diff --git a/config/seckit.settings.yml b/config/seckit.settings.yml
index 931ffe6..5114ec1 100644
--- a/config/seckit.settings.yml
+++ b/config/seckit.settings.yml
@@ -13,7 +13,7 @@ seckit_xss:
     style-src: "'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com fonts.googleapis.com *.github.io"
     img-src: "'self' data: https://*.google-analytics.com https://*.googletagmanager.com gstatic.com https://www.google.com https://google.com *.github.com *.unocha.org"
     media-src: "'none'"
-    frame-src: "'self' https://www.googletagmanager.com https://ocha.fleeq.io *.un.org https://cdnapisec.kaltura.com"
+    frame-src: "'self' https://www.googletagmanager.com https://ocha.fleeq.io *.un.org https://cdnapisec.kaltura.com https://vimeo.com https://player.vimeo.com"
     frame-ancestors: "'self'"
     child-src: "'self'"
     font-src: "'self' data: fonts.gstatic.com"