diff --git a/README.md b/README.md
index 7edf78a..5b3d5bd 100644
--- a/README.md
+++ b/README.md
@@ -2,6 +2,7 @@
 
 [![Build Status](https://drone.dotya.ml/api/badges/dotya.ml/homepage/status.svg?ref=refs/heads/master)](https://drone.dotya.ml/dotya.ml/homepage)
 ![Mozilla HTTP Observatory Grade](https://img.shields.io/mozilla-observatory/grade-score/dotya.ml)
+![Security Headers](https://img.shields.io/security-headers?url=https%3A%2F%2Fdotya.ml)
 
 sawce that makes up the dotya.ml landing page.
 
diff --git a/content/about.md b/content/about.md
index 10b34b7..84d7410 100644
--- a/content/about.md
+++ b/content/about.md
@@ -36,4 +36,6 @@ i.e. no plain HTTP connections.
 * HTTP headers insight for https://dotya.ml as per [Mozilla HTTP Observatory](https://observatory.mozilla.org/analyze/dotya.ml)\
 Scoring 130 out of 100 points
 
+* [SecurityHeaders](https://securityheaders.com/) report at https://securityheaders.com/?q=https%3A%2F%2Fdotya.ml
+
 * SSL Labs [TLS rating](https://www.ssllabs.com/ssltest/analyze.html?d=dotya.ml): *A+*