diff --git a/src/web/WebLogService.cpp b/src/web/WebLogService.cpp
index 214204f2c..121e72e69 100644
--- a/src/web/WebLogService.cpp
+++ b/src/web/WebLogService.cpp
@@ -32,6 +32,9 @@ WebLogService::WebLogService(AsyncWebServer * server, SecurityManager * security
         [this](AsyncWebServerRequest * request, JsonVariant json) { getSetValues(request, json); },
         HTTP_ANY);
 
+    // Add authentication filter to EventSource
+    // EventSource (SSE) cannot use custom headers, so authentication is done via URL parameter
+    events_.setFilter(securityManager->filterRequest(AuthenticationPredicates::IS_AUTHENTICATED));
     server->addHandler(&events_);
 }