diff --git a/BusyDatabase/BusyDatabase.WebApi/Web.config b/BusyDatabase/BusyDatabase.WebApi/Web.config
index 30eb350..6adaa32 100644
--- a/BusyDatabase/BusyDatabase.WebApi/Web.config
+++ b/BusyDatabase/BusyDatabase.WebApi/Web.config
@@ -25,6 +25,11 @@
     <httpRuntime targetFramework="4.5.1" />
   </system.web>
   <system.webServer>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="DENY" />
+      </customHeaders>
+    </httpProtocol>
     <handlers>
       <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
       <remove name="OPTIONSVerbHandler" />
diff --git a/ChattyIO/ChattyIO.WebApi/Web.config b/ChattyIO/ChattyIO.WebApi/Web.config
index af299a4..33579e4 100644
--- a/ChattyIO/ChattyIO.WebApi/Web.config
+++ b/ChattyIO/ChattyIO.WebApi/Web.config
@@ -23,6 +23,11 @@
     </providers>
   </entityFramework>
   <system.webServer>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="DENY" />
+      </customHeaders>
+    </httpProtocol>
     <handlers>
       <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
       <remove name="OPTIONSVerbHandler" />
diff --git a/ExtraneousFetching/ExtraneousFetching.WebApi/Web.config b/ExtraneousFetching/ExtraneousFetching.WebApi/Web.config
index c2a8b51..f88d33c 100644
--- a/ExtraneousFetching/ExtraneousFetching.WebApi/Web.config
+++ b/ExtraneousFetching/ExtraneousFetching.WebApi/Web.config
@@ -19,6 +19,11 @@
     <httpModules />
   </system.web>
   <system.webServer>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="DENY" />
+      </customHeaders>
+    </httpProtocol>
     <validation validateIntegratedModeConfiguration="false" />
     <modules />
     <handlers>
diff --git a/ImproperInstantiation/ImproperInstantiation.UserProfileServiceWebRole/Web.config b/ImproperInstantiation/ImproperInstantiation.UserProfileServiceWebRole/Web.config
index 5be6a77..2481aed 100644
--- a/ImproperInstantiation/ImproperInstantiation.UserProfileServiceWebRole/Web.config
+++ b/ImproperInstantiation/ImproperInstantiation.UserProfileServiceWebRole/Web.config
@@ -21,6 +21,11 @@
   <runtime>
   </runtime>
   <system.webServer>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="DENY" />
+      </customHeaders>
+    </httpProtocol>
     <handlers>
       <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
       <remove name="OPTIONSVerbHandler" />
diff --git a/ImproperInstantiation/ImproperInstantiation.WebRole/Web.config b/ImproperInstantiation/ImproperInstantiation.WebRole/Web.config
index 4d42ab5..fb783e2 100644
--- a/ImproperInstantiation/ImproperInstantiation.WebRole/Web.config
+++ b/ImproperInstantiation/ImproperInstantiation.WebRole/Web.config
@@ -19,6 +19,11 @@
     <httpRuntime targetFramework="4.5.1" />
   </system.web>
   <system.webServer>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="DENY" />
+      </customHeaders>
+    </httpProtocol>
     <handlers>
       <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
       <remove name="OPTIONSVerbHandler" />
diff --git a/MonolithicPersistence/MonolithicPersistence.WebRole/Web.config b/MonolithicPersistence/MonolithicPersistence.WebRole/Web.config
index 9b1b99c..6a74f62 100644
--- a/MonolithicPersistence/MonolithicPersistence.WebRole/Web.config
+++ b/MonolithicPersistence/MonolithicPersistence.WebRole/Web.config
@@ -18,6 +18,11 @@
     <httpRuntime targetFramework="4.5.1" />
   </system.web>
   <system.webServer>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="DENY" />
+      </customHeaders>
+    </httpProtocol>
     <handlers>
       <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
       <remove name="OPTIONSVerbHandler" />
diff --git a/NoCaching/NoCaching.WebRole/Web.config b/NoCaching/NoCaching.WebRole/Web.config
index f86755b..f346ae3 100644
--- a/NoCaching/NoCaching.WebRole/Web.config
+++ b/NoCaching/NoCaching.WebRole/Web.config
@@ -24,6 +24,11 @@
     <httpRuntime targetFramework="4.5.1" />
   </system.web>
   <system.webServer>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="DENY" />
+      </customHeaders>
+    </httpProtocol>
     <handlers>
       <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
       <remove name="OPTIONSVerbHandler" />