> Markdown version of [Advanced Security Topics](https://vaadin.com/docs/v23/security/advanced-topics). Section index: [llms.txt](https://vaadin.com/docs/v23/security/llms.txt)

# Advanced Security Topics

- [Security Architecture](https://vaadin.com/docs/v23/security/advanced-topics/architecture.md): Gives an introduction to Vaadin Flow's security architecture and how it works in practice.
- [Security Practices at Vaadin](https://vaadin.com/docs/v23/security/advanced-topics/security-practices.md): Provides an overview of the steps Vaadin takes to ensure your application remains secure.
- [Common Vulnerabilities](https://vaadin.com/docs/v23/security/advanced-topics/vulnerabilities.md): Describes common vulnerabilities such as SQL injections, cross-site request forgeries (CSRF/XSRF), cross-site scripting (XSS), and so forth.
- [Frequently Reported Issues](https://vaadin.com/docs/v23/security/advanced-topics/frequent-issues.md): Lists issues reported by users as vulnerabilities, which in fact aren't.
- [Securing Plain Java Applications](https://vaadin.com/docs/v23/security/advanced-topics/securing-plain-java-app.md): Describes how to use the built-in security helpers in a plain Java application.
- [Storing Sensitive Data](https://vaadin.com/docs/v23/security/advanced-topics/external-configuration.md): Learn how to store sensitive data such as passwords for use in a Vaadin app