diff --git a/README.md b/README.md
index 6e0ac84..55fb345 100644
--- a/README.md
+++ b/README.md
@@ -4,6 +4,7 @@ walnut
 An opinionated, constrained, secure application framework with a hard shell - like iOS, but for a home server.
 
 Security Features
+-----------------
 
 * JSON-only APIs
 * JWT (not cookie*) authentication
@@ -23,6 +24,7 @@ such as images which would otherwise require the token to be passed into the img
 They are also scoped such that CSRF attacks are not possible.
 
 Application Features
+--------------------
 
 * JSON-only expressjs APIs
 * Capability-based permissions system for (oauth3-discoverable) packages such as
@@ -38,6 +40,9 @@ Application Features
 * Multi-Tentated Application Management
 * Built-in OAuth2 & OAuth3 support
 
+Install
+-------
+
 ```bash
 curl https://daplie.me/install-scripts | bash