diff --git a/src/index.njk b/src/index.njk
index 62495d6..a5686e3 100644
--- a/src/index.njk
+++ b/src/index.njk
@@ -23,7 +23,7 @@
         and <span class="font-semibold bg-clip-text text-transparent bg-gradient-to-l from-gray-900 to-gray-400">just about anywhere else</span>
       </h2>
       <h2 class="text-lg sm:text-xl text-center">
-        100% free and <a href="https://github.com/piratepx/app" target="_blank">open source</a>
+        100% free and <a href="https://github.com/piratepx/app" target="_blank" rel="noopener">open source</a>
       </h2>
       <form
         method="get"
@@ -74,7 +74,7 @@
           class="sm:flex-none w-1/2 sm:w-40 mx-auto mb-5 sm:m-0 sm:mr-5"
         />
         <p>
-          Hey! My name is Justin. I live in Chattanooga, Tennessee with my wife, two kids, and dog, Ender. I built piratepx as way to get a little analytics insight into <a href="https://github.com/jstayton" target="_blank">my own personal and indie projects</a> (like <a href="https://www.lateral.run" target="_blank">Lateral.run</a>) without having to resort to Google Analytics. You can follow me on Twitter at my original AOL screen name, <a href="https://twitter.com/kidjustino" target="_blank">@kidjustino</a>.
+          Hey! My name is Justin. I live in Chattanooga, Tennessee with my wife, two kids, and dog, Ender. I built piratepx as way to get a little analytics insight into <a href="https://github.com/jstayton" target="_blank" rel="noopener">my own personal and indie projects</a> (like <a href="https://www.lateral.run" target="_blank" rel="noopener">Lateral.run</a>) without having to resort to Google Analytics. You can follow me on Twitter at my original AOL screen name, <a href="https://twitter.com/kidjustino" target="_blank" rel="noopener">@kidjustino</a>.
         </p>
       </div>
     </div>
diff --git a/src/readme.njk b/src/readme.njk
index 3c0f2c8..af68c75 100644
--- a/src/readme.njk
+++ b/src/readme.njk
@@ -37,7 +37,7 @@
         If you’re adding piratepx to a mobile app, server-side API, CLI, or other non-HTML context, simply use your preferred request library in the language of your project. Here are a few examples...
       </p>
       <p>
-        JavaScript’s <a href="https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API" target="_blank"><code>fetch</code></a>:
+        JavaScript’s <a href="https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API" target="_blank" rel="noopener"><code>fetch</code></a>:
       </p>
 <pre><code>const query = new URLSearchParams({
   p: '{% raw %}{{PROJECT_ID}}{% endraw %}',
@@ -47,7 +47,7 @@
 fetch(`https://app.piratepx.com/ship?${query.toString()}`)
 </code></pre>
       <p>
-        PHP’s <a href="https://www.php.net/manual/en/function.file-get-contents.php" target="_blank"><code>file_get_contents</code></a>:
+        PHP’s <a href="https://www.php.net/manual/en/function.file-get-contents.php" target="_blank" rel="noopener"><code>file_get_contents</code></a>:
       </p>
 <pre><code>$query = http_build_query(array(
   'p' => '{% raw %}{{PROJECT_ID}}{% endraw %}',
@@ -57,7 +57,7 @@ fetch(`https://app.piratepx.com/ship?${query.toString()}`)
 file_get_contents("https://app.piratepx.com/ship?{$query}")
 </code></pre>
       <p>
-        <a href="https://curl.haxx.se/" target="_blank">curl</a>:
+        <a href="https://curl.haxx.se/" target="_blank" rel="noopener">curl</a>:
       </p>
       <pre><code>curl -G -d 'p={% raw %}{{PROJECT_ID}}{% endraw %}' --data-urlencode 'i={% raw %}{{COUNT_IDENTIFIER}}{% endraw %}' https://app.piratepx.com/ship</code></pre>
     </div>