Skip to main content

Add custom headers

Custom headers help you strengthen your website's security. This article explains how to set up and use custom headers in Studio.Design.

Available on: Business Plus plan, Enterprise plan (Legacy plan: Business plan and above)


What are custom headers?

Custom headers let you add supported HTTP headers to your website based on its specific needs.

This feature is available on the Business Plus plan and Enterprise plan. It adds an extra layer of security to your published site, helping prevent activities such as cross-site scripting attacks, iframe embedding, and other domain-level security issues.

Note: Configuring this feature is considered an advanced option and may not be covered by standard support.

If configuring this feature causes any issues with your published site, please try turning the feature off to see if that resolves the problem.

Support for adding custom headers

Chat support can help with the standard configurations described in this article.

Detailed setup assistance and consultation are available only with certain Enterprise plans. For details, feel free to reach out through our contact form.

Supported header types

Studio.Design currently supports the following headers, with up to 10 entries allowed:

  • x-xss-protection

  • x-content-type-options

  • x-frame-options

  • referrer-policy

  • x-permitted-cross-domain-policies

  • timing-allow-origin

  • content-security-policy

  • feature-policy

  • expect-ct

  • strict-transport-security

For details about these headers, their syntax, and browser compatibility, see HTTP Headers - HTTP | MDN Web Docs.

For users on legacy plans

If you're on the legacy Business plan, you can use this feature by adding it to your project as an add-on (extension).

Pricing and payment

Custom headers can be added to your project as a separate add-on contract. The fee is ¥19,800 per month (tax included), billed monthly.

For details about billing cycles and more, see About add-ons and billing.

How to set up custom headers

Tip: Only Owners or higher can confirm payment and add or configure headers.

1. Open [Plan & Billing] in the Dashboard
Open [Plan & Billing] for the project where you want to add custom headers.

2. Add the Custom Headers add-on
Click [Add] next to Custom Headers.

Screenshot: Adding the Custom Headers add-on.


A payment confirmation screen will appear. Review the add-on charges and notes, then click [Confirm Payment].

Screenshot: Subscribing to the Custom Headers add-on.

For the next steps, see Setup steps.

How to cancel the Custom Headers add-on

Tip: Any settings you've configured will be deleted when the add-on contract ends.

1. Open [Plan & Billing] in the Dashboard

Open [Plan & Billing] for the project where you want to cancel the Custom Headers add-on.

2. Cancel the Custom Headers add-on

Click [Cancel] next to Custom Headers. Review the confirmation screen, then click [Cancel].

Screenshot: Canceling the Custom Headers add-on.

How to set up custom headers

Note: If your site is published, changes will be applied to the live site immediately after adding.

1. Open Project Settings in the Dashboard
From the menu on the left side of the Dashboard, open [Project Settings], then click [Add Header] under Custom Headers.

Screenshot: Adding a custom header.

2. Add a header

Select the header you want to add from [KEY]. Enter the required information in [VALUE], then click [Add].

Screenshot: Adding a custom header.

How to delete a custom header

1. Open [Project Settings] in the Dashboard

Open the Dashboard for the project where you added the custom header, then click [Project Settings] in the menu on the left.

2. Click the delete button

Click [×] next to the custom header you want to delete. Review the details, then click [Delete Header].

Screenshot: Deleting a custom header.

Did this answer your question?