diff --git a/hosts/sakotop/configuration.nix b/hosts/sakotop/configuration.nix
index b5feb39c..8a94003b 100644
--- a/hosts/sakotop/configuration.nix
+++ b/hosts/sakotop/configuration.nix
@@ -73,6 +73,9 @@
         mpv.enable = true;
         jellyfin.enable = true;
       };
+      security = {
+        wireshark.enable = true;
+      };
     };
     hardware = {
       nvidia = {
diff --git a/modules/desktop/default.nix b/modules/desktop/default.nix
index cc5ee68e..c6cb75fd 100644
--- a/modules/desktop/default.nix
+++ b/modules/desktop/default.nix
@@ -28,5 +28,7 @@
     # vpn
     ./wireguard
     ./printing
+    # securitity
+    ./security
   ];
 }
diff --git a/modules/desktop/security/default.nix b/modules/desktop/security/default.nix
new file mode 100644
index 00000000..c3920182
--- /dev/null
+++ b/modules/desktop/security/default.nix
@@ -0,0 +1,6 @@
+{}:
+{
+  imports = [
+    ./wireshark
+  ];
+}
diff --git a/modules/desktop/security/wireshark/default.nix b/modules/desktop/security/wireshark/default.nix
new file mode 100644
index 00000000..7e2b9f08
--- /dev/null
+++ b/modules/desktop/security/wireshark/default.nix
@@ -0,0 +1,13 @@
+{ outputs, options, config, lib, pkgs, ...}:
+let
+  cfg = config.modules.desktop.security.wireguard;
+in
+{
+  options.modules.desktop.security.wireguard = {
+    enable = lib.mkEnableOption false;
+  };
+
+  config = lib.mkIf cfg.enable {
+    programs.wireshark.enable = true;
+  };
+}