<section>
 <h1 class="contains-headerlink leafygreen-ui-41fr9s" weight="medium">
  Security
  <a class="headerlink leafygreen-ui-1kepx47" href="#security" title="Permalink to this heading">
   <svg aria-label="Link Icon" class="leafygreen-ui-a30zj9" fill="none" height="12" role="img" viewbox="0 0 16 16" width="12" xmlns="http://www.w3.org/2000/svg">
    <path d="M6.039 9.953a3.596 3.596 0 0 1-.327-.38l1.45-1.445a1.553 1.553 0 0 0 2.496.423l2.885-2.87a1.57 1.57 0 0 0 .01-2.213 1.553 1.553 0 0 0-2.203-.01l-.379.377A.995.995 0 0 1 8.56 3.83a1.005 1.005 0 0 1 .006-1.418l.38-.377a3.542 3.542 0 0 1 5.024.023 3.58 3.58 0 0 1-.022 5.047l-2.884 2.871a3.542 3.542 0 0 1-5.025-.022Z" fill="currentColor">
    </path>
    <path d="M9.961 6.047c.12.12.228.248.327.38l-1.45 1.445a1.553 1.553 0 0 0-2.496-.423l-2.885 2.87a1.57 1.57 0 0 0-.01 2.213 1.553 1.553 0 0 0 2.203.01l.379-.377a.995.995 0 0 1 1.411.006 1.005 1.005 0 0 1-.006 1.418l-.38.377a3.542 3.542 0 0 1-5.024-.023 3.58 3.58 0 0 1 .022-5.047l2.884-2.871a3.542 3.542 0 0 1 5.025.022Z" fill="currentColor">
    </path>
   </svg>
   <div class="css-1btu0w3 evvkmar0" id="security">
   </div>
  </a>
 </h1>
 <div class="leafygreen-ui-a5yxub">
  <p class="css-1cmx2d4 ef7gu8j0">
   On this page
  </p>
  <ul class="css-1qb0mst ef7gu8j1">
   <li class="leafygreen-ui-1e7a0ei">
    <a class="lg-ui-0001 leafygreen-ui-e98ikf" href="#secure-your-mongodb-atlas-deployments" target="_self">
     <span>
      Secure Your MongoDB Atlas Deployments
     </span>
    </a>
   </li>
   <li class="leafygreen-ui-1jqtqlb">
    <a class="lg-ui-0001 leafygreen-ui-cpmeq5" href="#report-suspected-security-bugs" target="_self">
     <span>
      Report Suspected Security Bugs
     </span>
    </a>
   </li>
  </ul>
 </div>
 <p class="leafygreen-ui-1kp3ins">
  MongoDB provides various features, such as authentication, access
control, encryption, to secure your MongoDB deployments. Some key
security features include:
 </p>
 <div class="leafygreen-ui-skkc39" tabindex="0">
  <table class="leafygreen-ui-hr8lsv">
   <colgroup>
    <col style="width:20%"/>
    <col style="width:20%"/>
    <col style="width:20%"/>
    <col style="width:20%"/>
    <col style="width:20%"/>
   </colgroup>
   <thead class="leafygreen-ui-a9ho40">
    <tr data-testid="leafygreen-ui-header-row">
     <th class="leafygreen-ui-1trtg6r" role="columnheader" scope="col">
      <div class="leafygreen-ui-ui0te9">
       <div>
        Authentication
       </div>
      </div>
     </th>
     <th class="leafygreen-ui-13uteka" role="columnheader" scope="col">
      <div class="leafygreen-ui-ui0te9">
       <div>
        Authorization
       </div>
      </div>
     </th>
     <th class="leafygreen-ui-13uteka" role="columnheader" scope="col">
      <div class="leafygreen-ui-ui0te9">
       <div>
        TLS/SSL
       </div>
      </div>
     </th>
     <th class="leafygreen-ui-13uteka" role="columnheader" scope="col">
      <div class="leafygreen-ui-ui0te9">
       <div>
        Enterprise Only
       </div>
      </div>
     </th>
     <th class="leafygreen-ui-13uteka" role="columnheader" scope="col">
      <div class="leafygreen-ui-ui0te9">
       <div>
        Encryption
       </div>
      </div>
     </th>
    </tr>
   </thead>
   <tbody>
    <tr class="">
     <td class="leafygreen-ui-1drjk7h">
      <div class="leafygreen-ui-1n4j8xf">
       <div>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/authentication/">
          Authentication on Self-Managed Deployments
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/security-scram/">
          SCRAM
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/security-x.509/">
          x.509
         </a>
        </p>
       </div>
      </div>
     </td>
     <td class="leafygreen-ui-1drjk7h">
      <div class="leafygreen-ui-1n4j8xf">
       <div>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/authorization/">
          Role-Based Access Control in Self-Managed Deployments
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/enable-authentication/">
          Enable Access Control on Self-Managed Deployments
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/manage-users-and-roles/">
          Manage Users and Roles on Self-Managed Deployments
         </a>
        </p>
       </div>
      </div>
     </td>
     <td class="leafygreen-ui-1drjk7h">
      <div class="leafygreen-ui-1n4j8xf">
       <div>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/security-transport-encryption/">
          TLS/SSL (Transport Encryption)
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-ssl/">
          Configure
          <code class="leafygreen-ui-1l06pbn">
           mongod
          </code>
          and
          <code class="leafygreen-ui-1l06pbn">
           mongos
          </code>
          for TLS/SSL
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-ssl-clients/">
          TLS/SSL Configuration for Clients
         </a>
        </p>
       </div>
      </div>
     </td>
     <td class="leafygreen-ui-1drjk7h">
      <div class="leafygreen-ui-1n4j8xf">
       <div>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/kerberos/">
          Kerberos Authentication on Self-Managed Deployments
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/security-ldap/">
          Self-Managed LDAP Proxy Authentication
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/security-oidc/">
          Self-Managed OpenID Connect Authentication
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/auditing/">
          Auditing Self-Managed Deployments
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/reference/log-messages/#std-label-log-message-log-redaction">
          Log Redaction
         </a>
        </p>
       </div>
      </div>
     </td>
     <td class="leafygreen-ui-1drjk7h">
      <div class="leafygreen-ui-1n4j8xf">
       <div>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/queryable-encryption/#std-label-qe-manual-feature-qe">
          Queryable Encryption
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/csfle/#std-label-manual-csfle-feature">
          Client-Side Field Level Encryption
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/security-encryption-at-rest/#std-label-security-encryption-at-rest">
          Encryption at Rest
         </a>
        </p>
        <p class="leafygreen-ui-1kp3ins">
         <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/security-transport-encryption/#std-label-transport-encryption">
          TLS/SSL (Transport Encryption)
         </a>
        </p>
       </div>
      </div>
     </td>
    </tr>
   </tbody>
  </table>
 </div>
 <section>
  <h2 class="contains-headerlink leafygreen-ui-19f71ei" weight="medium">
   Secure Your MongoDB Atlas Deployments
   <a class="headerlink leafygreen-ui-1kepx47" href="#secure-your-mongodb-atlas-deployments" title="Permalink to this heading">
    <svg aria-label="Link Icon" class="leafygreen-ui-a30zj9" fill="none" height="12" role="img" viewbox="0 0 16 16" width="12" xmlns="http://www.w3.org/2000/svg">
     <path d="M6.039 9.953a3.596 3.596 0 0 1-.327-.38l1.45-1.445a1.553 1.553 0 0 0 2.496.423l2.885-2.87a1.57 1.57 0 0 0 .01-2.213 1.553 1.553 0 0 0-2.203-.01l-.379.377A.995.995 0 0 1 8.56 3.83a1.005 1.005 0 0 1 .006-1.418l.38-.377a3.542 3.542 0 0 1 5.024.023 3.58 3.58 0 0 1-.022 5.047l-2.884 2.871a3.542 3.542 0 0 1-5.025-.022Z" fill="currentColor">
     </path>
     <path d="M9.961 6.047c.12.12.228.248.327.38l-1.45 1.445a1.553 1.553 0 0 0-2.496-.423l-2.885 2.87a1.57 1.57 0 0 0-.01 2.213 1.553 1.553 0 0 0 2.203.01l.379-.377a.995.995 0 0 1 1.411.006 1.005 1.005 0 0 1-.006 1.418l-.38.377a3.542 3.542 0 0 1-5.024-.023 3.58 3.58 0 0 1 .022-5.047l2.884-2.871a3.542 3.542 0 0 1 5.025.022Z" fill="currentColor">
     </path>
    </svg>
    <div class="css-1btu0w3 evvkmar0" id="secure-your-mongodb-atlas-deployments">
    </div>
   </a>
  </h2>
  <p class="leafygreen-ui-1kp3ins">
   MongoDB Atlas, the fully managed service for MongoDB deployments
in the cloud, comes preconfigured with secure default settings.
Atlas also provides the following key security features:
  </p>
  <div class="leafygreen-ui-skkc39" tabindex="0">
   <table class="leafygreen-ui-hr8lsv">
    <colgroup>
     <col style="width:30%"/>
     <col style="width:70%"/>
    </colgroup>
    <thead class="leafygreen-ui-a9ho40">
     <tr data-testid="leafygreen-ui-header-row">
      <th class="leafygreen-ui-1trtg6r" role="columnheader" scope="col">
       <div class="leafygreen-ui-ui0te9">
        <div>
         Security Feature
        </div>
       </div>
      </th>
      <th class="leafygreen-ui-13uteka" role="columnheader" scope="col">
       <div class="leafygreen-ui-ui0te9">
        <div>
         Description
        </div>
       </div>
      </th>
     </tr>
    </thead>
    <tbody>
     <tr class="">
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         Authentication and Authorization
        </div>
       </div>
      </td>
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         In Atlas, you configure database users to access your
deployments. Atlas provides various ways to perform
user authentication and authorization,
including LDAP, OIDC, and X.509. To learn more, see
         <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas/security/config-db-auth/" target="_self">
          <span>
           Configure Authentication and Authorization
           <!-- -->
           .
          </span>
         </a>
        </div>
       </div>
      </td>
     </tr>
     <tr class="">
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         Encryption
        </div>
       </div>
      </td>
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         By default, Atlas encrypts all data stored in your
deployments and uses TLS/SSL to encrypt the connections to your
databases. To add another layer of security, you can configure
         <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas/security-kms-encryption/" target="_self">
          <span>
           Encryption at Rest using Customer Key Management
           <!-- -->
           .
          </span>
         </a>
        </div>
       </div>
      </td>
     </tr>
     <tr class="">
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         IP Access List
        </div>
       </div>
      </td>
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         Atlas allows connections only from addresses specified in
the IP access list. To learn how to manage client connections
in Atlas, see
         <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas/security/ip-access-list/" target="_self">
          <span>
           Configure IP Access List Entries
           <!-- -->
           .
          </span>
         </a>
        </div>
       </div>
      </td>
     </tr>
     <tr class="">
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         Cloud Provider Support
        </div>
       </div>
      </td>
      <td class="leafygreen-ui-1drjk7h">
       <div class="leafygreen-ui-1n4j8xf">
        <div>
         Atlas supports network peering connections and private endpoints
to secure your deployments hosted on AWS, Azure, and Google Cloud.
To learn more, see
         <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas/security-vpc-peering/" target="_self">
          <span>
           Set Up a Network Peering Connection
          </span>
         </a>
         and
         <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas/security-configure-private-endpoints/" target="_self">
          <span>
           Configure Private Endpoints
           <!-- -->
           .
          </span>
         </a>
        </div>
       </div>
      </td>
     </tr>
    </tbody>
   </table>
  </div>
  <p class="leafygreen-ui-1kp3ins">
   For a full list of security features in Atlas, see
   <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas/setup-cluster-security/" target="_self">
    <span>
     Security Features for Clusters
     <!-- -->
     .
    </span>
   </a>
  </p>
 </section>
 <section>
  <h2 class="contains-headerlink leafygreen-ui-19f71ei" weight="medium">
   Report Suspected Security Bugs
   <a class="headerlink leafygreen-ui-1kepx47" href="#report-suspected-security-bugs" title="Permalink to this heading">
    <svg aria-label="Link Icon" class="leafygreen-ui-a30zj9" fill="none" height="12" role="img" viewbox="0 0 16 16" width="12" xmlns="http://www.w3.org/2000/svg">
     <path d="M6.039 9.953a3.596 3.596 0 0 1-.327-.38l1.45-1.445a1.553 1.553 0 0 0 2.496.423l2.885-2.87a1.57 1.57 0 0 0 .01-2.213 1.553 1.553 0 0 0-2.203-.01l-.379.377A.995.995 0 0 1 8.56 3.83a1.005 1.005 0 0 1 .006-1.418l.38-.377a3.542 3.542 0 0 1 5.024.023 3.58 3.58 0 0 1-.022 5.047l-2.884 2.871a3.542 3.542 0 0 1-5.025-.022Z" fill="currentColor">
     </path>
     <path d="M9.961 6.047c.12.12.228.248.327.38l-1.45 1.445a1.553 1.553 0 0 0-2.496-.423l-2.885 2.87a1.57 1.57 0 0 0-.01 2.213 1.553 1.553 0 0 0 2.203.01l.379-.377a.995.995 0 0 1 1.411.006 1.005 1.005 0 0 1-.006 1.418l-.38.377a3.542 3.542 0 0 1-5.024-.023 3.58 3.58 0 0 1 .022-5.047l2.884-2.871a3.542 3.542 0 0 1 5.025.022Z" fill="currentColor">
     </path>
    </svg>
    <div class="css-1btu0w3 evvkmar0" id="report-suspected-security-bugs">
    </div>
   </a>
  </h2>
  <p class="leafygreen-ui-1kp3ins">
   If you suspect you have
   <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/company/contact/mongodb-vulnerability-disclosure-policy" target="_self">
    <span>
     identified a security bug
    </span>
   </a>
   on any MongoDB products, please submit the issue using our
   <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/bug-submission-form" target="_self">
    <span>
     Security Bug Submission Form
    </span>
   </a>
   .
  </p>
 </section>
</section>
