diff --git a/next.config.js b/next.config.js
index fbffc9ab..9bc30202 100644
--- a/next.config.js
+++ b/next.config.js
@@ -11,6 +11,7 @@ const nextConfig = {
     return config;
   },
   cacheHandler: require.resolve('next/dist/server/lib/incremental-cache/file-system-cache.js'),
+  productionBrowserSourceMaps: true,
 };
 
 module.exports = nextConfig;
diff --git a/src/app/layout.tsx b/src/app/layout.tsx
index 297a60a6..057cf8e1 100644
--- a/src/app/layout.tsx
+++ b/src/app/layout.tsx
@@ -2,6 +2,7 @@ import '@/styles/globals.css';
 
 import clsx from 'clsx';
 import { Metadata, Viewport } from 'next';
+import { headers } from 'next/headers';
 import Script from 'next/script';
 
 import { CookieConsentPopup } from '@/components/Analytics/CookieConsentPopup';
@@ -26,9 +27,6 @@ export const metadata: Metadata = {
     apple: { url: '/favicon/apple-touch-icon.png', sizes: '180x180' },
   },
   manifest: '/favicon/site.webmanifest',
-  appleWebApp: {
-    title: 'HungerMap',
-  },
   keywords: siteConfig.keywords, // may not be used by search engines but its good to have
   openGraph: {
     title: siteConfig.name,
@@ -74,11 +72,12 @@ export const viewport: Viewport = {
 };
 
 export default function RootLayout({ children }: { children: React.ReactNode }) {
+  const nonce = headers().get('x-nonce');
   return (
     <html suppressHydrationWarning lang="en">
       <head>
         {/* JSON-LD Structured Data */}
-        <Script type="application/ld+json" id="structured-data">
+        <Script type="application/ld+json" id="structured-data" nonce={nonce ?? ''}>
           {`
             {
               "@context": "https://schema.org",
@@ -99,7 +98,7 @@ export default function RootLayout({ children }: { children: React.ReactNode })
         </Script>
 
         {/* Google Analytics Script */}
-        <Script id="google-analytics">
+        <Script id="google-analytics" nonce={nonce ?? ''}>
           {`
               window.dataLayer = window.dataLayer || [];
               function gtag(){dataLayer.push(arguments);}
diff --git a/src/components/Accordions/AccordionBoxItems.tsx b/src/components/Accordions/AccordionBoxItems.tsx
index eebcd721..a40758b4 100644
--- a/src/components/Accordions/AccordionBoxItems.tsx
+++ b/src/components/Accordions/AccordionBoxItems.tsx
@@ -72,7 +72,7 @@ export default function AccordionBoxItems({
                   <Popover>
                     <PopoverTrigger>
                       {item.infoIcon && (
-                        <Button isIconOnly className="w-[37px] h-[37px] p-[5.5px]" variant="light">
+                        <Button as="span" isIconOnly className="w-[37px] h-[37px] p-[5.5px]" variant="light">
                           {item.infoIcon}
                         </Button>
                       )}
diff --git a/src/components/Analytics/CookieConsentPopup.tsx b/src/components/Analytics/CookieConsentPopup.tsx
index 0472bb4d..f040fa9e 100644
--- a/src/components/Analytics/CookieConsentPopup.tsx
+++ b/src/components/Analytics/CookieConsentPopup.tsx
@@ -26,6 +26,7 @@ export function CookieConsentPopup() {
         const gtagScript = document.createElement('script');
         gtagScript.async = true;
         gtagScript.src = `https://www.googletagmanager.com/gtag/js?id=${process.env.NEXT_PUBLIC_GA_ID}`;
+        gtagScript.nonce = document.getElementById('google-analytics')?.nonce;
 
         const firstScript = document.getElementsByTagName('script')[0];
         firstScript.parentNode?.insertBefore(gtagScript, firstScript);
diff --git a/src/components/Charts/LineChart.tsx b/src/components/Charts/LineChart.tsx
index fc666cb0..11fd3541 100644
--- a/src/components/Charts/LineChart.tsx
+++ b/src/components/Charts/LineChart.tsx
@@ -1,6 +1,7 @@
 'use client';
 
 import Highcharts from 'highcharts';
+import highchartsAccessibility from 'highcharts/modules/accessibility';
 import { useTheme } from 'next-themes';
 import { useEffect, useMemo, useState } from 'react';
 
@@ -10,6 +11,10 @@ import { ChartType } from '@/domain/enums/ChartType.ts';
 import LineChartProps from '@/domain/props/LineChartProps';
 import LineChartOperations from '@/operations/charts/LineChartOperations';
 
+if (typeof Highcharts === 'object') {
+  highchartsAccessibility(Highcharts);
+}
+
 /**
  * The LineChart component is a box that primarily renders a title, description text, and a line chart.
  * It should be used to plot categorical data. For continues data please use the `CategoricalChart` component.
diff --git a/src/components/HungerAlert/HungerAlert.tsx b/src/components/HungerAlert/HungerAlert.tsx
index 15fe6b02..586eda6d 100644
--- a/src/components/HungerAlert/HungerAlert.tsx
+++ b/src/components/HungerAlert/HungerAlert.tsx
@@ -56,6 +56,7 @@ export default function HungerAlert({ countryFcsData, countryMapData }: HungerAl
             columns={HungerAlertOperations.getHungerAlertModalColumns()}
             data={displayedRows}
             className="mb-3 min-h-[26rem]"
+            ariaLabel="Number of countries with high levels of hunger"
           />
           <Pagination isCompact showControls page={page} total={totalPages} onChange={(newPage) => setPage(newPage)} />
         </div>
diff --git a/src/components/Legend/LegendContainer.tsx b/src/components/Legend/LegendContainer.tsx
index 3348ba7d..211e7fb9 100644
--- a/src/components/Legend/LegendContainer.tsx
+++ b/src/components/Legend/LegendContainer.tsx
@@ -42,6 +42,7 @@ export default function LegendContainer({ items, loading = false }: LegendContai
         <Tooltip text={items.length > 1 ? 'Legends Information' : 'Legend Information'}>
           <Button
             onClick={() => setInfoPopup(true)}
+            aria-label="Map legend"
             className="
         relative flex items-center justify-center min-w-10 h-10 px-1 rounded-full bg-content1 shadow-md"
           >
diff --git a/src/components/Map/Alerts/CountryAlerts/PulsingAlertMarker.tsx b/src/components/Map/Alerts/CountryAlerts/PulsingAlertMarker.tsx
index b30f616d..d13c9c20 100644
--- a/src/components/Map/Alerts/CountryAlerts/PulsingAlertMarker.tsx
+++ b/src/components/Map/Alerts/CountryAlerts/PulsingAlertMarker.tsx
@@ -18,5 +18,5 @@ export function PulsingAlertMarker({ countryAlert }: { countryAlert: CountryAler
       }),
     [countryAlert]
   );
-  return <Marker interactive={false} position={countryAlert.position} icon={icon} />;
+  return <Marker title="Country alert" interactive={false} position={countryAlert.position} icon={icon} />;
 }
diff --git a/src/components/Map/Alerts/HazardMarker.tsx b/src/components/Map/Alerts/HazardMarker.tsx
index 4bc27241..a1894090 100644
--- a/src/components/Map/Alerts/HazardMarker.tsx
+++ b/src/components/Map/Alerts/HazardMarker.tsx
@@ -19,7 +19,7 @@ export function HazardMarker({ hazard }: { hazard: Hazard }) {
     [hazard]
   );
   return (
-    <Marker position={[hazard.latitude, hazard.longitude]} icon={icon}>
+    <Marker position={[hazard.latitude, hazard.longitude]} icon={icon} title="Hazard alert">
       <Popup className="hazardMarkerPopup">
         <div className="flex gap-4 items-center">
           <img
diff --git a/src/components/Map/Map.tsx b/src/components/Map/Map.tsx
index 85f069c1..2ea3d750 100644
--- a/src/components/Map/Map.tsx
+++ b/src/components/Map/Map.tsx
@@ -135,7 +135,7 @@ export default function Map({ countries, disputedAreas, fcsData, alertData }: Ma
       style={{ height: '100%', width: '100%', zIndex: 1 }}
     >
       <AlertContainer countries={countries} alertData={alertData} />
-      <ZoomControl threshold={5} callback={onZoomThresholdReached} />
+      <ZoomControl threshold={SELECTED_COUNTRY_ZOOM_THRESHOLD} callback={onZoomThresholdReached} />
       <BackToGlobalButton />
 
       <Pane name="ocean" style={{ zIndex: 0 }}>
@@ -221,9 +221,6 @@ export default function Map({ countries, disputedAreas, fcsData, alertData }: Ma
           style={disputedAreaStyle}
         />
       </Pane>
-
-      <ZoomControl threshold={SELECTED_COUNTRY_ZOOM_THRESHOLD} callback={onZoomThresholdReached} />
-      <BackToGlobalButton />
     </MapContainer>
   );
 }
diff --git a/src/components/Sidebar/Sidebar.tsx b/src/components/Sidebar/Sidebar.tsx
index fb7074ae..48505849 100644
--- a/src/components/Sidebar/Sidebar.tsx
+++ b/src/components/Sidebar/Sidebar.tsx
@@ -87,6 +87,7 @@ export function Sidebar({ countryMapData, fcsData }: SidebarProps) {
             classNames={{ popoverContent: 'bg-clickableSecondary' }}
             variant="faded"
             color="primary"
+            aria-label="Search a country"
             selectedKey={selectedCountryId !== null ? selectedCountryId.toString() : ''}
           >
             {countryMapData.features
diff --git a/src/middleware.ts b/src/middleware.ts
new file mode 100644
index 00000000..b73096d2
--- /dev/null
+++ b/src/middleware.ts
@@ -0,0 +1,52 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+export function middleware(request: NextRequest) {
+  const nonce = Buffer.from(crypto.randomUUID()).toString('base64');
+  const cspHeader = `
+    default-src 'self';
+    script-src 'self' 'nonce-${nonce}' 'sha256-q1+DaXsZUnEJs3jpN9ZoWp6ypK1xBwXiRxG+C31xOUA=' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' ${process.env.NEXT_PUBLIC_API_URL?.slice(0, -3)};
+    style-src 'self' 'unsafe-inline';
+    connect-src 'self' https://region1.google-analytics.com https://cdn.hungermapdata.org ${process.env.NEXT_PUBLIC_API_URL?.slice(0, -3)} ${process.env.NEXT_PUBLIC_V3_API_URL?.slice(0, -3)} ${process.env.NEXT_PUBLIC_CHATBOT_API_URL ?? ''};
+    img-src 'self' blob: data: https://static.hungermapdata.org https://dev.api.earthobservation.vam.wfp.org;
+    font-src 'self';
+    object-src 'none';
+    base-uri 'self';
+    form-action 'self';
+    frame-ancestors 'none';
+    upgrade-insecure-requests;
+`;
+  // Replace newline characters and spaces
+  const contentSecurityPolicyHeaderValue = cspHeader.replace(/\s{2,}/g, ' ').trim();
+
+  const requestHeaders = new Headers(request.headers);
+  requestHeaders.set('x-nonce', nonce);
+
+  requestHeaders.set('Content-Security-Policy', contentSecurityPolicyHeaderValue);
+
+  const response = NextResponse.next({
+    request: {
+      headers: requestHeaders,
+    },
+  });
+  response.headers.set('Content-Security-Policy', contentSecurityPolicyHeaderValue);
+  return response;
+}
+
+export const config = {
+  matcher: [
+    /*
+     * Match all request paths except for the ones starting with:
+     * - api (API routes)
+     * - _next/static (static files)
+     * - _next/image (image optimization files)
+     * - favicon.ico (favicon file)
+     */
+    {
+      source: '/((?!api|_next/static|_next/image|favicon.ico).*)',
+      missing: [
+        { type: 'header', key: 'next-router-prefetch' },
+        { type: 'header', key: 'purpose', value: 'prefetch' },
+      ],
+    },
+  ],
+};
