Scan in-plugin for FREE
Add: X-Content-Type-Options, frame controls, Referrer-Policy, HSTS, and Permissions-Policy without a sysadmin ticket.
One plugin. Security headers scanners actually grade.
Wish your site was more secure?
Wish granted! Same site but more secure with just a few clicks.FreeGets you the safe defaults.ProUnlocks CSP, monitoring, and a score you can defend.
Why it pays for itself
Secure Headers are not vanity. They are the cheapest way to cut whole classes of browser attacks.
Stop XSS-shaped mistakes
MIME sniffing, clickjacking, and leaky referrers are default WordPress gaps. Turning them off is one toggle, not a weekend in .htaccess.
CSP without breaking everything
Build the policy in report-only, watch real violations, then enforce. Nonces stamp WordPress scripts so you are not stuck with unsafe-inline forever.
Three steps. Then you are done.
1. Install
Download the zip and upload it to your WordPress site. It works without writing Apache or Nginx config. FREE headers start on activation.
2. Scan
Don't just take the built in scanner's word for it... use an external tool like SecurityHeaders.com to get a grade.
3. Go PRO
Buy Pro from this site, copy the license key, paste it in Header Genie → License. Unlock CSP, COOP/COEP, compatibility checks, monitoring and more.
What PRO is actually for
FREE is the baseline. PRO is how you keep the grade as the site grows.
CSP builder with host chips
Allow Google Fonts, jsDelivr, YouTube, or your CDN without guessing syntax. Report-only first so you see breakage before visitors do.
Isolation headers
COOP, COEP, and CORP. The same family of controls that raise Mozilla Observatory scores.
Monitoring
Live headers, License activations and CSP reports in one screen. When a new plugin blows a directive, you see it.
Compatibility checks
Recommendations tied to what your site actually loads — not a generic checklist you have to translate.
Check it yourself
Header Genie does not replace existing scanning tools. It is how you pass them on WordPress, including hosts that ignore .htaccess. Try scanning your site now...
Go PRO! One site, One year, One fixed cost.
£0
Scanner and safe header defaults.
No license required.
Stay FREE if you only need the basics.
£79 / year
Add CSP, monitoring, isolation headers, compatibility checks and reports.