diff --git a/.githooks/pre-commit b/.githooks/pre-commit
index c540190..10b903d 100644
--- a/.githooks/pre-commit
+++ b/.githooks/pre-commit
@@ -9,7 +9,7 @@ if command -v gitleaks >/dev/null 2>&1; then
   echo "⚡ Using local gitleaks binary"
   SCAN_CMD="gitleaks detect \
     --pipe \
-    --config=gitleaks.toml \
+    --config=.security/gitleaks.toml \
     --report-format=json \
     --report-path=.gitleaks_out/gitleaks-precommit.json \
     --no-banner"
@@ -17,7 +17,7 @@ else
   echo "Local gitleaks not found, using Docker fallback"
   SCAN_CMD="docker run --rm -i -v \"$(pwd)\":/repo ghcr.io/gitleaks/gitleaks:v8.28.0 detect \
     --pipe \
-    --config=/repo/gitleaks.toml \
+    --config=/repo/.security/gitleaks.toml \
     --report-format=json \
     --report-path=/repo/.gitleaks_out/gitleaks-precommit.json \
     --no-banner"
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 41e96d2..9736116 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -17,7 +17,7 @@ jobs:
     name: Run Gitleaks Scan
     uses: peer-network/peer_global_security/.github/workflows/gitleaks.yml@main
     with:
-      config: gitleaks.toml
+      config: .security/gitleaks.toml
 
   trivy_scan:
     name: Run Trivy Security Scan
diff --git a/README_gitleaks.md b/.security/Readme_gitleaks.md
similarity index 100%
rename from README_gitleaks.md
rename to .security/Readme_gitleaks.md
diff --git a/gitleaks.toml b/.security/gitleaks.toml
similarity index 100%
rename from gitleaks.toml
rename to .security/gitleaks.toml
diff --git a/setup-hooks.sh b/.security/setup-hooks.sh
similarity index 100%
rename from setup-hooks.sh
rename to .security/setup-hooks.sh