--- title: Enable High Security Plugin description: When you activate the High Security plugin, it creates or updates hundreds of different configurations to control the level of security on your instance. These configurations mitigate many of the top OWASP attacks by enabling strict access control, input validation, and output encoding. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-high-security-plugin.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Access control, Hardening settings, Platform Security] --- # Enable High Security Plugin When you activate the High Security plugin, it creates or updates hundreds of different configurations to control the level of security on your instance. These configurations mitigate many of the top OWASP attacks by enabling strict access control, input validation, and output encoding. The High Security plugin, activated by default, creates more than 900 different configurations to control the level of security on your instance. These configurations enable strict access control, input validation, and output encoding. It separates user functionality from access control management functionality through requiring administrators to explicitly elevate into a **security\_admin** role before making access control changes. Ensure that the plugin **com.glide.high\_security** is activated. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **com.glide.high\_security** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Plugin |
| Recommended value | The plugin **com.glide.high\_security** is active |
| Default value | |
| Fallback value | |
| Category | |
| Security risk | - Severity score: 9.8 - CVSS rating: Critical - Security risk details: Critical parts of the instance may be exposed to unauthorized access or manipulation. |
| Functional impact | None |
| Dependencies and prerequisites | None |