diff --git a/CHANGELOG.md b/CHANGELOG.md
index dfaccc1f5..4ac7fb073 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ Docs: https://docs.openclaw.ai
 Status: stable.
 
 ### Changes
+- Security: add comprehensive security shield with rate limiting, intrusion detection, IP blocklist/allowlist, firewall integration (iptables/ufw), Telegram alerting, and security event logging. Enabled by default (opt-out mode).
 - Rebrand: rename the npm package/CLI to `openclaw`, add a `openclaw` compatibility shim, and move extensions to the `@openclaw/*` scope.
 - Onboarding: strengthen security warning copy for beta + access control expectations.
 - Onboarding: add Venice API key to non-interactive flow. (#1893) Thanks @jonisjongithub.