diff --git a/migrations/20160714130142-apps-add-xFrameOptions.js b/migrations/20160714130142-apps-add-xFrameOptions.js
new file mode 100644
index 000000000..5657def19
--- /dev/null
+++ b/migrations/20160714130142-apps-add-xFrameOptions.js
@@ -0,0 +1,15 @@
+dbm = dbm || require('db-migrate');
+
+exports.up = function(db, callback) {
+    db.runSql('ALTER TABLE apps ADD COLUMN xFrameOptions VARCHAR(512)', function (error) {
+        if (error) console.error(error);
+        callback(error);
+    });
+};
+
+exports.down = function(db, callback) {
+    db.runSql('ALTER TABLE apps DROP COLUMN xFrameOptions', function (error) {
+        if (error) console.error(error);
+        callback(error);
+    });
+};
diff --git a/migrations/schema.sql b/migrations/schema.sql
index dab9531b7..f668cc080 100644
--- a/migrations/schema.sql
+++ b/migrations/schema.sql
@@ -67,6 +67,7 @@ CREATE TABLE IF NOT EXISTS apps(
     createdAt TIMESTAMP(2) NOT NULL DEFAULT CURRENT_TIMESTAMP,
     memoryLimit BIGINT DEFAULT 0,
     altDomain VARCHAR(256),
+    xFrameOptions VARCHAR(512),
 
     lastBackupId VARCHAR(128), // tracks last valid backup, can be removed