Enable High Security plugin

reference brazil Updated Sep 10, 2026 1 min read sc-high-security-plugin.md
Raw file servicenow.com

When you activate the High Security plugin, it creates or updates hundreds of different configurations to control the level of security on your instance. These configurations mitigate many of the top OWASP attacks by enabling strict access control, input validation, and output encoding.

The High Security plugin, activated by default, creates more than 900 different configurations to control the level of security on your instance. These configurations enable strict access control, input validation, and output encoding. It separates user functionality from access control management functionality through requiring administrators to explicitly elevate into a security_admin role before making access control changes.

Ensure that the plugin com.glide.high_security is activated.

More information

Attribute

Description

Configuration name

com.glide.high_security

Configuration type

System Properties (/sys_properties_list.do)

Data type

Plugin

Recommended value

The plugin com.glide.high_security is active

Default value

 

Fallback value

 

Category

 

Security risk

  • Severity score: 9.8
  • CVSS rating: Critical
  • Security risk details: Critical parts of the instance may be exposed to unauthorized access or manipulation.

Functional impact

None

Dependencies and prerequisites

None

**Parent Topic:**[Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-access-control.md)
Search documentation
Search document titles and file paths on the brazil branch