Headers Security Advanced & HSTS WP vs Jetpack
Compare WordPress plugins and tools side by side. Pick products with “Compare” in the software directory.
| Feature | Headers Security Advanced & HSTS WP v5.3.5 · checked 23 Oct 2026 Free + paid · ★ 4.8/5 Visit Details | Jetpack v16.3.1 · checked 23 Oct 2026 Free · ★ 3.7/5 Visit Details |
|---|---|---|
| At a glance | ||
| Active installs | 90,000+ | 3M+ |
| Last updated | September 4, 2026 | October 12, 2026 |
| Editions | Headers Security Advanced & HSTS WP · Shield (paid add-on) ($) | Jetpack · Jetpack paid plans ($) |
| Pros | Sends HSTS, CSP, X-Frame-Options and Permissions-Policy from one settings page; Can write headers to Apache or LiteSpeed configuration; Self-check confirms the headers reach the browser | Many modules in one plugin, each switched on separately; Brute-force protection and an image CDN without extra services; Contact form with Akismet spam checks and entries kept in admin |
| Cons | Strict CSP or frame rules can break third-party scripts and embeds; Paid Shield add-on tabs are shown as locked in the free code; Writing server config files needs care on shared hosting | Needs a WordPress.com connection to work fully; Usage tracking runs once the site is connected, with no separate toggle found; Paid plans gate some features, such as multi-step forms |
| Mentioned in our posts | — | 7 |
| Features (Security plugins checklist) | ||
| Firewall | — | Yes |
| Malware scan | — | Yes |
| Login protection | — | Yes |
| Two-factor login | — | Yes |
| Activity log | — | Yes |
| Free version | — | Yes |
| More features | ||
| Other features | HSTS header, Content-Security-Policy header, Permissions-Policy header, X-Frame-Options header, Write headers to Apache or LiteSpeed config, Self-check of headers after changes, Shield add-on tabs shown as locked ($) | Site stats dashboard, Brute force login protection, Photon image CDN, Social sharing buttons, Related posts, Newsletter and blog subscriptions, XML sitemaps, VideoPress video hosting ($), Secure sign-on through WordPress.com |
| Integrations | ||
| Payment | LemonSqueezy licence API ($) | PayPal ($) |
| — | MailPoet | |
| E-commerce | — | WooCommerce |
| Other | — | Akismet, WordPress.com |
| Requires WordPress | 4.7 | 7.0 |
| Requires PHP | 7.4 | 7.4 |
| Tested up to | 7.0 | 7.1 |
| Phones home | No | Yes |
| External services | api.lemonsqueezy.com | jetpack.wordpress.com, api.bruteprotect.com, public-api.wordpress.com, www.sandbox.paypal.com, www.paypal.com, api-m.sandbox.paypal.com, api.paypal.com, v0.wordpress.com, videopress.com, widgets.wp.com, pixel.wp.com, subscribe.wordpress.com |
| Blocks | — | 60 |
| Shortcodes | — | 60 |
| Custom tables | — | 1 |