP-Version 8.0.28 Ein Fehler vom Typ E_ERROR wurde in der Zeile 701 der Datei /homepage/wp-content/plugins/security-header-generator/work/inc/kcp-cspge mixed Undefined array key “apply_child_override”

Undefined array key “apply_child_override”: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Undefined array key “apply_child_override” When I updated the Kinsta server to PHP version to 8.3, I got bombarded of this error. mixed Problem: WP-Rocket Cache-Datein

Problem: WP-Rocket Cache-Datein: users show security, bugs, compatibility pain that may indicate a product gap.

HTTP Security Header · Problem: WP-Rocket Cache-Datein Hallo, Ihr Security Headers Plugin funktioniert wunderbar, aber im Zusammenspiel mit anderen Plugins hat es keine Wirkung. mixed Content Security Headers – setting values

Content Security Headers – setting values: users show security, bugs, missing feature pain that may indicate a product gap.

Security Header Generator · Content Security Headers – setting values Hi, how do I set Content-Security-Policy: default-src ‘self’ example.com *.example.com? complaint HTTP security headers

HTTP security headers: users show security, support, setup pain that may indicate a product gap.

HTTP Headers · HTTP security headers Hi, According to securityheaders.com I see the following: View post on imgur.com I installed the plugin HTTP Headers and switched on HSTS although it’s orange which is weird. complaint Not working

Not working: users show security, support, setup pain that may indicate a product gap.

Abdal Security Headers · Not working Hi, I recently installed the plugin and did a test on http://www.securityheaders.io last night, it was working then but today I noticed my grade go from A to D and it’s no longer functioning. complaint Customize not working. This content is blocked. Contact the site owner to fix th

Customize not working. This content is blocked. Contact the site owner to fix th: users show security, bugs, support pain that may indicate a product gap.

Content Security Policy Manager · Contact the site owner to fix the issue.” I have CSP Manager Admin policy to Disabled. complaint Can’t do anything

Can’t do anything: users show bugs, missing feature, support pain that may indicate a product gap.

HTTP Headers · Can’t do anything Try saving any setting (even without changing anything) and just get a critical error. question Do you want to force downloads?

Do you want to force downloads?: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · MIME type is correct but the issue is on their end. mixed CLI command generates error

CLI command generates error: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · CLI command generates error I used WinSCP to run the CLI command “wp csp generate” and it appears to start working before generating the error “invalid file ID”. mixed Permissions Policy Directives

Permissions Policy Directives: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Permissions Policy Directives Hello Kevin, I have WordPress 6.8.1 with PHP 8.3 and am using securityheaders.com to obtain a report on the site. mixed Clarification about Security Hardening after update

Clarification about Security Hardening after update: users show security, compatibility, missing feature pain that may indicate a product gap.

Volixta SSL & Security Headers · Clarification about Security Hardening after update Hello, After updating to version 1.1.3, I noticed that I can no longer activate the Security Hardening features. mixed Google Maps doesn’t work with enabled Content-Security-Policy

Google Maps doesn’t work with enabled Content-Security-Policy: users show security, bugs, missing feature pain that may indicate a product gap.

HTTP Security Header · Google Maps doesn’t work with enabled Content-Security-Policy Hello, First of all than you for your plugin! mixed CSP in Firefox

CSP in Firefox: users show security, bugs, missing feature pain that may indicate a product gap.

Content Security Policy Manager · CSP in Firefox In Firefox, I’m getting an error of Content Security Policy: The page’s settings blocked the loading of a resource at https://morgridge.org/news/page/2/ (“default-src”). mixed Attempt to read property “ID” on null in kcp-cspgen-cli-process.php

Attempt to read property “ID” on null in kcp-cspgen-cli-process.php: users show security, bugs, compatibility pain that may indicate a product gap.

Security Header Generator · Attempt to read property “ID” on null in kcp-cspgen-cli-process.php I’m using wordpress 6.3.1 with Security Header Generator 4.0.01, when i run “wp csp generate” i get the following error: Warning: We have started processing the site. mixed blob:

blob:: users show security, compatibility, support pain that may indicate a product gap.

Security Header Generator · child-src is not deprecated as of yet, and still has full browser support: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/child-src I do see some articles showing it was, however, it has since been un-deprecated as of December 2018 Interestingly enough though, W3C has marked frame-src as deprecated… as of July 31st: https:/ complaint CTO

CTO: users show security, setup pain that may indicate a product gap.

HTTP Headers · CTO I’m curious, I installed the plugin and went to the CTO and changed it to no sniff. complaint Crashed my site

Crashed my site: users show bugs, missing feature pain that may indicate a product gap.

HTTP Headers · Crashed my site Not sure what’s up with this, but every single save I made crashed my site. complaint No longer works. Enabling ANYTHING causes fatal error

No longer works. Enabling ANYTHING causes fatal error: users show bugs, missing feature pain that may indicate a product gap.

HTTP Headers · No longer works. complaint Excellent

Excellent: users show security pain that may indicate a product gap.

Security Header Generator · Excellent Works perfectly. complaint Critical security vulnerability

Users flagged a critical HTTP Headers vulnerability and one update briefly caused blank dashboard pages before another release addressed the issue.

HTTP Headers · There is a critical security vulnerability that needs urgent patching complaint Warning: Plugin Seems abandonned

Warning: Plugin Seems abandonned: users show security pain that may indicate a product gap.

Security Headers · Is this correct, and should we look for an alternative security header plugin?