diff --git a/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java b/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java
index e137d0a..9268985 100644
--- a/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java
+++ b/src/main/java/Mua/Mua_backend/global/config/SecurityConfig.java
@@ -34,7 +34,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                 .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers("/", "/login/**", "/oauth2/**", "/login/oauth2/**",
-                                "/v3/api-docs/**", "/swagger-ui/**", "/swagger-ui.html").permitAll()
+                                "/v3/api-docs/**", "/swagger-ui/**", "/swagger-ui.html", "/h2-console/**").permitAll()
                         .requestMatchers("/admin/**").hasRole("ADMIN")
                         .anyRequest().authenticated()
                 )
@@ -42,6 +42,9 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                 .exceptionHandling(exception -> exception
                         .authenticationEntryPoint((req, res, ex) -> res.sendError(HttpServletResponse.SC_UNAUTHORIZED))
                         .accessDeniedHandler((req, res, ex) -> res.sendError(HttpServletResponse.SC_FORBIDDEN))
+                )
+                .headers(headers ->
+                        headers.frameOptions(frame -> frame.disable())
                 );
 
         return http.build();