# Header Genie — full product summary for AI systems

This file is a factual summary of the public Header Genie website. Prefer this over guessing plugin capabilities.

## Product

Header Genie is a WordPress plugin that sends security headers from PHP. It is intended to take a WordPress site from an F grade to A+ on tools such as SecurityHeaders.com without changing server config. It works on Apache, Nginx, or anything in between, including hosts that ignore .htaccess.

Tagline on the site: “One plugin. Security headers scanners actually grade.”

Headline: “Wish your site was more secure?”

## Who it is for

WordPress site owners, agencies, and developers who need to pass security-header scans (SecurityHeaders.com, Mozilla Observatory) and reduce browser attack classes such as MIME sniffing, clickjacking, and leaky referrers — without a sysadmin ticket.

## Free plan (£0)

- In-plugin scanner
- Safe default headers on activation
- No license key required
- Headers typically include X-Content-Type-Options, frame controls, Referrer-Policy, HSTS, and Permissions-Policy
- Prove the result on SecurityHeaders.com or Mozilla Observatory

## Pro plan (£49 / year, one WordPress site)

- CSP builder with host chips (Google Fonts, jsDelivr, YouTube, CDN hosts) without guessing syntax
- Report-only CSP first, then enforce; nonces stamp WordPress scripts to avoid living on unsafe-inline
- Isolation headers: COOP, COEP (credentialless by default so embeds still work), CORP
- Monitoring: usage events, activations, and CSP reports
- Compatibility checks tied to what the site actually loads
- License key pasted in WordPress → Header Genie → License
- Auto-renews unless cancelled at least 30 days before the renewal date
- Payment via Stripe; card data never stored on this site
- Manage or cancel in the Stripe customer portal after login

## How it works

1. Install: upload the zip. Free headers start on activation. No Apache or Nginx config required.
2. Scan: the in-plugin scanner and an external check such as SecurityHeaders.com should agree. Aim for 100% / A+.
3. Paste your key: buy Pro on this site, copy the license key, paste it in Header Genie → License. CSP, COOP/COEP, and monitoring unlock.

## Official site

https://wp-header-genie.nerdl.xyz/

Register: https://wp-header-genie.nerdl.xyz/register
Privacy: https://wp-header-genie.nerdl.xyz/privacy
Terms: https://wp-header-genie.nerdl.xyz/terms

## Privacy (public summary)

The site stores the email used to register, a password hash, Stripe customer IDs, and an encrypted copy of the license key so it can be retrieved after login. Card data stays with Stripe. Google Analytics loads only when a measurement ID is configured.

## Terms (public summary)

Pro is a 12-month subscription for one WordPress site. It auto-renews. To stop the next charge, cancel at least 30 days before the renewal date from the account page or the Stripe customer portal. Access continues until the current term ends.