Disable Comments vs Headers Security Advanced & HSTS WP
Compare WordPress plugins and tools side by side. Pick products with “Compare” in the software directory.
| Feature | Disable Comments v2.9.1 · checked 23 Oct 2026 Free · ★ 4.7/5 Visit Details | Headers Security Advanced & HSTS WP v5.3.5 · checked 23 Oct 2026 Free + paid · ★ 4.8/5 Visit Details |
|---|---|---|
| At a glance | ||
| Active installs | 1M+ | 90,000+ |
| Last updated | October 25, 2026 | September 4, 2026 |
| Editions | Disable Comments | Headers Security Advanced & HSTS WP · Shield (paid add-on) ($) |
| Pros | Site-wide, per post type or per post rules; Bulk delete with a preview and export before deleting; Blocks REST API and XML-RPC comment endpoints | Sends HSTS, CSP, X-Frame-Options and Permissions-Policy from one settings page; Can write headers to Apache or LiteSpeed configuration; Self-check confirms the headers reach the browser |
| Cons | Deleting comments is permanent once confirmed; Optional usage tracking sends data to WPInsight once opted in | Strict CSP or frame rules can break third-party scripts and embeds; Paid Shield add-on tabs are shown as locked in the free code; Writing server config files needs care on shared hosting |
| Mentioned in our posts | 2 | — |
| More features | ||
| Other features | Disable comments per post type, Conditional rules for individual posts and auto-close, Bulk delete of existing comments with preview and export, Block REST API and XML-RPC comment endpoints, Count blocked comment attempts, Multisite site-by-site settings, WP-CLI command, Settings import and export | HSTS header, Content-Security-Policy header, Permissions-Policy header, X-Frame-Options header, Write headers to Apache or LiteSpeed config, Self-check of headers after changes, Shield add-on tabs shown as locked ($) |
| Integrations | ||
| Payment | — | LemonSqueezy licence API ($) |
| E-commerce | WooCommerce | — |
| Requires WordPress | 5.0 | 4.7 |
| Requires PHP | 7.0 | 7.4 |
| Tested up to | 7.0 | 7.0 |
| Phones home | Only if you agree | No |
| External services | send.wpinsight.com, ip-api.com | api.lemonsqueezy.com |