diff --git a/netlify.toml b/netlify.toml
index 5f8fb52..3a5fedd 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -110,3 +110,10 @@
     status = 404
     force = false
 
+[[headers]]
+    for = "/*"
+
+    [headers.values]
+        X-XSS-Protection = "1; mode=block"
+        Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
+