diff --git a/README.md b/README.md
index 81b05f8..b4cde8f 100644
--- a/README.md
+++ b/README.md
@@ -52,7 +52,7 @@ The BOM pins versions for every module in the framework. They are grouped below
 | **Starters** | `fireflyframework-starter-core`, `-starter-domain`, `-starter-data`, `-starter-application` | Opinionated Spring Boot starters per architectural tier. |
 | **Application Layer** | `fireflyframework-backoffice` | Back-office application building blocks. |
 | **ECM** | `fireflyframework-ecm` + `-ecm-storage-aws`, `-ecm-storage-azure`, `-ecm-esignature-docusign`, `-ecm-esignature-adobe-sign`, `-ecm-esignature-logalty` | Enterprise content management with pluggable storage (S3, Azure Blob) and e-signature adapters. |
-| **IDP** | `fireflyframework-idp` + `-idp-keycloak`, `-idp-aws-cognito`, `-idp-azure-ad`, `-idp-internal-db` | Identity-provider abstraction with pluggable provider adapters. |
+| **IDP** | `fireflyframework-security-idp` + `-idp-keycloak`, `-idp-aws-cognito`, `-idp-azure-ad`, `-idp-internal-db` | Identity-provider abstraction with pluggable provider adapters. |
 | **Notifications** | `fireflyframework-notifications`, `-notifications-core` + `-notifications-firebase`, `-twilio`, `-sendgrid`, `-resend` | Multi-channel notifications (push, SMS, email) with provider adapters. |
 | **Rule Engine** | `fireflyframework-rule-engine` (aggregator) + `-core`, `-interfaces`, `-models`, `-web`, `-sdk` | YAML-DSL business rule engine. |
 | **Webhooks** | `fireflyframework-webhooks` (aggregator) + `-interfaces`, `-core`, `-web`, `-processor`, `-sdk` | Inbound/outbound webhook delivery and processing. |
diff --git a/pom.xml b/pom.xml
index 6532571..ee9b0ca 100644
--- a/pom.xml
+++ b/pom.xml
@@ -198,30 +198,108 @@
             <!-- IDP -->
             <dependency>
                 <groupId>org.fireflyframework</groupId>
-                <artifactId>fireflyframework-idp</artifactId>
+                <artifactId>fireflyframework-security-idp</artifactId>
                 <version>${project.version}</version>
             </dependency>
             <dependency>
                 <groupId>org.fireflyframework</groupId>
-                <artifactId>fireflyframework-idp-aws-cognito</artifactId>
+                <artifactId>fireflyframework-security-idp-aws-cognito</artifactId>
                 <version>${project.version}</version>
             </dependency>
             <dependency>
                 <groupId>org.fireflyframework</groupId>
-                <artifactId>fireflyframework-idp-internal-db</artifactId>
+                <artifactId>fireflyframework-security-idp-internal-db</artifactId>
                 <version>${project.version}</version>
             </dependency>
             <dependency>
                 <groupId>org.fireflyframework</groupId>
-                <artifactId>fireflyframework-idp-keycloak</artifactId>
+                <artifactId>fireflyframework-security-idp-keycloak</artifactId>
                 <version>${project.version}</version>
             </dependency>
             <dependency>
                 <groupId>org.fireflyframework</groupId>
-                <artifactId>fireflyframework-idp-azure-ad</artifactId>
+                <artifactId>fireflyframework-security-idp-azure-ad</artifactId>
                 <version>${project.version}</version>
             </dependency>
 
+            <!-- Security platform (hexagonal, on Spring Security 6) -->
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-api</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-spi</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-core</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-webflux</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-resource-server</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-method-policy</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-oauth2-client</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-authorization-server</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-test</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-adapter-opa</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-adapter-openfga</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-adapter-vault</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-adapter-cerbos</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.fireflyframework</groupId>
+                <artifactId>fireflyframework-security-adapter-r2dbc</artifactId>
+                <version>${project.version}</version>
+            </dependency>
+            <!-- Spring Authorization Server (servlet authorization-server module) -->
+            <dependency>
+                <groupId>org.springframework.security</groupId>
+                <artifactId>spring-security-oauth2-authorization-server</artifactId>
+                <version>1.5.4</version>
+            </dependency>
+
             <!-- Notifications -->
             <dependency>
                 <groupId>org.fireflyframework</groupId>