diff --git a/docs/infrastructure_and_maintenance/security/security_checklist.md b/docs/infrastructure_and_maintenance/security/security_checklist.md
index 0537e06821..173972d0d2 100644
--- a/docs/infrastructure_and_maintenance/security/security_checklist.md
+++ b/docs/infrastructure_and_maintenance/security/security_checklist.md
@@ -250,7 +250,7 @@ HSTS forces clients to always communicate with your site over HTTPS.
 Read the requirements and instructions at [hstspreload.org](https://hstspreload.org/) before you enable HSTS.
 Make sure to also include subdomains by means of the `includeSubDomains` setting.
 
-When using [[= product_name_cloud =]], you can [configure HSTS in .platform/routes.yaml](https://docs.platform.sh/define-routes/https.html#enable-http-strict-transport-security-hsts).
+When using [[= product_name_cloud =]], you can [configure HSTS in `.platform/routes.yaml`](https://docs.platform.sh/define-routes/https.html#enable-http-strict-transport-security-hsts).
 
 ## Domain