diff --git a/src/main/java/com/olympus/hermione/security/config/SecurityConfig.java b/src/main/java/com/olympus/hermione/security/config/SecurityConfig.java
index fc11ac7..0e19914 100644
--- a/src/main/java/com/olympus/hermione/security/config/SecurityConfig.java
+++ b/src/main/java/com/olympus/hermione/security/config/SecurityConfig.java
@@ -68,6 +68,8 @@ public class SecurityConfig {
             .csrf().disable()
             .authorizeHttpRequests(auth -> auth
                 .requestMatchers("/api/auth/**", "/login").permitAll()
+                .requestMatchers("/scenarios/execute-async").permitAll()
+                .requestMatchers("/scenarios/getExecutionProgress/**").permitAll()
                 .anyRequest().authenticated()
             )
             .authenticationProvider(authenticationProvider())