diff --git a/src/Shop.PublicApi/web.config b/src/Shop.PublicApi/web.config
index 5973826..c98936c 100644
--- a/src/Shop.PublicApi/web.config
+++ b/src/Shop.PublicApi/web.config
@@ -10,6 +10,7 @@
         <remove name="X-AspNetMvc-Version" />
         <remove name="X-AspNet-Version" />
         <remove name="X-Powered-By" />
+        <add name="X-Frame-Options" value="SAMEORIGIN" />
       </customHeaders>
     </httpProtocol>
   </system.webServer>