security-header

HTTP Security Header

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

clickjacking content security policy http security header security headers wordpress security

27.3 opportunity score Open evidence Open API Open on WordPress.org

1.0Kactive installs

5.6Kdownloads

5.0rating

0unresolved threads

2complaints analyzed

3praise analyzed

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

24 / 38 rows with source links

63.2% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

14 rows with no attached evidence

0 rows have source counts but still need direct links.

Download Momentum

180 days

222recent 30 days 322previous 30 days -31.1%movement 2.0Kshown total

Related Opportunities

2 markets

Commercial opportunity Security Headers: Trust and abuse-prevention operations trust and abuse-prevention operations · final 72.7 · proof validated Needs sharper proof Clickjacking: Trust and abuse-prevention operations trust and abuse-prevention operations · final 65.8 · proof not collected

Source Evidence

Open evidence explorer

complaint support · high severity · relevance 1.0

Custom Settings

Custom Settings: users show security, bugs, missing feature pain that may indicate a product gap.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

Custom Settings Hello Mohit, I just installed the new version and was pleased to find that I could now open the headers to add custom settings, which had not been possible previously.

mixed support · high severity · relevance 0.95

Problem: Content-Security-Policy

Problem: Content-Security-Policy: users show security, bugs, compatibility pain that may indicate a product gap.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

Problem: Content-Security-Policy Hallo, ist es beabsichtigt bei der Aktivierung von “Content-Security-Policy”, dass dann auf der Seite kein AdSense, kein YouTube-Video, kein Cloudflare Turnstile und andere Sachen mehr angezeigt werden?

mixed support · high severity · relevance 0.94

Problem: WP-Rocket Cache-Datein

Problem: WP-Rocket Cache-Datein: users show security, bugs, compatibility pain that may indicate a product gap.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

Problem: WP-Rocket Cache-Datein Hallo, Ihr Security Headers Plugin funktioniert wunderbar, aber im Zusammenspiel mit anderen Plugins hat es keine Wirkung.

mixed support · high severity · relevance 0.89

Google Maps doesn’t work with enabled Content-Security-Policy

Google Maps doesn’t work with enabled Content-Security-Policy: users show security, bugs, missing feature pain that may indicate a product gap.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

Google Maps doesn’t work with enabled Content-Security-Policy Hello, First of all than you for your plugin!

praise review · high severity · relevance 0.54

Essential for Enhancing Website Security

Essential for Enhancing Website Security: users show security pain that may indicate a product gap.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

Essential for Enhancing Website Security I recently integrated the Security Header plugin into my WordPress site, and it has significantly improved my website’s security posture.

praise review · high severity · relevance 0.54

pretty good

pretty good: users show security pain that may indicate a product gap.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

pretty good each security header fix is well illustrated each security header fix is well illustrated

complaint support · medium severity · relevance 0.81

Custom settings.

Custom settings.: users show missing feature, support, setup pain that may indicate a product gap.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

Custom settings.

praise review · medium severity · relevance 0.38

Works Great

Works Great: users praise easy, reliable, quality, which suggests what competitors already do well.

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete trust and abuse-prevention operations Evidence linked to opportunity

Works Great Works Great very simple to use woerks great with Divi Works Great very simple to use woerks great with Divi Thanks, mejoudal!

Competitor Context

2 shown

Headers Security Advanced & HSTS WP weak incumbent · intel 71.7 · weakness 56.1

weak incumbent

2 unresolved support thread(s) 9 collected complaint signal(s) bugs compatibility 2 source links Proof Blocked Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test HSTS lockouts, bot/spam defenses, risky access changes, and incident alerts

source 1 source 2

WP Anti-Clickjack praise owner · intel 33.5 · weakness 18.9

praise owner

1 source link Proof Blocked Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts

source 1

Repeated Themes

0 shown

No repeated plugin-level themes have been generated yet.

Collected Signals

8 shown from 8 collected

complaint Custom settings. support · 2025-04-30T11:32:51+00:00 · medium severity · clickjacking

Custom settings.: users show missing feature, support, setup pain that may indicate a product gap.

Evidence: Custom settings.

missing feature support setup trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin

complaint Custom Settings support · 2025-04-30T11:20:57+00:00 · high severity · clickjacking

Custom Settings: users show security, bugs, missing feature pain that may indicate a product gap.

Evidence: Custom Settings Hello Mohit, I just installed the new version and was pleased to find that I could now open the headers to add custom settings, which had not been possible previously.

security bugs missing feature support trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin

mixed Google Maps doesn’t work with enabled Content-Security-Policy support · 2025-03-04T07:50:23+00:00 · high severity · clickjacking

Google Maps doesn’t work with enabled Content-Security-Policy: users show security, bugs, missing feature pain that may indicate a product gap.

Evidence: Google Maps doesn’t work with enabled Content-Security-Policy Hello, First of all than you for your plugin!

security bugs missing feature support trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin

praise pretty good (5 stars) review · 2025-01-18T16:01:11+00:00 · high severity · clickjacking

pretty good: users show security pain that may indicate a product gap.

Evidence: pretty good each security header fix is well illustrated each security header fix is well illustrated

security trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin

mixed Problem: Content-Security-Policy support · 2024-12-28T08:06:31+00:00 · high severity · clickjacking

Problem: Content-Security-Policy: users show security, bugs, compatibility pain that may indicate a product gap.

Evidence: Problem: Content-Security-Policy Hallo, ist es beabsichtigt bei der Aktivierung von “Content-Security-Policy”, dass dann auf der Seite kein AdSense, kein YouTube-Video, kein Cloudflare Turnstile und andere Sachen mehr angezeigt werden?

security bugs compatibility missing feature trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin

mixed Problem: WP-Rocket Cache-Datein support · 2024-12-28T08:02:09+00:00 · high severity · clickjacking

Problem: WP-Rocket Cache-Datein: users show security, bugs, compatibility pain that may indicate a product gap.

Evidence: Problem: WP-Rocket Cache-Datein Hallo, Ihr Security Headers Plugin funktioniert wunderbar, aber im Zusammenspiel mit anderen Plugins hat es keine Wirkung.

security bugs compatibility setup trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin

praise Works Great (5 stars) review · 2024-12-10T18:00:25+00:00 · medium severity · clickjacking

Works Great: users praise easy, reliable, quality, which suggests what competitors already do well.

Evidence: Works Great Works Great very simple to use woerks great with Divi Works Great very simple to use woerks great with Divi Thanks, mejoudal!

easy reliable quality trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin

praise Essential for Enhancing Website Security (5 stars) review · 2024-11-01T10:17:34+00:00 · high severity · clickjacking

Essential for Enhancing Website Security: users show security pain that may indicate a product gap.

Evidence: Essential for Enhancing Website Security I recently integrated the Security Header plugin into my WordPress site, and it has significantly improved my website’s security posture.

security easy trust and abuse-prevention operations Proof Blocked card complete Evidence linked to opportunity

Buyer: site owners, agencies, and maintenance teams · Wedge: test security headers lockouts, bot/spam defenses, risky access changes, and incident alerts

source plugin