diff --git a/spring-boot-autoconfigure/src/main/resources/META-INF/additional-spring-configuration-metadata.json b/spring-boot-autoconfigure/src/main/resources/META-INF/additional-spring-configuration-metadata.json
index 42cf236a6b..d023a39403 100644
--- a/spring-boot-autoconfigure/src/main/resources/META-INF/additional-spring-configuration-metadata.json
+++ b/spring-boot-autoconfigure/src/main/resources/META-INF/additional-spring-configuration-metadata.json
@@ -1,24 +1,8 @@
 {"properties": [
-  {
-    "name": "security.basic.authorize-mode",
-    "defaultValue": "role"
-  },
-  {
-    "name": "security.headers.content-security-policy-mode",
-    "defaultValue": "default"
-  },
-  {
-    "name": "security.headers.hsts",
-    "defaultValue": "all"
-  },
   {
     "name": "security.filter-dispatcher-types",
     "defaultValue": ["async", "error", "request"]
   },
-  {
-    "name": "security.sessions",
-    "defaultValue": "stateless"
-  },
   {
     "name": "server.error.include-stacktrace",
     "defaultValue": "never"
diff --git a/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc b/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc
index b2683fcbf1..763e04b995 100644
--- a/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc
+++ b/spring-boot-docs/src/main/asciidoc/appendix-application-properties.adoc
@@ -476,12 +476,9 @@ content into your application; rather pick only the properties that you need.
 	# SECURITY PROPERTIES
 	# ----------------------------------------
 	# SECURITY ({sc-spring-boot-autoconfigure}/security/SecurityProperties.{sc-ext}[SecurityProperties])
-	security.basic.authorize-mode=role # Security authorize mode to apply.
     security.basic.enabled=true # Enable basic authentication.
     security.filter-order=0 # Security filter chain order.
     security.filter-dispatcher-types=ASYNC,ERROR,REQUEST # Security filter chain dispatcher types.
-    security.headers.hsts=all # HTTP Strict Transport Security (HSTS) mode (none, domain, all).
-    security.sessions=stateless # Session creation policy (always, never, if_required, stateless).
 
 	# SECURITY OAUTH2 CLIENT ({sc-spring-boot-autoconfigure}/security/oauth2/OAuth2ClientProperties.{sc-ext}[OAuth2ClientProperties])
 	security.oauth2.client.client-id= # OAuth2 client id.