diff --git a/Teknik/Web.config b/Teknik/Web.config
index 4bdc0c5..9dfb324 100644
--- a/Teknik/Web.config
+++ b/Teknik/Web.config
@@ -49,6 +49,7 @@
         <add name="Access-Control-Allow-Credentials" value="true" />
         <add name="Access-Control-Allow-Methods" value="GET, PUT, POST, DELETE, OPTIONS" />
         <add name="Access-Control-Allow-Headers" value="Accept, Content-Type" />
+        <add name="strict-transport-security" value="max-age=31536000; includeSubdomains" />
       </customHeaders>
     </httpProtocol>
   </system.webServer>