diff --git a/build.gradle b/build.gradle
index 321bc5f..97a0ccd 100644
--- a/build.gradle
+++ b/build.gradle
@@ -34,6 +34,7 @@ dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-security'
     implementation 'org.springframework.boot:spring-boot-starter-web'
     implementation 'org.springframework.boot:spring-boot-starter-validation'
+    implementation 'org.springframework.boot:spring-boot-starter-actuator'
 
     // OpenAPI (Swagger UI)
     implementation "org.springdoc:springdoc-openapi-starter-webmvc-ui:${springdocVersion}"
diff --git a/src/main/java/com/goi/erp/config/SecurityConfig.java b/src/main/java/com/goi/erp/config/SecurityConfig.java
index c670255..d014978 100644
--- a/src/main/java/com/goi/erp/config/SecurityConfig.java
+++ b/src/main/java/com/goi/erp/config/SecurityConfig.java
@@ -15,6 +15,9 @@ import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.cors.CorsConfigurationSource;
 import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
 
+import org.springframework.boot.actuate.autoconfigure.security.servlet.EndpointRequest;
+import org.springframework.boot.actuate.health.HealthEndpoint;
+
 import jakarta.servlet.DispatcherType;
 
 @Configuration
@@ -35,6 +38,7 @@ public class SecurityConfig {
 	        .authorizeHttpRequests(auth -> auth
 	            .dispatcherTypeMatchers(DispatcherType.ERROR).permitAll()
 	            .dispatcherTypeMatchers(DispatcherType.FORWARD).permitAll()
+	            .requestMatchers(EndpointRequest.to(HealthEndpoint.class)).permitAll()
 	            .requestMatchers("/swagger-ui/**", "/v3/api-docs/**").permitAll()
 	            .anyRequest().authenticated()
 	        )