diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3c7abf8..818e1d2 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -49,6 +49,9 @@ jobs:
       - name: Clippy
         run: cargo clippy --workspace -- -D warnings
 
+      - name: Security audit (Rust)
+        run: cargo audit
+
   frontend-test:
     runs-on: ubuntu-latest
     defaults:
@@ -76,3 +79,6 @@ jobs:
 
       - name: Build
         run: pnpm build
+
+      - name: Security audit (npm)
+        run: npx npm-audit --audit-level=high || true