Spring Security
Skip to main content
Learn more about Day 0 access to security patches via Enterprise support.
Why Spring
Overview
Trending
Generative AI
Cloud
Architecture Patterns
Microservices
Reactive
Event Driven
Application Types
Web Applications
Serverless
Batch
Learn
Getting Started
Quickstart
Guides
Academy
Courses
Get Certified
Projects
Overview
Projects
Spring Boot
Spring Framework
Spring Cloud
Spring AI
Spring Data
Spring Integration
Spring Batch
Spring Security
Foundational Projects
Micrometer
Reactor
Development Tools
Spring Tools
Spring Initializr
Resources
Blog
Release Calendar
Version Mappings
Release Highlights
Security Advisories
GitHub Orgs
Spring Projects
Spring Cloud
Community
Overview
Events
Authors
Enterprise
Overview
Long-term Support
Automated Upgrades
Governance and Compliance
Modern App Development
All projects
Micrometer
Micrometer Context Propagation
Micrometer Tracing
Project Reactor
Reactor Core
Reactor Netty
Spring Boot
Spring Framework
Spring Data
Spring Cloud
Spring AI
Spring gRPC
Spring Security
Spring Security Kerberos
Spring Authorization Server
Spring for GraphQL
Spring Session
Spring Integration
Spring HATEOAS
Spring Modulith
Spring REST Docs
Spring Batch
Spring AMQP
Spring CredHub
Spring for Apache Kafka
Spring LDAP
Spring for Apache Pulsar
Spring Shell
Spring Vault
Spring Web Flow
Spring Web Services
Spring Security7.1.0
Overview
Learn
Support
Samples
Spring Security is a powerful and highly customizable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications.
Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spring projects, the real power of Spring Security is found in how easily it can be extended to meet custom requirements
Features
Comprehensive and extensible support for both Authentication and Authorization
Protection against attacks like session fixation, clickjacking, cross site request forgery, etc
Servlet API integration
Optional integration with Spring Web MVC
Much more…
Resources
Getting Help
Getting Spring Security
Getting Started
Getting Started (Servlet)
Getting Started (WebFlux)
Contributing
Quickstart Your Project
Bootstrap your application with Spring Initializr.
Get ahead
VMware offers training and certification to turbo-charge your progress.Learn moreGet support
Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.Learn moreUpcoming events
Check out all the upcoming events in the Spring community.View all
Why Spring
Generative AI
Microservices
Reactive
Event Driven
Cloud
Web Applications
Serverless
Batch
Learn
Quickstart
Guides
Courses
Get Certified
Projects
Resources
Blog
Release Calendar
Version Mappings
Release Highlights
Security Advisories
Community
Events
Authors
Enterprise
Long-term Support
Automated Upgrades
Governance and Compliance
Modern App Development
Thank You
Get the Spring newsletter
Stay connected with the Spring newsletter
Subscribe
Copyright © 2005 - 2026 Broadcom. All Rights Reserved. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
Terms of Use • Privacy • Trademark Guidelines
Apache®, Apache Tomcat®, Apache Kafka®, Apache Cassandra™, and Apache Geode™ are trademarks or registered trademarks of the Apache Software Foundation in the United States and/or other countries. Java™, Java™ SE, Java™ EE, and OpenJDK™ are trademarks of Oracle and/or its affiliates. Kubernetes® is a registered trademark of the Linux Foundation in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the United States and other countries. Windows® and Microsoft® Azure are registered trademarks of Microsoft Corporation. “AWS” and “Amazon Web Services” are trademarks or registered trademarks of Amazon.com Inc. or its affiliates. All other trademarks and copyrights are property of their respective owners and are only mentioned for informative purposes. Other names may be trademarks of their respective owners.