Secure HTTP Headers

Ownership

Held by shasha310 throughout, with no change of ownership observed since daily tracking began on 02 Aug 2026.

Full observed history, including every field transition

Committing accounts

Read from the plugin’s public release log, so these predate this registry. A committing account is not an owner. Thirty accounts commit to WooCommerce and it has never changed hands.

This registry did not observe a transfer; it read these names off a public log. Whether that reflects a change of ownership is not something the directory publishes.

Adoption

How widely the plugin is installed, and what the people running it think of it. WordPress.org rounds install figures to one significant digit, so they describe an order of magnitude rather than a headcount.

Small but established: 100+ active installs. Enough sites to show it works in the wild, too few for adoption to say much on its own.

3 downloads a day over the last 7 days, rising 109% against the 7 days before. Downloads are counted exactly and without a ceiling, so they show movement the rounded install figure cannot.

Every field we record, one column per observation. Fields that never moved are named once rather than repeated across every column. A row of identical numbers would be padding.

Unchanged throughout: ratings total (2) · active installs (100+) · version (1.0) · support threads (0) · threads resolved (0)

41 days of observation, most recent 14 shown.

Maintenance

When it was last released, and how far its declared compatibility has drifted from current WordPress.

History

Everything dated that this registry holds about the plugin, most recent first. Releases carry the author’s own release date; everything else is dated to when it was observed.

1. 02 Aug 20261 month ago
   First observed by PluginPediaDaily snapshots of this plugin’s directory record begin here. Everything above this line is observed; anything before it comes from fields the API itself reports.
2. 05 Oct 20223.5 years ago
   Dormancy threshold crossed540 days since the last release (2021-04-13). Dormancy is a maintenance observation, not a judgement about the owner.
3. 13 Apr 20215 years ago
   Version 1.0 released
4. 13 Apr 20215 years ago
   Added to the WordPress.org directoryReported by the plugin API as the date this plugin was added.

What we know, and what we don’t

Everything on this page in one place, including the gaps, so that nothing here is mistaken for a clean bill of health.

Every record on this site, this one included, works under the same limits. We read what WordPress.org publishes about a plugin, never the plugin’s own code, so nothing here says whether a plugin is well built or safe. Install counts reach us already rounded; a change smaller than a band step doesn’t show. We don’t track security advisories yet. For anything older than our first observation we rely on the plugin’s public release log, where one exists. What this registry can and cannot see

Similar plugins

This plugin has not been updated in a long time. These carry the same tags and describe themselves in the same terms, so they are a starting point for a replacement, not a recommendation. Check them yourself.

Security Hardener

Basic hardening: secure headers, login honeypot, user enumeration blocking, generic login errors, rate limiting, and more.

200+ installsupdated 19 Aug 2026

headershardeningsecurity

WP Hide & Security Enhancer

Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.

50,000+ installs4.4★ (274)updated 13 Aug 2026

headerssecurity

500× the installs

NETSENSAI Shield

Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.

1,000+ installs5.0★ (5)updated 19 Aug 2026

hardeningsecurity

10× the installs

Headers Security Advanced & HSTS WP

Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.

90,000+ installs4.9★ (79)updated 04 Sep 2026

headers

900× the installs

Host Header Injection Fix

Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.

400+ installs5.0★ (6)updated 18 Jul 2026

headerssecurity

BaseCloud Security Manager

🛡️ Enterprise-grade WordPress security made simple. Implement military-standard HTTP security headers with zero technical knowledge required.

20+ installs5.0★ (2)updated 25 Feb 2026

headershardeningsecurity

Grouped from the tags each author chose for their own plugin, so the grouping is only as good as those tags.

Reach out about this record

Corrections, missing context, or anything else about Secure HTTP Headers: a person reads every submission, and corrections get a reply within 5 business days.