Fix: security check