diff --git a/backend/src/main/java/org/raddatz/familienarchiv/config/SecurityConfig.java b/backend/src/main/java/org/raddatz/familienarchiv/security/SecurityConfig.java
similarity index 98%
rename from backend/src/main/java/org/raddatz/familienarchiv/config/SecurityConfig.java
rename to backend/src/main/java/org/raddatz/familienarchiv/security/SecurityConfig.java
index 0db16f15..86672f80 100644
--- a/backend/src/main/java/org/raddatz/familienarchiv/config/SecurityConfig.java
+++ b/backend/src/main/java/org/raddatz/familienarchiv/security/SecurityConfig.java
@@ -1,4 +1,4 @@
-package org.raddatz.familienarchiv.config;
+package org.raddatz.familienarchiv.security;
 
 import lombok.RequiredArgsConstructor;
 
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/controller/StatsControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/controller/StatsControllerTest.java
index e3dd2392..4d4ecf38 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/controller/StatsControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/controller/StatsControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.controller;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.dto.StatsDTO;
 import org.raddatz.familienarchiv.security.PermissionAspect;
 import org.raddatz.familienarchiv.user.CustomUserDetailsService;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/dashboard/DashboardControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/dashboard/DashboardControllerTest.java
index daa0cf8e..536ff8db 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/dashboard/DashboardControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/dashboard/DashboardControllerTest.java
@@ -2,7 +2,7 @@ package org.raddatz.familienarchiv.dashboard;
 
 import org.junit.jupiter.api.Test;
 import org.raddatz.familienarchiv.audit.AuditKind;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.user.AppUser;
 import org.raddatz.familienarchiv.security.PermissionAspect;
 import org.raddatz.familienarchiv.user.CustomUserDetailsService;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/document/DocumentControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/document/DocumentControllerTest.java
index 9814af00..9028b54a 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/document/DocumentControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/document/DocumentControllerTest.java
@@ -19,7 +19,7 @@ import org.raddatz.familienarchiv.service.FileService;
 import org.raddatz.familienarchiv.user.UserService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.webmvc.test.autoconfigure.WebMvcTest;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.springframework.http.MediaType;
 import org.springframework.boot.autoconfigure.aop.AopAutoConfiguration;
 import org.springframework.context.annotation.Import;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/document/annotation/AnnotationControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/document/annotation/AnnotationControllerTest.java
index d14428b8..20cf8a79 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/document/annotation/AnnotationControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/document/annotation/AnnotationControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.document.annotation;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.exception.DomainException;
 import org.raddatz.familienarchiv.exception.ErrorCode;
 import org.raddatz.familienarchiv.document.Document;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/document/comment/CommentControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/document/comment/CommentControllerTest.java
index 0998df49..d3593c65 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/document/comment/CommentControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/document/comment/CommentControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.document.comment;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.document.comment.DocumentComment;
 import org.raddatz.familienarchiv.security.PermissionAspect;
 import org.raddatz.familienarchiv.document.comment.CommentService;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionBlockControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionBlockControllerTest.java
index a10e54de..f324da69 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionBlockControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionBlockControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.document.transcription;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.exception.DomainException;
 import org.raddatz.familienarchiv.exception.ErrorCode;
 import org.raddatz.familienarchiv.user.AppUser;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionQueueControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionQueueControllerTest.java
index 91a34b0e..89f55a74 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionQueueControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/document/transcription/TranscriptionQueueControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.document.transcription;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.document.transcription.TranscriptionQueueItemDTO;
 import org.raddatz.familienarchiv.document.transcription.TranscriptionWeeklyStatsDTO;
 import org.raddatz.familienarchiv.document.DocumentRepository;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/geschichte/GeschichteControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/geschichte/GeschichteControllerTest.java
index 9ae28c2e..d6ce0974 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/geschichte/GeschichteControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/geschichte/GeschichteControllerTest.java
@@ -2,7 +2,7 @@ package org.raddatz.familienarchiv.geschichte;
 
 import com.fasterxml.jackson.databind.ObjectMapper;
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.geschichte.GeschichteUpdateDTO;
 import org.raddatz.familienarchiv.exception.DomainException;
 import org.raddatz.familienarchiv.exception.ErrorCode;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/notification/NotificationControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/notification/NotificationControllerTest.java
index cbbda92c..cc34535d 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/notification/NotificationControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/notification/NotificationControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.notification;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.notification.NotificationDTO;
 import org.raddatz.familienarchiv.exception.DomainException;
 import org.raddatz.familienarchiv.exception.ErrorCode;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/ocr/OcrControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/ocr/OcrControllerTest.java
index eec681bd..804571b3 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/ocr/OcrControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/ocr/OcrControllerTest.java
@@ -2,7 +2,7 @@ package org.raddatz.familienarchiv.ocr;
 
 import tools.jackson.databind.ObjectMapper;
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.ocr.BatchOcrDTO;
 import org.raddatz.familienarchiv.ocr.OcrStatusDTO;
 import org.raddatz.familienarchiv.ocr.TrainingHistoryResponse;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/person/PersonControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/person/PersonControllerTest.java
index b05a1c67..45454794 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/person/PersonControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/person/PersonControllerTest.java
@@ -14,7 +14,7 @@ import org.raddatz.familienarchiv.document.DocumentService;
 import org.raddatz.familienarchiv.person.PersonService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.webmvc.test.autoconfigure.WebMvcTest;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.springframework.boot.autoconfigure.aop.AopAutoConfiguration;
 import org.springframework.context.annotation.Import;
 import org.springframework.http.MediaType;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/person/relationship/RelationshipControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/person/relationship/RelationshipControllerTest.java
index aa00c409..5395c8e8 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/person/relationship/RelationshipControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/person/relationship/RelationshipControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.person.relationship;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.exception.ErrorCode;
 import org.raddatz.familienarchiv.person.relationship.dto.InferredRelationshipWithPersonDTO;
 import org.raddatz.familienarchiv.person.relationship.dto.NetworkDTO;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/tag/TagControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/tag/TagControllerTest.java
index 44e7cb82..0d7e387b 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/tag/TagControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/tag/TagControllerTest.java
@@ -9,7 +9,7 @@ import org.raddatz.familienarchiv.document.DocumentService;
 import org.raddatz.familienarchiv.tag.TagService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.webmvc.test.autoconfigure.WebMvcTest;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.springframework.boot.autoconfigure.aop.AopAutoConfiguration;
 import org.springframework.context.annotation.Import;
 import org.springframework.http.MediaType;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/user/AdminControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/user/AdminControllerTest.java
index 2f6a1b1e..168020b5 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/user/AdminControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/user/AdminControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.user;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.document.Document;
 import org.raddatz.familienarchiv.security.PermissionAspect;
 import org.raddatz.familienarchiv.user.CustomUserDetailsService;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/user/AuthControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/user/AuthControllerTest.java
index 006e1b7d..7a752c3d 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/user/AuthControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/user/AuthControllerTest.java
@@ -2,7 +2,7 @@ package org.raddatz.familienarchiv.user;
 
 import tools.jackson.databind.ObjectMapper;
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.user.InvitePrefillDTO;
 import org.raddatz.familienarchiv.user.RegisterRequest;
 import org.raddatz.familienarchiv.exception.DomainException;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/user/InviteControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/user/InviteControllerTest.java
index e864210c..0af2a999 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/user/InviteControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/user/InviteControllerTest.java
@@ -2,7 +2,7 @@ package org.raddatz.familienarchiv.user;
 
 import tools.jackson.databind.ObjectMapper;
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.user.CreateInviteRequest;
 import org.raddatz.familienarchiv.user.InviteListItemDTO;
 import org.raddatz.familienarchiv.user.AppUser;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/user/UserControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/user/UserControllerTest.java
index b6db1b24..06a5d611 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/user/UserControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/user/UserControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.user;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.user.AppUser;
 import org.raddatz.familienarchiv.security.PermissionAspect;
 import org.raddatz.familienarchiv.user.CustomUserDetailsService;
diff --git a/backend/src/test/java/org/raddatz/familienarchiv/user/UserSearchControllerTest.java b/backend/src/test/java/org/raddatz/familienarchiv/user/UserSearchControllerTest.java
index 4b1a02c6..2ea5b3dd 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/user/UserSearchControllerTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/user/UserSearchControllerTest.java
@@ -1,7 +1,7 @@
 package org.raddatz.familienarchiv.user;
 
 import org.junit.jupiter.api.Test;
-import org.raddatz.familienarchiv.config.SecurityConfig;
+import org.raddatz.familienarchiv.security.SecurityConfig;
 import org.raddatz.familienarchiv.user.AppUser;
 import org.raddatz.familienarchiv.security.PermissionAspect;
 import org.raddatz.familienarchiv.user.CustomUserDetailsService;