diff --git a/src/main/java/com/hotsix/server/global/config/SecurityConfig.java b/src/main/java/com/hotsix/server/global/config/SecurityConfig.java
index 858e96e..283e6b9 100644
--- a/src/main/java/com/hotsix/server/global/config/SecurityConfig.java
+++ b/src/main/java/com/hotsix/server/global/config/SecurityConfig.java
@@ -26,6 +26,7 @@
 import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
 
 import java.util.Arrays;
+import java.util.List;
 
 @Configuration
 @RequiredArgsConstructor
@@ -104,7 +105,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http,
     @Bean
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration configuration = new CorsConfiguration();
-        configuration.setAllowedOriginPatterns(Arrays.asList("*"));
+        configuration.setAllowedOrigins(List.of("https://pickplezone.vercel.app"));
         configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"));
         configuration.setAllowedHeaders(Arrays.asList("*"));
         configuration.setAllowCredentials(true);