diff --git a/docs/sources/get-started/modules.md b/docs/sources/get-started/modules.md
index be23b97fe..393039cdf 100644
--- a/docs/sources/get-started/modules.md
+++ b/docs/sources/get-started/modules.md
@@ -104,6 +104,12 @@ loki.write "default" {
 }
 ```
 
+## Security
+
+Since modules can load an arbitrary configuration from a potentially remote source, it is important to carefully consider the security of your solution. 
+The best practice is to ensure that Alloy configuration cannot be changed by attackers. This includes Alloy's main configuration files as well as 
+modules fetched from remote locations such as Git repositories or HTTP servers.
+
 [custom components]: ../custom_components/
 [run]: ../../reference/cli/run/
 [import.file]: ../../reference/config-blocks/import.file/