diff --git a/CHANGELOG.md b/CHANGELOG.md
index 63ece92..4491648 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,7 +13,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 #### Added
 
 - [SECURE] Allow new ssh port with UFW when running `wo secure --sshport`
-- [SECURITY] Additional Nginx directives to prevent access to log files or backup from web browser
+- [STACK] Additional Nginx directives to prevent access to log files or backup from web browser
 - [CORE] apt-mirror-updater to select the fastest debian/ubuntu mirror with automatic switching between mirrors if the current mirror is being updated
 - [SITE] add `--force` to force Let's Encrypt certificate issuance even if DNS check fail
 - [STACK] check if another mta is installed before installing sendmail
@@ -21,7 +21,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 #### Changed
 
-- [SECURITY] Improved sshd_config template according to Mozilla Infosec guidelines
+- [SECURE] Improved sshd_config template according to Mozilla Infosec guidelines
 - [STACK] Always add stack configuration into Git before making changes to make rollback easier
 - [STACK] Render php-fpm pools configuration from template
 - [STACK] Adminer updated to v4.7.3