diff --git a/gerrit/acls/cfn/cfn-security.config b/gerrit/acls/cfn/cfn-security.config
new file mode 100644
index 0000000000..ef7c0bcdfe
--- /dev/null
+++ b/gerrit/acls/cfn/cfn-security.config
@@ -0,0 +1,11 @@
+[access "refs/heads/*"]
+	abandon = group cfn-security-core
+	label-Code-Review = -2..+2 group cfn-security-core
+	label-Workflow = -1..+1 group cfn-security-core
+
+[receive]
+	requireChangeId = true
+	requireContributorAgreement = true
+
+[submit]
+	mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 899322b48a..4dbfe23177 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -157,6 +157,11 @@
   use-storyboard: true
   groups:
     - computing-force-network
+- project: cfn/cfn-security
+  description: CFN security researches the security issues and solution.
+  use-storyboard: true
+  groups:
+    - computing-force-network
 - project: cfn/computing-native
   description: Computing native is to build a open and unified compiling platform
     that eliminate the difference between heterogeneous hardwares like GPU, FPGA,
diff --git a/zuul/main.yaml b/zuul/main.yaml
index b1c851981c..aac9633fba 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -221,6 +221,7 @@
           - airship/vino
           - airship/zuul-airship-roles
           - cfn/cfn-overview
+          - cfn/cfn-security
           - cfn/computing-native
           - cfn/computing-offload
           - cfn/ubiquitous-computing-scheduling