diff --git a/default.json b/default.json
index e405f7a..cccebab 100644
--- a/default.json
+++ b/default.json
@@ -2,7 +2,8 @@
   "enabled": true,
   "extends": [
     "config:best-practices",
-    ":pinAllExceptPeerDependencies"
+    ":pinAllExceptPeerDependencies",
+    "github>leanix/.github//renovate-presets/security.json5"
   ],
   "internalChecksFilter": "strict",
   "minimumReleaseAge": "5 days",
diff --git a/renovate-presets/security.json5 b/renovate-presets/security.json5
new file mode 100644
index 0000000..8d343f0
--- /dev/null
+++ b/renovate-presets/security.json5
@@ -0,0 +1,6 @@
+{
+    // Display OSV vulnerability alerts in the dependency dashboard
+    "dependencyDashboardOSVVulnerabilitySummary": "all",
+    // Enable OSV vulnerability alerts for all repositories (experimental feature)
+    "osvVulnerabilityAlerts": true
+}
\ No newline at end of file