# Security

### Overview

Sails and Express provide built-in, easily configurable protection against most known types of web-application-level attacks.

> **Note**: If you believe you have found a security vulnerability in Sails, please refer to our [security policy](https://github.com/balderdashy/sails-docs/blob/master/security/SAILS-SECURITY-POLICY.md) for instructions for reporting it.

<docmeta name="displayName" value="Security">


# Security

### Overview

Sails and Express provide built-in, easily configurable protection against most known types of web-application-level attacks.

> **Note**: If you believe you have found a security vulnerability in Sails, please refer to our [security policy](https://github.com/balderdashy/sails-docs/blob/master/security/SAILS-SECURITY-POLICY.md) for instructions for reporting it.


### Contents

Learn about several different types of attacks that Node.js/Sails helps prevent out of the box, and how to enable and configure security settings in your app:

| **Security topics**                                                                              |
|:-------------------------------------------------------------------------------------------------|
| [CORS](http://sailsjs.com/docs/concepts/security/content-security-policy)                        |
| [DDOS](http://sailsjs.com/docs/concepts/security/ddos)                                           |
| [CSRF](http://sailsjs.com/docs/concepts/security/csrf)                                           |
| [Clickjacking](http://sailsjs.com/docs/concepts/security/clickjacking)                           |
| [P3P](http://sailsjs.com/docs/concepts/security/p3p)                                             |
| [Content Security Policy](http://sailsjs.com/docs/concepts/security/content-security-policy)     |
| [Socket Hijacking](http://sailsjs.com/docs/concepts/security/socket-hijacking)                   |
| [XSS](http://sailsjs.com/docs/concepts/security/xss)                                             |
| [Strict Transport Security](http://sailsjs.com/docs/concepts/security/strict-transport-security) |


<docmeta name="displayName" value="Security">


Add links so you actually know where to go.
Add links so you actually know where to go.
