Setting up Header security on your website is beyond our scope of support. Header Security is not about the just for the Theme, it’s also for the Web Server configuration.
Your host service provider should be able to assist you, however, there are a wide range of ways to resolve this. Configuration can be complex and require testing.
Below are the links that may be useful for this kind of requirement.
1. patchstack
2. How to Add HTTP Security Headers in WordPress (Beginner’s Guide)
3. BetterStudio
