diff --git a/tests/unit/security-config.test.mjs b/tests/unit/security-config.test.mjs
new file mode 100644
index 00000000..d1d5694f
--- /dev/null
+++ b/tests/unit/security-config.test.mjs
@@ -0,0 +1,11 @@
+import { test } from 'node:test';
+import assert from 'node:assert';
+import { IS_DEV_MODE, IS_VERBOSE_DEV_MODE } from '../../config/instance-config.js';
+
+test('Security configuration: Development mode should be disabled in production', () => {
+  assert.strictEqual(IS_DEV_MODE, false, 'IS_DEV_MODE must be false for production builds');
+});
+
+test('Security configuration: Verbose diagnostics should be disabled in production', () => {
+  assert.strictEqual(IS_VERBOSE_DEV_MODE, false, 'IS_VERBOSE_DEV_MODE must be false for production builds');
+});