# Experience Builder Sites and Lightning Web Security

If Lightning Web Security (LWS) is enabled in an org that contains Experience Builder Aura sites, LWS protects Lightning web components and Aura components in the Aura sites.

LWS protects Lightning web components and Aura components in Lightning Web Runtime (LWR) sites too. However, LWR sites have their own instance of LWS that isn’t affected by the org’s LWS setting.

For more information, see [Develop Secure Sites: CSP, LWS, and Lightning Locker](https://developer.salesforce.com/docs/atlas.en-us.communities_dev.meta/communities_dev/communities_dev_security_locker_csp.htm) in the *Experience Cloud Developer Guide*.

**See Also**

- [*Experience Cloud Developer Guide*](https://developer.salesforce.com/docs/atlas.en-us.communities_dev.meta/communities_dev/communities_dev_intro.htm)