diff --git a/systemd/system/radicle-node.service b/systemd/system/radicle-node.service
index 5ec85d73..65abf5c7 100644
--- a/systemd/system/radicle-node.service
+++ b/systemd/system/radicle-node.service
@@ -25,6 +25,11 @@ Environment=RAD_HOME=/home/seed/.radicle RUST_BACKTRACE=1 RUST_LOG=info
 KillMode=process
 Restart=always
 RestartSec=3
+# Basic hardening options. For more please refer to `systemd-analyze security`.
+PrivateTmp=true
+ProtectSystem=strict
+NoNewPrivileges=true
+MemoryDenyWriteExecute=true
 
 [Install]
 WantedBy=multi-user.target
diff --git a/systemd/user/radicle-node.service b/systemd/user/radicle-node.service
index 55ea89c7..fe28a4b2 100644
--- a/systemd/user/radicle-node.service
+++ b/systemd/user/radicle-node.service
@@ -18,6 +18,10 @@ Environment=RUST_LOG=info
 KillMode=process
 Restart=always
 RestartSec=3
+# Basic hardening options. For more please refer to `systemd-analyze security`.
+PrivateTmp=true
+ProtectHome=true
+MemoryDenyWriteExecute=true
 
 [Install]
 WantedBy=default.target