diff --git a/Pipfile b/Pipfile
index ccf5b8d..7f7b9c9 100644
--- a/Pipfile
+++ b/Pipfile
@@ -47,5 +47,6 @@ django-redis = "*"
 gevent = "*"
 django-extensions = "*"
 python-magic = "*"
+pyup-django = "*"
 
 [dev-packages]
diff --git a/Pipfile.lock b/Pipfile.lock
index cc078ac..14e0ad2 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "0347a58bdf44bc71022adb2ced6ae592ff1f7fd44520caee906f3e8e0e3730e4"
+            "sha256": "2a1ec88070052ed819c2a733833b4cd30c196249fcd888e50a6a7ca6c8f76034"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -474,6 +474,13 @@
             ],
             "version": "==0.5.6"
         },
+        "packaging": {
+            "hashes": [
+                "sha256:e9215d2d2535d3ae866c3d6efc77d5b24a0192cce0ff20e42896cc0664f889c0",
+                "sha256:f019b770dd64e585a99714f1fd5e01c7a8f11b45635aa953fd41c689a657375b"
+            ],
+            "version": "==17.1"
+        },
         "pillow": {
             "hashes": [
                 "sha256:00633bc2ec40313f4daf351855e506d296ec3c553f21b66720d0f1225ca84c6f",
@@ -594,6 +601,18 @@
             ],
             "version": "==2.18"
         },
+        "pyparsing": {
+            "hashes": [
+                "sha256:0832bcf47acd283788593e7a0f542407bd9550a55a8a8435214a1960e04bcb04",
+                "sha256:281683241b25fe9b80ec9d66017485f6deff1af5cde372469134b56ca8447a07",
+                "sha256:8f1e18d3fd36c6795bb7e02a39fd05c611ffc2596c1e0d995d34d67630426c18",
+                "sha256:9e8143a3e15c13713506886badd96ca4b579a87fbdf49e550dbfc057d6cb218e",
+                "sha256:b8b3117ed9bdf45e14dcc89345ce638ec7e0e29b2b579fa1ecf32ce45ebac8a5",
+                "sha256:e4d45427c6e20a59bf4f88c639dcc03ce30d193112047f94012102f235853a58",
+                "sha256:fee43f17a9c4087e7ed1605bd6df994c6173c1e977d7ade7b651292fab2bd010"
+            ],
+            "version": "==2.2.0"
+        },
         "pytest": {
             "hashes": [
                 "sha256:54713b26c97538db6ff0703a12b19aeaeb60b5e599de542e7fca0ec83b9038e8",
@@ -654,6 +673,14 @@
             ],
             "version": "==2018.4"
         },
+        "pyup-django": {
+            "hashes": [
+                "sha256:f02242b4c7a8926bf9118054429dcaf84e5708a050548abcd3b2b9de4a7570b9",
+                "sha256:fe84cef39c41d5feb24e307d6c8a55454db50df4c6955fa6a890a42b6e58650e"
+            ],
+            "index": "pypi",
+            "version": "==0.4.0"
+        },
         "pyyaml": {
             "hashes": [
                 "sha256:0c507b7f74b3d2dd4d1322ec8a94794927305ab4cebbe89cc47fe5e81541e6e8",
diff --git a/lemoncurry/settings/base.py b/lemoncurry/settings/base.py
index 73c11e3..639186e 100644
--- a/lemoncurry/settings/base.py
+++ b/lemoncurry/settings/base.py
@@ -63,6 +63,7 @@ SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
 
 INSTALLED_APPS = [
     'lemoncurry',
+    'pyup_django',
 
     'django.contrib.admin',
     'django.contrib.admindocs',