Submit your site to the HSTS preload list
Easy implementable security headers: X-Content-Type-Options, X-XSS-Protection, X-Frame-Options, Certificate Transparency, No Referrer When Downgrade header, Content Security Policy, Upgrade Insecure requests. Read the security headers article for more...