diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
index 04eef4fedf..79ac0a242d 100644
--- a/buildSrc/build.gradle
+++ b/buildSrc/build.gradle
@@ -64,6 +64,7 @@ configurations {
 dependencies {
 	implementation platform(libs.io.projectreactor.reactor.bom)
 
+	implementation libs.spring.nullability
 	implementation libs.com.google.code.gson.gson
 	implementation libs.com.thaiopensource.trag
 	implementation libs.net.sourceforge.saxon.saxon
diff --git a/buildSrc/src/main/groovy/security-nullability.gradle b/buildSrc/src/main/groovy/security-nullability.gradle
new file mode 100644
index 0000000000..5c93833f4e
--- /dev/null
+++ b/buildSrc/src/main/groovy/security-nullability.gradle
@@ -0,0 +1,3 @@
+plugins {
+    id 'io.spring.nullability'
+}
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index a96d4ba636..d24d00f256 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -101,6 +101,7 @@ org-jfrog-buildinfo-build-info-extractor-gradle = "org.jfrog.buildinfo:build-inf
 org-sonarsource-scanner-gradle-sonarqube-gradle-plugin = "org.sonarsource.scanner.gradle:sonarqube-gradle-plugin:2.8.0.1969"
 org-instancio-instancio-junit = "org.instancio:instancio-junit:3.7.1"
 
+spring-nullability = 'io.spring.nullability:io.spring.nullability.gradle.plugin:0.0.1'
 webauthn4j-core = 'com.webauthn4j:webauthn4j-core:0.29.4.RELEASE'
 
 [plugins]