diff --git a/server.js b/server.js
index 2486fa4..418980c 100644
--- a/server.js
+++ b/server.js
@@ -34,6 +34,10 @@ async function savePost(post) {
 const { protect, challenge } = createExpressMiddleware({
   secret: 'ai-twitter-secret-key-123',
   difficulty: 'medium',
+  rateLimit: {
+    maxAttempts: 1,
+    windowMs: 30000 // 30 seconds
+  }
 });
 
 // --- API Endpoints ---