diff --git a/.github/workflows/jan-docs-new-release.yaml b/.github/workflows/jan-docs-new-release.yaml
index a8e94b6d7..7325f9d71 100644
--- a/.github/workflows/jan-docs-new-release.yaml
+++ b/.github/workflows/jan-docs-new-release.yaml
@@ -49,7 +49,7 @@ jobs:
         run: yarn install
       - name: Build website
         working-directory: docs
-        run: export NODE_ENV=production && yarn build && cp _redirects out/_redirects
+        run: export NODE_ENV=production && yarn build && cp _redirects out/_redirects && cp _headers out/_headers
 
       - name: Publish to Cloudflare Pages Production
         uses: cloudflare/pages-action@v1
diff --git a/.github/workflows/jan-docs.yml b/.github/workflows/jan-docs.yml
index 9b5fd97f1..4c7439207 100644
--- a/.github/workflows/jan-docs.yml
+++ b/.github/workflows/jan-docs.yml
@@ -55,7 +55,7 @@ jobs:
         run: yarn install
       - name: Build website
         working-directory: docs
-        run: export NODE_ENV=production && yarn build && cp _redirects out/_redirects
+        run: export NODE_ENV=production && yarn build && cp _redirects out/_redirects && cp _headers out/_headers
 
       - name: Publish to Cloudflare Pages PR Preview and Staging
         if: github.event_name == 'pull_request'
diff --git a/docs/_headers b/docs/_headers
new file mode 100644
index 000000000..d080abfd5
--- /dev/null
+++ b/docs/_headers
@@ -0,0 +1,4 @@
+/*
+  X-Frame-Options: SAMEORIGIN
+  Permissions-Policy: interest-cohort=()
+  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
\ No newline at end of file