diff --git a/pom.xml b/pom.xml
index c84374d1690e20311fd256786caa73694e23953c..907f8d5b77cfdfb08548985951bf77ec444bac74 100644
--- a/pom.xml
+++ b/pom.xml
@@ -47,9 +47,15 @@
         <hibernate-core.version>4.3.8.Final</hibernate-core.version>
         <hibernate-entitymanager.version>4.3.8.Final</hibernate-entitymanager.version>
         <spring-data-jpa.version>1.10.2.RELEASE</spring-data-jpa.version>
+        <spring-boot-starter-actuator.version>1.4.0.RELEASE</spring-boot-starter-actuator.version>
     </properties>
 
     <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-actuator</artifactId>
+            <version>${spring-boot-starter-actuator.version}</version>
+        </dependency>
         <dependency>
             <groupId>org.springframework.data</groupId>
             <artifactId>spring-data-commons</artifactId>
diff --git a/src/main/java/eu/hbp/mip/configuration/SecurityConfiguration.java b/src/main/java/eu/hbp/mip/configuration/SecurityConfiguration.java
index 7f076ab80ed44567525352ec42a78d0e39a85b16..c0f4a293322f31f86aeb22c524f32fd0cb42819e 100644
--- a/src/main/java/eu/hbp/mip/configuration/SecurityConfiguration.java
+++ b/src/main/java/eu/hbp/mip/configuration/SecurityConfiguration.java
@@ -93,7 +93,9 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
         if(authentication) {
             http.antMatcher("/**")
                     .authorizeRequests()
-                    .antMatchers("/", "/frontend/**", "/webjars/**", "/v2/api-docs").permitAll()
+                    .antMatchers(
+                            "/", "/health/**", "/info/**", "/metrics/**", "/trace/**", "/frontend/**", "/webjars/**", "/v2/api-docs"
+                    ).permitAll()
                     .anyRequest().authenticated()
                     .and().exceptionHandling().authenticationEntryPoint(new CustomLoginUrlAuthenticationEntryPoint(loginUrl))
                     .and().logout().logoutSuccessUrl(loginUrl).permitAll()