For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/workload_protection/setup/agent_variables.md. A documentation index is available at /llms.txt.

The Datadog Agent has several environment variables that can be enabled for Workload Protection. This article describes the purpose of each environment variable.

VariableDescription
DD_RUNTIME_SECURITY_CONFIG_ENABLEDEnables Workload Protection. Must be enabled for both the System Probe and Security Agent.
DD_RUNTIME_SECURITY_CONFIG_REMOTE_CONFIGURATION_ENABLEDEnables Remote Configuration for automatic updates of default Agent rules and automatic deployment of custom Agent rules.