diff --git a/README.md b/README.md
index 37c9ff01..66453feb 100644
--- a/README.md
+++ b/README.md
@@ -183,6 +183,18 @@ The following format is required to target the misp-core, the IP is replaced wit
 docker compose restart misp-guard
 ```
 
+> [!NOTE]
+> **misp-guard v1.4+:** sightings sync is blocked by default. To allow it:
+>
+> ```jsonc
+> "partner_example": {
+>   // true = allow sightings sync with this partner (push and pull)
+>   "allow_sightings": true,
+>   // true = allow the sync user's API key on this partner to be refreshed
+>   "allow_sync_auth_key_refresh": true
+> }
+> ```
+
 #### Environment Variables
 
 ```bash
diff --git a/guard/config.json b/guard/config.json
index 8c0ea840..5a845fe3 100644
--- a/guard/config.json
+++ b/guard/config.json
@@ -17,6 +17,8 @@
             "port": 443,
             "compartment_id": "compartment_1",
             "affiliation": "internal",
+            "allow_sync_auth_key_refresh": false,
+            "allow_sightings": false,
             "taxonomies_rules": {
                 "required_taxonomies": [],
                 "allowed_tags": {},
@@ -36,6 +38,8 @@
             "port": 443,
             "compartment_id": "compartment_1",
             "affiliation": "partner",
+            "allow_sync_auth_key_refresh": false,
+            "allow_sightings": false,
             "taxonomies_rules": {
                 "required_taxonomies": [],
                 "allowed_tags": {
diff --git a/template.env b/template.env
index 66c3c521..3b38f9ea 100644
--- a/template.env
+++ b/template.env
@@ -6,7 +6,7 @@ CORE_TAG=v2.5.50
 # CORE_FLAVOR=standard
 MODULES_TAG=v3.1.1
 # MODULES_FLAVOR=standard
-GUARD_TAG=v1.3
+GUARD_TAG=v1.4
 
 # Build variables
 # PHP_API_VERSION=20240924