diff --git a/configure b/configure
index 8a50fe1ab..0ee65f253 100755
--- a/configure
+++ b/configure
@@ -1345,8 +1345,7 @@ Optional Packages:
                           and update checks
   --without-lz4           do not use lz4
   --without-zstd          do not use zstd
-  --without-security-flags
-                          do not use security flags
+  --with-security-flags   use security flags
 
 Some influential environment variables:
   PG_CONFIG   Location to find pg_config for target PostgreSQL instalation
@@ -4754,7 +4753,7 @@ if test "${with_security_flags+set}" = set; then :
   esac
 
 else
-  with_security_flags=yes
+  with_security_flags=no
 
 fi
 
diff --git a/configure.in b/configure.in
index d23945044..7095aa7bd 100644
--- a/configure.in
+++ b/configure.in
@@ -266,8 +266,8 @@ if test "$HAS_TABLEAM" == 'yes'; then
 fi # test "$HAS_TABLEAM" == 'yes'
 
 
-PGAC_ARG_BOOL(with, security-flags, yes,
-              [do not use security flags])
+PGAC_ARG_BOOL(with, security-flags, no,
+              [use security flags])
 AC_SUBST(with_security_flags)
 
 if test "$with_security_flags" = yes; then