diff --git a/services/web/app/src/router.js b/services/web/app/src/router.js
index e94946542f..41020d748d 100644
--- a/services/web/app/src/router.js
+++ b/services/web/app/src/router.js
@@ -543,6 +543,11 @@ function initialize(webRouter, privateApiRouter, publicApiRouter) {
   )
   webRouter.get(
     '/project/:project_id/version/:version/zip',
+    RateLimiterMiddleware.rateLimit({
+      endpointName: 'download-project-revision',
+      maxRequests: 30,
+      timeInterval: 60 * 60
+    }),
     AuthorizationMiddleware.ensureUserCanReadProject,
     HistoryController.downloadZipOfVersion
   )