---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enable the hardened java security manager

# Enable the hardened java security manager {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The glide.security.manager property contains the Java classname of the current Java security manager.
The glide.security.manager system property contains Java classname of current Java security manager. ServiceNow has standardized on the Contextual Security Manager. If
glide.security.manager is not set to the recommended value of <kbd class="ph userinput">com.glide.sys.security.ContextualSecurityManager</kbd>, then the instance may be using an obsolete Java security manager, which is
missing expected hardening policies.

Ensure the property glide.security.manager is set to <kbd class="ph userinput">com.glide.sys.security.ContextualSecurityManager</kbd>.  
Warning:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc-enable-the-hardened-java-security-manager__section_qhx_1b1_xwb}

{#sc-enable-the-hardened-java-security-manager__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.security.manager |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | string |
| Recommended value | com.glide.sys.security.ContextualSecurityManager |
| Default value | com.glide.sys.security.ContextualSecurityManager |
| Fallback value | com.glide.sys.security.ContextualSecurityManager |
| Category | [Validation, sanitization, and encoding](https://www.servicenow.com/docs/Y54hkYpvZcFtgJ5PMM2JEw "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Security risk | * Severity score: 7.2 * CVSS score: High * Security risk details:Without this hardening, it may be possible for a malicious actor with script execution access to achieve remote code execution on the instance. {#sc-enable-the-hardened-java-security-manager__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-enable-the-hardened-java-security-manager__table_ajc_b43_3kb}