LAUNCH DEAL — LIMITED Das Nest Lifetime 499 € 149 € Get the deal →
KakapoWP KakapoWP
Log in Get Lifetime
Kakapo Security

Security headers

Four lines the browser takes seriously.

Kakapo Security hooks into send_headers and sets four protective headers in the frontend. They tell the browser what it must not do with your website: embed it, guess file types, pass on too much origin.

Get lifetime — €149All Security features
All eight plugins included in the lifetime deal — every future one too.

Security headers

X-Frame-Options against embedding by others · nosniff against MIME guessing

ActiveSettings

What security headers offer

X-Frame-Options against foreign embedding
nosniff against MIME sniffing
Referrer-Policy set sparingly
CSP with upgrade-insecure-requests

Here's how it works

1

Turn on header protection

2

send_headers extends the response

3

The browser sticks to them

FAQ about security headers

Which headers are sent?
X-Frame-Options, X-Content-Type-Options with nosniff, Referrer-Policy with strict-origin-when-cross-origin and a simple Content-Security-Policy with upgrade-insecure-requests.
Can a CSP break my site?
The bundled policy is deliberately kept simple and mainly sets upgrade-insecure-requests. Even so, take a look at your site in the frontend once you have switched it on.
Where do the headers apply?
In the frontend. They are set via send_headers, that is, when your pages are delivered to the browser.

More Security features

Hardening →Bad request filter →Malware scan →
Ready?

Security — pay once, use forever.

All eight plugins for a one-time €149 instead of €13 a month. Secure payment via Stripe. For the first 14 days, it's problem fixed or your money back.

Get lifetime — €149