# Header Genie > WordPress plugin that sends the security headers scanners actually grade — from PHP, so a site can go from F to A+ without touching Apache, Nginx, or .htaccess. Header Genie is a WordPress security-headers plugin. Free ships safe defaults (X-Content-Type-Options, frame controls, Referrer-Policy, HSTS, Permissions-Policy). Pro unlocks CSP (report-only then enforce, with nonces), isolation headers (COOP, COEP, CORP), monitoring, and compatibility checks. The license key stays on the site. Cards are taken by Stripe. ## Site - [Home](https://wp-header-genie.nerdl.xyz/): Product, benefits, how it works, pricing - [Register](https://wp-header-genie.nerdl.xyz/register): Create an account and buy Pro - [Privacy](https://wp-header-genie.nerdl.xyz/privacy) - [Terms](https://wp-header-genie.nerdl.xyz/terms) - [Full product summary](https://wp-header-genie.nerdl.xyz/llms-full.txt): Machine-readable product facts ## Pricing - Free: £0 — scanner and safe defaults, no license required - Pro: £49/year — one WordPress site, auto-renews; cancel at least 30 days before renewal ## Related scanners - [SecurityHeaders.com](https://securityheaders.com/) - [Mozilla Observatory](https://developer.mozilla.org/en-US/observatory) - [SSL Labs](https://www.ssllabs.com/ssltest/)