diff --git a/static/_headers b/static/_headers
new file mode 100644
index 000000000..1216e42d4
--- /dev/null
+++ b/static/_headers
@@ -0,0 +1,5 @@
+/*
+  X-Frame-Options: DENY
+  X-XSS-Protection: 1; mode=block
+  X-Content-Type-Options: nosniff
+  Referrer-Policy: origin-when-cross-origin