diff --git a/renovate.json b/renovate.json
index 18ccbec4..229e35d5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,6 +8,10 @@
 	],
 	"labels": ["dependencies"],
 	"dependencyDashboard": true,
+	"dependencyDashboardOSVVulnerabilitySummary": "all",
+	"osvVulnerabilityAlerts": true,
+	"configMigration": true,
+	"automergeStrategy": "squash",
 	"prConcurrentLimit": 5,
 	"prHourlyLimit": 3,
 	"minimumReleaseAge": "3 days",
@@ -28,6 +32,13 @@
 			"labels": ["major"],
 			"dependencyDashboardApproval": true
 		},
+		{
+			"description": "Beveiligingsfixes (OSV) niet tegenhouden door de wachttijd en in een eigen PR",
+			"matchCategories": ["security"],
+			"minimumReleaseAge": null,
+			"groupName": "security fixes",
+			"addLabels": ["security"]
+		},
 		{
 			"description": "Docker-compose draait op :latest; geen digest-pin-ruis",
 			"matchManagers": ["docker-compose"],