I have written a simple plugin to send some security http headers. I've tested it on various wordpress installation