diff --git a/services/web/app/coffee/Features/Uploads/UploadsRouter.coffee b/services/web/app/coffee/Features/Uploads/UploadsRouter.coffee
index 16fc5252f7..a6a82122a8 100644
--- a/services/web/app/coffee/Features/Uploads/UploadsRouter.coffee
+++ b/services/web/app/coffee/Features/Uploads/UploadsRouter.coffee
@@ -14,6 +14,11 @@ module.exports =
 	apply: (webRouter, apiRouter) ->
 		webRouter.post '/project/new/upload',
 			AuthenticationController.requireLogin(),
+			RateLimiterMiddlewear.rateLimit({
+				endpointName: "project-upload"
+				maxRequests: 20
+				timeInterval: 60
+			}),
 			upload.single('qqfile'),
 			ProjectUploadController.uploadProject