Hardening project
Get the site to a public A+. One Pro year is the input. Your day rate is the invoice.
For agencies
Ship A+ headers on every client site, without touching the server.
One plugin, one dashboard. Scan, set headers, watch CSP. Bill the outcome, not the .htaccess hours. More than 10 Pro licences on your account save up to 50%.
Create an accountDownload Free
£79 / year per site for 1–10 licences. 11 or more: volume pricing, up to half price.
Volume
11+ licences, up to 50% off.
List price is £79 per WordPress site per year. Hold more than 10 Pro keys on one Header Genie account and the per-site price can fall as low as £39.50.
- Same Pro product. Same keys. Same account.
- One live WordPress site per licence.
- You sell the project or retainer. We are the cost of goods.
Stop spending hours per site on headers.
Agencies already handle WordPress, SSL, and backups. Security headers are the bit that still means SSH, CSP breakage, and a different story on every host. HeaderGenie runs from wp-admin.
No server ticket
Headers are sent from PHP. You need wp-admin, not Apache, Nginx, or .htaccess.
CSP without a week of breakage
Report-only first. Auto-add hosts from what the public pages actually load. Then enforce.
The same recipe on every build
Free headers on activation. Pro when the client needs CSP, SRI, nonces, and monitoring.
See the fleet in one place
Scores and CSP noise across client sites, without logging into forty dashboards.
The licence is cost of goods. You keep the fee.
Do not sell the £79 key as the product. Sell an A+ scan, a hardening project, or a care-plan that includes monitoring. Volume makes the COGS smaller once you pass ten sites.
Care plan
Renew the same licence. CSP reports and scan history are the ongoing work you already bill for.
New builds
Ship Free at launch. Move the client to Pro when CSP is in scope. No new vendor for them to learn.
How agencies run it.
Install Free
On the client site or staging. Scan, turn on the conservative headers.
Buy Pro on your account
One key per live site. Paste it in HeaderGenie → License. It pins to that WordPress site.
Finish CSP
Report-only, auto-add, compatibility, then enforce. Leave monitoring on.
Watch the fleet
Last score and CSP failures sit on your Header Genie account, not only in wp-admin.
Pro per site. Volume after ten.
Extra client sites are extra licences on the same login. Hold more than 10 and the per-licence price can drop by up to half.
Pro
£79 / year
1–10 licences on one account
- One WordPress site per licence
- CSP auto-add, report-only, then enforce
- SRI, nonces, compatibility
- CSP reports and monitoring
That's £6.59/month when paid annually.
Save up to 50%
Volume
From £39.50 / year
11 or more licences on one account
- Same Pro product, same keys
- Up to 50% off list price (£79 → £39.50)
- All keys on one Header Genie login
- Applied when your account is over ten sites
Exact rate depends on how many licences you hold.
Check a client site from here.
Same public-header scan as the homepage. Confirm on SecurityHeaders.com if you want a second opinion.
Ready when the next client site is.
Create the account, buy the keys you need, paste them in WordPress. Volume starts after ten.