diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
index 4f01569..bf8d174 100644
--- a/config/packages/framework.yaml
+++ b/config/packages/framework.yaml
@@ -7,3 +7,7 @@ framework:
     cache:
         app: cache.adapter.filesystem
         default_redis_provider: 'redis://localhost'
+    http_client:
+        default_options:
+            timeout: 10       # connect + wait-for-first-byte cap per request
+            max_duration: 15  # hard cap on total request duration