diff --git a/release-notes/elastic-security/index.md b/release-notes/elastic-security/index.md
index d0a9656d18..9407927ba8 100644
--- a/release-notes/elastic-security/index.md
+++ b/release-notes/elastic-security/index.md
@@ -27,6 +27,17 @@ To check for security updates, go to [Security announcements for the Elastic sta
 
 % *
 
+## 9.1.1 [elastic-security-9.1.1-release-notes]
+
+### Features and enhancements [elastic-security-9.1.1-features-enhancements]
+
+* Improves the reliability of {{elastic-defend}} Kafka connections.
+
+### Fixes [elastic-security-9.1.1-fixes]
+* Fixes a bug by moving the `scheduleNow` call to the privileged monitoring engine initialization step, ensuring the task is only scheduled after the engine is fully created and ready [#230263]({{kib-pull}}230263).
+* Fixes a bug where the base version API route cache was not properly invalidated after rule import [#228475]({{kib-pull}}228475).
+* Fixes an issue in {{elastic-defend}} performance metrics that resulted in `endpoint_uptime_percent` always being 0 for behavioral rules.
+
 ## 9.1.0 [elastic-security-9.1.0-release-notes]
 
 ### Features and enhancements [elastic-security-9.1.0-features-enhancements]
diff --git a/release-notes/elastic-security/known-issues.md b/release-notes/elastic-security/known-issues.md
index 67c5cdbc00..7701c218e2 100644
--- a/release-notes/elastic-security/known-issues.md
+++ b/release-notes/elastic-security/known-issues.md
@@ -29,6 +29,10 @@ The {{elastic-agent}} image is not available from `docker.elastic.co/beats/elast
 **Workaround**
 
 Instead of trying to pull the image from `docker.elastic.co/beats/elastic-agent:9.0.0`, edit the manifests to pull it from `docker.elastic.co/elastic-agent/elastic-agent:9.0.0`.
+
+**Resolved**<br>
+
+Resolved in {{stack}} 9.0.1
 :::