diff --git a/lib/llm/index.js b/lib/llm/index.js
index aac1182..50e8c33 100644
--- a/lib/llm/index.js
+++ b/lib/llm/index.js
@@ -209,6 +209,7 @@ atl jira issue list --jql "status = Open"  # Custom JQL query
 atl jira issue create --project PROJ --type Bug --summary "Title"
 atl jira issue create --project PROJ --type Task --summary "Title" --description "Details"
 atl jira issue create --project PROJ --parent PROJ-123 --summary "Subtask"  # Auto-discovers subtask type
+atl jira issue create --project PROJ --type Bug --summary "Title" --security "Developer only"  # Restrict visibility
 
 # Edit
 atl jira issue edit PROJ-1234 --summary "New summary"
@@ -221,6 +222,8 @@ atl jira issue edit PROJ-1234 --field "Story Points=8"        # Custom field by
 atl jira issue edit PROJ-1234 --field "customfield_10016=8"    # Custom field by ID
 atl jira issue edit PROJ-1234 --field "Custom Field=Some **markdown** text"  # Auto-converts to ADF
 atl jira issue edit PROJ-1234 --field-file fields.json         # Complex values from JSON file
+atl jira issue edit PROJ-1234 --security "Developer only"      # Set issue security level (by name or id)
+atl jira issue edit PROJ-1234 --security ""                    # Clear issue security level
 
 # Workflow
 atl jira issue transition PROJ-1234 "In Progress"
@@ -268,6 +271,11 @@ atl jira issue fields --search "story points"                  # Search for fiel
 atl jira issue fields --custom --json                          # List all custom fields
 atl jira issue field-options --project PROJ --type Bug         # Allowed values for select/radio fields
 atl jira issue field-options --project PROJ --type Bug --field "Repo"  # Specific field options
+atl jira issue field-options --project PROJ --type Bug --field security # Security levels (for --security)
+
+# Read-only REST passthrough (atl v1.12.0+; GET only, path relative to /rest/api/3)
+atl jira api GET issue/PROJ-1234/editmeta                      # Endpoints atl doesn't model
+atl jira api project/PROJ/securitylevel                        # Method arg optional; defaults to GET
 
 # Board sorting / ranking
 atl jira issue list --jql 'project = PROJ AND statusCategory = Done ORDER BY statuscategorychangedate DESC' --limit 50 --json
@@ -447,6 +455,9 @@ Plain \`--field "Name=value"\` is string-only. Complex Jira field types need \`-
 | Select / radio | \`"Name": {"value": "Option"}\` | No — \`Specify a valid 'id' or 'name'...\` |
 | User picker | \`"Name": {"accountId": "..."}\` | No |
 | Multi-select | \`"Name": [{"value": "A"}, {"value": "B"}]\` | No |
+| Issue security level | use \`--security "<name|id>"\` instead | No — \`--field\` can't set it |
+
+**Issue security level** has a dedicated flag (atl v1.12.0+) — don't reach for \`--field-file\`. Set it on create/edit with \`--security "Developer only"\` (name or numeric id); \`--security ""\` on edit clears it. Discover a project's levels with \`atl jira issue field-options --project PROJ --type Bug --field security\`.
 
 Example combining labels + select + radio (placeholder field names — the actual fields and allowed values depend on your project's schema, not on this example):
 
diff --git a/package.json b/package.json
index 2505575..1be240e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@enthus-appdev/llm-cli-setup",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "CLI tools setup with LLM integration - installs and configures sqlcmd, gh, atl, n8nctl, grafanactl, logcli, m365, esq, discordctl, playwright, and hcloud with Claude Code, Antigravity, and Codex support",
   "type": "module",
   "main": "./lib/index.js",