Title: Missing security headers SSL
Last modified: January 6, 2021

---

# Missing security headers SSL

 *  Resolved [ritiriwaz](https://wordpress.org/support/users/ritiriwaz/)
 * (@ritiriwaz)
 * [5 years, 5 months ago](https://wordpress.org/support/topic/missing-security-headers-ssl-3/)
 * Your .htaccess file does not contain all recommended security headers.
    HTTP 
   Strict Transport Security Content Security Policy: Upgrade Insecure Requests 
   X-XSS protection X-Content Type Options Expect-CT Learn more about secu
 * I am getting the following error even when I have enabled SSL
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fmissing-security-headers-ssl-3%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Support [Leon Wimmenhoeve](https://wordpress.org/support/users/leonwimmenhoeve/)
 * (@leonwimmenhoeve)
 * [5 years, 5 months ago](https://wordpress.org/support/topic/missing-security-headers-ssl-3/#post-13875522)
 * Hi [@ritiriwaz](https://wordpress.org/support/users/ritiriwaz/),
 * Really Simple SSL helps to activate SSL on your site and to redirect insecure
   requests to https. Security headers are not a part of the (free) Really Simple
   SSL plugin.
 * We’ve written several articles about security headers.
 * Basic information:
    [https://really-simple-ssl.com/everything-you-need-to-know-about-security-headers/](https://really-simple-ssl.com/everything-you-need-to-know-about-security-headers/)
 * How to configure security headers (manually or automatically):
    [https://really-simple-ssl.com/site-health-recommended-security-headers/](https://really-simple-ssl.com/site-health-recommended-security-headers/)
 * Let me know if you need any further assistance.
 * Regards,
    Leon
 *  Thread Starter [ritiriwaz](https://wordpress.org/support/users/ritiriwaz/)
 * (@ritiriwaz)
 * [5 years, 5 months ago](https://wordpress.org/support/topic/missing-security-headers-ssl-3/#post-13882659)
 * Thanks
 *  [attosoftonline](https://wordpress.org/support/users/attosoftonline/)
 * (@attosoftonline)
 * [5 years, 3 months ago](https://wordpress.org/support/topic/missing-security-headers-ssl-3/#post-14138061)
 * look here
 * [https://wordpress.org/support/topic/missing-security-headers-ssl-2/page/2/#post-14138020](https://wordpress.org/support/topic/missing-security-headers-ssl-2/page/2/#post-14138020)

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Missing security headers SSL’ is closed to new replies.

 * ![](https://ps.w.org/really-simple-ssl/assets/icon-256x256.png?rev=2839720)
 * [Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)](https://wordpress.org/plugins/really-simple-ssl/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/really-simple-ssl/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/really-simple-ssl/)
 * [Active Topics](https://wordpress.org/support/plugin/really-simple-ssl/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/really-simple-ssl/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/really-simple-ssl/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [attosoftonline](https://wordpress.org/support/users/attosoftonline/)
 * Last activity: [5 years, 3 months ago](https://wordpress.org/support/topic/missing-security-headers-ssl-3/#post-14138061)
 * Status: resolved