Security Headers Audit

Security Headers Audit empowers WordPress site owners to fortify their browser-side security through modern HTTP security headers and robust, comprehensive auditing tools.

The plugin provides a professional, easy-to-use interface for configuring recommended security headers, seamlessly monitoring Content Security Policy (CSP) violations, recording browser console errors, and tracking security-related configuration changes within WordPress.

By proactively implementing industry-standard browser security protections, Security Headers Audit helps drastically reduce exposure to common web vulnerabilities such as Cross-Site Scripting (XSS), clickjacking, MIME-type sniffing attacks, and unsafe cross-origin interactions.

Key Features

• Centralized Dashboard: Configure HTTP Security Headers effortlessly.
• CSP Management: Complete Content Security Policy builder and manager.
• HSTS Support: Enforce Strict-Transport-Security (HSTS) for SSL protection.
• Clickjacking Protection: X-Frame-Options to prevent unauthorized iframe embedding.
• MIME Sniffing Prevention: X-Content-Type-Options support.
• Privacy Controls: Comprehensive Referrer-Policy management.
• Feature Policies: Permissions-Policy configuration for browser hardware and feature control.
• Cross-Origin Protections: Full support for COOP, COEP, and CORP policies.
• Violation Monitoring: Detailed CSP violation logging and reporting.
• Frontend Error Collection: Log JavaScript browser console errors experienced by real users.
• Audit Trail: Track all security configuration changes made by administrators.
• Portability: Import and export settings securely.
• Clean Uninstall: Complete database cleanup support upon uninstallation.

Supported Security Headers

• Content-Security-Policy (CSP)
• Strict-Transport-Security (HSTS)
• X-Frame-Options
• X-Content-Type-Options
• Referrer-Policy
• Permissions-Policy
• Cross-Origin-Opener-Policy (COOP)
• Cross-Origin-Embedder-Policy (COEP)
• Cross-Origin-Resource-Policy (CORP)