---
title: Security
url: https://documentation.cluedin.net/operate/security
content_type: landing
section: Deploy & operate
---

# Security

The security posture of a CluedIn installation, how to restrict access to individual components, and CluedIn's response to publicly disclosed vulnerabilities.

## In this section

- [Security Inventory](https://documentation.cluedin.net/operate/security/security-inventory.md) (reference): This document provides an overview of the tokens, certificates, and secrets used within the CluedIn platform.
- ['Microsoft Defender for Cloud recommendations'](https://documentation.cluedin.net/operate/security/defender-for-cloud-recommendations.md) (how-to): This document covers Microsoft Defender for Cloud advisories that you may face when installing the CluedIn MDM PaaS variant of the product into your environemnt.
- [CluedIn Security — Log4j2 CVE-2021-44228](https://documentation.cluedin.net/operate/security/log4j.md) (reference): On December 9th 2021 a high severity vulnerability was disclosed in the Apache Log4j2 library for all
- [Ingress NGINX vulnerabilities (not impacted)](https://documentation.cluedin.net/operate/security/ingress-nginx-controller.md) (reference): Wiz Research recently disclosed a series of critical unauthenticated Remote Code Execution (RCE) vulnerabilities affecting the Ingress NGINX Controller in Kubernetes (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and...

Up: [Deploy & operate](https://documentation.cluedin.net/operate.md)