diff --git a/nginx.conf b/nginx.conf
index 2f7415a..33ea2b4 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -3,12 +3,21 @@ server {
     root /usr/share/nginx/html;
     index index.html;
 
+    # 보안 헤더
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "DENY" always;
+
     # index.html은 캐싱 금지 (배포 후 즉시 반영)
     location = /index.html {
         try_files $uri =404;
         add_header Cache-Control "no-store, no-cache, must-revalidate";
     }
 
+    # Vite 해시 에셋 장기 캐싱
+    location /assets/ {
+        add_header Cache-Control "public, max-age=31536000, immutable";
+    }
+
     # SPA fallback (react-router 사용 시 필요)
     location / {
         try_files $uri $uri/ /index.html;
diff --git a/src/components/AnnouncementBoard.jsx b/src/components/AnnouncementBoard.jsx
index 214a75a..0e2039c 100644
--- a/src/components/AnnouncementBoard.jsx
+++ b/src/components/AnnouncementBoard.jsx
@@ -29,6 +29,7 @@ export default function AnnouncementBoard() {
             <button
               className="announcement-row"
               onClick={() => setExpanded(expanded === item.id ? null : item.id)}
+              aria-expanded={expanded === item.id}
             >
               <span className="announcement-title">{item.title}</span>
               <span className="announcement-date">{item.createdAt?.slice(0, 10)}</span>
diff --git a/src/components/DownloadSection.jsx b/src/components/DownloadSection.jsx
index 7af6f23..926dd70 100644
--- a/src/components/DownloadSection.jsx
+++ b/src/components/DownloadSection.jsx
@@ -22,11 +22,7 @@ export default function DownloadSection() {
       .catch(() => { setLoadError(true); setReady(true); });
   };
 
-  useEffect(() => {
-    getDownloadInfo()
-      .then((data) => { setInfo(data); setReady(true); })
-      .catch(() => { setLoadError(true); setReady(true); });
-  }, []);
+  useEffect(() => { loadInfo(); }, []);
 
   const handlePlay = async () => {
     if (!user) {
diff --git a/src/components/admin/AnnouncementAdmin.jsx b/src/components/admin/AnnouncementAdmin.jsx
index 17f8e4e..f7c5acd 100644
--- a/src/components/admin/AnnouncementAdmin.jsx
+++ b/src/components/admin/AnnouncementAdmin.jsx
@@ -70,6 +70,7 @@ export default function AnnouncementAdmin() {
           placeholder="제목"
           value={form.title}
           onChange={(e) => setForm({ ...form, title: e.target.value })}
+          maxLength={200}
         />
         <textarea
           className="admin-textarea"
@@ -77,6 +78,7 @@ export default function AnnouncementAdmin() {
           rows={4}
           value={form.content}
           onChange={(e) => setForm({ ...form, content: e.target.value })}
+          maxLength={10000}
         />
         {error && <p className="admin-error">{error}</p>}
         <div className="admin-form-actions">
diff --git a/src/pages/LoginPage.jsx b/src/pages/LoginPage.jsx
index 2788943..8a7598a 100644
--- a/src/pages/LoginPage.jsx
+++ b/src/pages/LoginPage.jsx
@@ -50,6 +50,7 @@ export default function LoginPage() {
               onChange={(e) => setUsername(e.target.value)}
               placeholder="아이디를 입력하세요"
               autoComplete="username"
+              maxLength={50}
             />
           </div>
 
@@ -62,6 +63,7 @@ export default function LoginPage() {
               onChange={(e) => setPassword(e.target.value)}
               placeholder="비밀번호를 입력하세요"
               autoComplete="current-password"
+              maxLength={100}
             />
           </div>
 
diff --git a/src/pages/RegisterPage.jsx b/src/pages/RegisterPage.jsx
index 00771bc..b9a320c 100644
--- a/src/pages/RegisterPage.jsx
+++ b/src/pages/RegisterPage.jsx
@@ -73,6 +73,7 @@ export default function RegisterPage() {
               onChange={(e) => setUsername(e.target.value)}
               placeholder="아이디를 입력하세요"
               autoComplete="username"
+              maxLength={50}
             />
           </div>
 
@@ -85,6 +86,7 @@ export default function RegisterPage() {
               onChange={(e) => setPassword(e.target.value)}
               placeholder="6자 이상 입력하세요"
               autoComplete="new-password"
+              maxLength={100}
             />
           </div>
 
@@ -103,6 +105,7 @@ export default function RegisterPage() {
               onChange={(e) => setConfirm(e.target.value)}
               placeholder="비밀번호를 다시 입력하세요"
               autoComplete="new-password"
+              maxLength={100}
             />
           </div>