Apply suggestion from @caley-b

Co-authored-by: Caley Burton <[email protected]>

Author: dcpena

src/content/docs/learning-paths/surge-readiness/security/control-incoming-requests.mdx

@@ -17,7 +17,7 @@ Once you are aware of your plan limits, you can use [Rate Limiting](/waf/rate-li
 
 To help you define the best rate limiting setting for your use case, refer to [How Cloudflare determines the request rate article](/waf/rate-limiting-rules/request-rate/).
 
-## Security Models
+## Security models
 
 - Positive Security policy: Allow specific requests and deny everything else.
 - Negative Security policy: Block specific requests and allow everything else.