diff --git a/OpenCand.API/Config/RateLimitingConfig.cs b/OpenCand.API/Config/RateLimitingConfig.cs
index 732db8d..9bd21b4 100644
--- a/OpenCand.API/Config/RateLimitingConfig.cs
+++ b/OpenCand.API/Config/RateLimitingConfig.cs
@@ -27,13 +27,12 @@ namespace OpenCand.API.Config
                 // Default policy: 200 requests per minute with burst of 100
                 options.AddFixedWindowLimiter(policyName: DefaultPolicy, options =>
                 {
-                    options.PermitLimit = 200;
+                    options.PermitLimit = 400;
                     options.Window = TimeSpan.FromMinutes(1);
                     options.QueueProcessingOrder = QueueProcessingOrder.OldestFirst;
                     options.QueueLimit = 100; // Burst capacity
                 });
 
-                // Candidato Search policy: 300 requests per minute with burst of 200
                 options.AddFixedWindowLimiter(policyName: CandidatoSearchPolicy, options =>
                 {
                     options.PermitLimit = 300;
@@ -42,22 +41,12 @@ namespace OpenCand.API.Config
                     options.QueueLimit = 200; // Burst capacity
                 });
 
-                // CPF Reveal policy: 15 requests per minute without burst
                 options.AddFixedWindowLimiter(policyName: CpfRevealPolicy, options =>
                 {
-                    options.PermitLimit = 15;
+                    options.PermitLimit = 20;
                     options.Window = TimeSpan.FromMinutes(1);
                     options.QueueProcessingOrder = QueueProcessingOrder.OldestFirst;
-                    options.QueueLimit = 0; // No burst
-                });
-
-                // CPF Reveal policy: 25 requests per minute with 10 burst
-                options.AddFixedWindowLimiter(policyName: EstatisticaPolicy, options =>
-                {
-                    options.PermitLimit = 25;
-                    options.Window = TimeSpan.FromMinutes(1);
-                    options.QueueProcessingOrder = QueueProcessingOrder.OldestFirst;
-                    options.QueueLimit = 10; // No burst
+                    options.QueueLimit = 5; // Burst capacity
                 });
 
                 options.OnRejected = async (context, token) =>
@@ -67,7 +56,7 @@ namespace OpenCand.API.Config
                     var retryAfter = GetRetryAfter(context);
                     if (retryAfter.HasValue)
                     {
-                        context.HttpContext.Response.Headers.Add("Retry-After", retryAfter.Value.ToString());
+                        context.HttpContext.Response.Headers.Append("Retry-After", retryAfter.Value.ToString());
                     }
 
                     await context.HttpContext.Response.WriteAsync(
diff --git a/OpenCand.API/Controllers/BaseController.cs b/OpenCand.API/Controllers/BaseController.cs
index e4da2a3..b100df3 100644
--- a/OpenCand.API/Controllers/BaseController.cs
+++ b/OpenCand.API/Controllers/BaseController.cs
@@ -1,10 +1,13 @@
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.RateLimiting;
+using OpenCand.API.Config;
 
 namespace OpenCand.API.Controllers
 {
     [ApiController]
     [Route("v1/[controller]")]
     [Produces("application/json")]
+    [EnableRateLimiting(RateLimitingConfig.DefaultPolicy)]
     public class BaseController : Controller
     {
 
diff --git a/OpenCand.API/Controllers/CandidatoController.cs b/OpenCand.API/Controllers/CandidatoController.cs
index d6e1b5c..00b3ef0 100644
--- a/OpenCand.API/Controllers/CandidatoController.cs
+++ b/OpenCand.API/Controllers/CandidatoController.cs
@@ -1,6 +1,5 @@
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.RateLimiting;
-using Microsoft.VisualBasic;
 using OpenCand.API.Config;
 using OpenCand.API.Model;
 using OpenCand.API.Services;
@@ -9,7 +8,6 @@ using OpenCand.Core.Utils;
 
 namespace OpenCand.API.Controllers
 {
-    [EnableRateLimiting(RateLimitingConfig.DefaultPolicy)]
     public class CandidatoController : BaseController
     {
         private readonly OpenCandService openCandService;
diff --git a/OpenCand.API/Controllers/EstatisticaController.cs b/OpenCand.API/Controllers/EstatisticaController.cs
index a14166e..3c431b4 100644
--- a/OpenCand.API/Controllers/EstatisticaController.cs
+++ b/OpenCand.API/Controllers/EstatisticaController.cs
@@ -1,12 +1,10 @@
 using Microsoft.AspNetCore.Mvc;
-using Microsoft.AspNetCore.RateLimiting;
-using OpenCand.API.Config;
 using OpenCand.API.Model;
 using OpenCand.API.Services;
+using static OpenCand.API.Model.GetValueSumRequest;
 
 namespace OpenCand.API.Controllers
 {
-    [EnableRateLimiting(RateLimitingConfig.EstatisticaPolicy)]
     public class EstatisticaController : BaseController
     {
         private readonly EstatisticaService estatisticaService;