diff --git a/sites/site-utilities/statics/server/server.js b/sites/site-utilities/statics/server/server.js
index <HASH>..<HASH> 100644
--- a/sites/site-utilities/statics/server/server.js
+++ b/sites/site-utilities/statics/server/server.js
@@ -7,13 +7,23 @@ var path = require("path");
 var app = express();
 
 // Security enhancements provided by https://github.com/helmetjs/helmet
-app.use(helmet());
+// contentSecurityPolicy() omitted because it breaks modern implementation methods
+app.use(helmet.dnsPrefetchControl());
+app.use(helmet.expectCt());
+app.use(helmet.frameguard());
+app.use(helmet.hidePoweredBy());
+app.use(helmet.hsts());
+app.use(helmet.ieNoOpen());
+app.use(helmet.noSniff());
+app.use(helmet.permittedCrossDomainPolicies());
+app.use(helmet.referrerPolicy());
+app.use(helmet.xssFilter());
 
 // Set public directory
 var publicDir = path.resolve(__dirname);
 
 // Set static application options
-app.use("/", express.static(publicDir));
+app.use("/", express.static(publicDir, { maxAge: "3d" }));
 
 // Set fallback application options
 app.use(fallback("index.html", { root: publicDir }));
update to helmet configuration to omit csp (#<I>)