---
title: Workload Protection Agent Variables
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > Workload Protection > Setting up Workload Protection
  > Workload Protection Agent Variables
---

# Workload Protection Agent Variables

The Datadog Agent has several environment variables that can be enabled for Workload Protection. This article describes the purpose of each environment variable.

| Variable                                                  | Description                                                                                                                                                                                            |
| --------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `DD_RUNTIME_SECURITY_CONFIG_ENABLED`                      | Enables Workload Protection. Must be enabled for both the [System Probe](https://docs.datadoghq.com/glossary/#system-probe) and [Security Agent](https://docs.datadoghq.com/glossary/#security-agent). |
| `DD_RUNTIME_SECURITY_CONFIG_REMOTE_CONFIGURATION_ENABLED` | Enables Remote Configuration for automatic updates of default Agent rules and automatic deployment of custom Agent rules.                                                                              |