diff --git a/netlify.toml b/netlify.toml
index 7afccd8..736031d 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -192,3 +192,10 @@
         X-Permitted-Cross-Domain-Policies = "none"
         Referrer-Policy = "no-referrer"
 
+[[headers]]
+    for = "https://ari-web.xyz"
+
+    [headers.values]
+        Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
+        Content-Security-Policy = "upgrade-insecure-requests"
+        Referrer-Policy = "no-referrer"