diff --git a/netlify.toml b/netlify.toml
index f4eaae0..e1afdf6 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -43,3 +43,10 @@
     status = 404
     force = false
 
+[[headers]]
+    for = "/*"
+
+    [headers.values]
+        X-XSS-Protection = "1; mode=block"
+        Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
+