---
schema_version: "1"
id: 276b33634ea094a1f26e833fe658a973b0247c471068a543535e5f935983122f
title: Experience Builder Sites and Lightning Web Security
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/lwc/lightning-components-security/guides/lws/lws-lms-ec.md
canonical_url: https://developer.salesforce.com/docs/platform/lightning-components-security/guide/lws-lms-ec.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: bf74ecdda48370118817453f4f2aefb793538506d11d0dd52bb4ab4e9a394716
products:
  - Security for Lightning Components
  - lwc
---
# Experience Builder Sites and Lightning Web Security

If Lightning Web Security (LWS) is enabled in an org that contains Experience Builder Aura sites, LWS protects Lightning web components and Aura components in the Aura sites.

LWS protects Lightning web components and Aura components in Lightning Web Runtime (LWR) sites too. However, LWR sites have their own instance of LWS that isn’t affected by the org’s LWS setting.

For more information, see [Develop Secure Sites: CSP, LWS, and Lightning Locker](https://developer.salesforce.com/docs/atlas.en-us.communities_dev.meta/communities_dev/communities_dev_security_locker_csp.htm) in the _Experience Cloud Developer Guide_.

**See Also**

- [_Experience Cloud Developer Guide_](https://developer.salesforce.com/docs/atlas.en-us.communities_dev.meta/communities_dev/communities_dev_intro.htm)