diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 000000000000..30de662aaeda
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,5 @@
+{
+  "enabledPlugins": {
+    "security-guidance@claude-plugins-official": true
+  }
+}