diff --git a/Earthfile b/Earthfile
index 56c44fa87..e030f7c83 100644
--- a/Earthfile
+++ b/Earthfile
@@ -69,6 +69,7 @@ publish:
   RUN mkdir -p ./build/blog
   RUN cp -rf ./blog/* ./build/blog
   RUN cp -rf ./website/* ./build
+  COPY ./netlify.toml ./build/netlify.toml
 
   IF [ "$DESTINATION" = "PROD" ]
     RUN --no-cache echo "PROD_DEPLOY"
diff --git a/netlify.toml b/netlify.toml
new file mode 100644
index 000000000..dc5102308
--- /dev/null
+++ b/netlify.toml
@@ -0,0 +1,7 @@
+[[headers]]
+  for = "/*"
+  [headers.values]
+    X-Content-Type-Options = "nosniff"
+    X-Frame-Options = "SAMEORIGIN"
+    Strict-Transport-Security = "max-age=31536000; includeSubDomains"
+    Content-Security-Policy = "frame-ancestors 'self'"