---
title: "Security"
url: "/docs/security/"
kind: "hub"
summary: "Secure the gateway: TLS and mTLS, secret rotation, JWT authentication, authorization with RBAC and Cedar, and CORS."
---

> Arion site index: [/llms.txt](/llms.txt)

# Security

Secure the gateway: TLS and mTLS, secret rotation, JWT authentication, authorization with RBAC and Cedar, and CORS.

Terminate TLS, prove who is calling, and decide what they are allowed to do — with JWT authentication, RBAC and Cedar policies.