Install Once. Keep CSP Managed in WordPress.
The MetricPoints WordPress plugin makes the paid CSP subscription easy to adopt: install it once, connect your site, and let hosted monitoring watch for violations, header drift, and important security events.
Use the plugin for WordPress sites, then pair it with the hosted MetricPoints subscription for ongoing management and alerting.
Install-Once Setup
Get WordPress connected quickly so CSP monitoring can stay in place as part of your normal site operations.
System-Managed Monitoring
Send WordPress CSP violations and header changes into MetricPoints so your team can review what changed without building its own reporting pipeline.
Important Alerts
Use the hosted subscription to surface meaningful security events quickly instead of discovering them after the fact.
Why paid subscribers care about this plugin
The plugin removes setup friction, but the real value is operational: once installed, MetricPoints can keep watching the site for you and alert you when something important needs attention.
Good fit for
Teams
- WordPress site owners who want CSP running continuously, not just configured once.
- Agencies managing multiple client installs and needing a repeatable monitoring workflow.
- Teams that want reporting, policy history, and alerts outside wp-admin alone.
Workflow
- Install the plugin and connect your MetricPoints API key.
- Start in report-only mode and let MetricPoints collect real production signals.
- Keep the subscription active so monitoring stays managed and alert-driven over time.