[WordPress] 外掛分享: HeaderGenie Security Headers

首頁 › 外掛目錄 › HeaderGenie Security Headers
WordPress 外掛 HeaderGenie Security Headers 的封面圖片
全新外掛
安裝啟用
—
尚無評分
6 天前
最後更新
—
問題解決
WordPress 6.3+ PHP 8.0+ v1.2.53 上架:2026-09-26

內容簡介

HeaderGenie Security Headers 是一款用於增強網站安全性的外掛,透過 PHP 發送 HTTP 安全標頭,適用於 Apache、Nginx 及不支援 .htaccess 的主機。它能幫助使用者檢查和配置網站的安全標頭,提升網站防護能力。

【主要功能】
• 掃描網站以檢查安全標頭的存在與弱點
• 啟用多種安全標頭如 X-Content-Type-Options 和 HSTS
• 自行配置內容安全政策(CSP)
• 從 wp-admin 管理安全設定
• 無需帳戶即可使用掃描功能

外掛標籤

開發者團隊

⬇ 下載最新版 (v1.2.53) 或搜尋安裝

① 下載 ZIP → 後台「外掛 › 安裝外掛 › 上傳外掛」
② 後台搜尋「HeaderGenie Security Headers」→ 直接安裝(推薦)
📦 歷史版本下載

原文外掛簡介

HeaderGenie Security Headers sends HTTP security headers from PHP, so they work on Apache, Nginx, and hosts that ignore .htaccess.
You can:

Scan the public site and see which security headers are present, weak, or missing
Enable headers such as X-Content-Type-Options, X-Frame-Options, Referrer-Policy, DNS prefetch control, HSTS on HTTPS, Permissions-Policy, COOP, COEP, and CORP
Configure a Content-Security-Policy yourself (report-only or enforce). Hosts are not added automatically
Manage those settings from HeaderGenie in wp-admin

The scanner and headers work with no account and do not contact HeaderGenie servers.
A separate HeaderGenie Pro plugin, sold at headergenie.com, adds CSP auto-add from scans and browser reports, Subresource Integrity, Compatibility checks, and cloud monitoring. That plugin is not included here and is not required.
This plugin does not guarantee legal or compliance outcomes. It helps you set and review security headers.
Privacy
This plugin does not contact HeaderGenie servers and does not require an account. A scan requests your own public site URL from the WordPress server so it can read response headers. No analytics, license checks, or third-party tracking run in this plugin.

延伸相關外掛

文章
Filter
Mastodon