Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/empirextech/empire-security-headers-wp/archive/refs/heads/main.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Empire Security Headers for WordPress
Free HTTP security headers: nosniff, Referrer-Policy, X-Frame-Options, Permissions-Policy. Optional HSTS and CSP report-only.
Built by SC EMPIRE GLOBAL SOLUTIONS SRL (EMPIREX Tech).
Shop: empirex.tech/shop/empire-security-headers-wp
SKU EMP-WP-HEADERS-FREE · WordPress 5.8+ / 6.x · PHP 8.0+ · GPL-2.0-or-later
Original EMPIREX module. Not a client dump.
What it does
- Sends headers on
send_headers - Skips
wp-adminby default so the dashboard does not break - HSTS only when the option is on and the request is SSL
- CSP is report-only, never enforcing, until you know the site graph
Install
- Download the ZIP from Empire Shop (free) or clone this repo
- Plugins → Upload → Activate
- Settings → Empire Headers
Tests
php tests/run.php