Toggle the headers you need — HSTS, frame protection, nosniff, referrer policy, and a WordPress-friendly CSP starter. Export for Apache, Nginx, or PHP.
CSP starter allows inline scripts for typical WP/page-builder setups — tighten it for your CDN and analytics before calling it production-ready. Test with securityheaders.com after deploy.
Don’t stack the same headers in both .htaccess and a PHP plugin — duplicates confuse debugging. On Hostinger Apache, mod_headers snippets work well; for managed Nginx, use the Nginx format or a small MU-plugin with send_headers.
Our flagship assistant answers WordPress questions in plain English or full code — separate from these utilities, free beta, no login.