diff --git a/frontend/vercel.json b/frontend/vercel.json
index 0f32683..4b97046 100644
--- a/frontend/vercel.json
+++ b/frontend/vercel.json
@@ -1,3 +1,17 @@
 {
-  "rewrites": [{ "source": "/(.*)", "destination": "/index.html" }]
+  "rewrites": [{ "source": "/(.*)", "destination": "/index.html" }],
+  "headers": [
+    {
+      "source": "/(.*)",
+      "headers": [
+        { "key": "X-Frame-Options", "value": "DENY" },
+        { "key": "X-Content-Type-Options", "value": "nosniff" },
+        { "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" },
+        {
+          "key": "Content-Security-Policy",
+          "value": "default-src 'self'; connect-src 'self' https://api.petrcollect.com wss://api.petrcollect.com; img-src 'self' data: blob: https://d7szqravbjf6e.cloudfront.net; script-src 'self'; style-src 'self' 'unsafe-inline';"
+        }
+      ]
+    }
+  ]
 }