diff --git a/apps/fabro-web/app/routes/settings.tsx b/apps/fabro-web/app/routes/settings.tsx
index 648edbd24..9dc82d17a 100644
--- a/apps/fabro-web/app/routes/settings.tsx
+++ b/apps/fabro-web/app/routes/settings.tsx
@@ -59,13 +59,12 @@ export const navSections: NavSection[] = [
         description: "Where workflow stages execute.",
         match: (p) => p.startsWith("/settings/sandboxes"),
       },
-      {
-        name: "Security",
-        href: "/settings/security",
-        icon: ShieldCheckIcon,
-        description: "Authentication methods and access.",
-        match: (p) => p.startsWith("/settings/security"),
-      },
+    ],
+  },
+  {
+    key: "workflows",
+    label: "Workflows",
+    items: [
       {
         name: "Variables",
         href: "/settings/variables",
@@ -93,6 +92,13 @@ export const navSections: NavSection[] = [
         description: "URLs, listen address, scheduler.",
         match: (p) => p.startsWith("/settings/server"),
       },
+      {
+        name: "Security",
+        href: "/settings/security",
+        icon: ShieldCheckIcon,
+        description: "Authentication methods and access.",
+        match: (p) => p.startsWith("/settings/security"),
+      },
       {
         name: "Storage",
         href: "/settings/storage",