--- title: Enable the hardened java security manager description: The glide.security.manager property contains the Java classname of the current Java security manager. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-enable-the-hardened-java-security-manager.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Validation, sanitization, and encoding, Hardening settings, Platform Security] --- # Enable the hardened java security manager The **glide.security.manager** property contains the Java classname of the current Java security manager. The **glide.security.manager** system property contains Java classname of current Java security manager. ServiceNow has standardized on the Contextual Security Manager. If **glide.security.manager** is not set to the recommended value of `com.glide.sys.security.ContextualSecurityManager`, then the instance may be using an obsolete Java security manager, which is missing expected hardening policies. Ensure the property **glide.security.manager** is set to `com.glide.sys.security.ContextualSecurityManager`. **Warning:** This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **glide.security.manager** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | string |
| Recommended value | com.glide.sys.security.ContextualSecurityManager |
| Default value | <none> |
| Fallback valye | com.glide.sys.security.ContextualSecurityManager |
| Category | [Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md) |
| Security risk | - Severity score: 7.2 - CVSS score: High - Security risk details:Without this hardening, it may be possible for a malicious actor with script execution access to achieve remote code execution on the instance. |
| Dependencies and prerequisites | None |