diff --git a/lib/NoPermissionResponse.php b/lib/NoPermissionResponse.php
index 0678be0..5e4e102 100644
--- a/lib/NoPermissionResponse.php
+++ b/lib/NoPermissionResponse.php
@@ -11,7 +11,7 @@ class NoPermissionResponse extends Response {
 		parent::__construct();
 
 		$this->setContentSecurityPolicy(new ContentSecurityPolicy());
-		$this->setStatus(404);
+		$this->setStatus(403);
 	}
 
 	public function render() {