diff --git a/docs/reference/enterprise-readiness.mdx b/docs/reference/enterprise-readiness.mdx
index f12760ebc57..c12c175fa05 100644
--- a/docs/reference/enterprise-readiness.mdx
+++ b/docs/reference/enterprise-readiness.mdx
@@ -83,7 +83,7 @@ Each row links to deeper documentation and, when a concrete fix is in progress,
 
 <AgentOnly variant="openclaw">
 For remote deployment specifics, refer to [Deploy to Remote GPU Instances](../deployment/deploy-to-remote-gpu) and [Brev Web UI](../deployment/brev-web-ui).
-For container-level hardening beyond the entrypoint defaults, refer to [Sandbox Hardening](../deployment/sandbox-hardening).
+For container-level hardening beyond the entrypoint defaults, refer to [Sandbox Hardening](../manage-sandboxes/sandbox-hardening).
 </AgentOnly>
 <AgentOnly variant="hermes">
 For remote deployment and Brev specifics, refer to the Brev section of the [Troubleshooting](troubleshooting#brev) guide.
diff --git a/docs/security/best-practices.mdx b/docs/security/best-practices.mdx
index c050b05d28a..753ac3dc8d8 100644
--- a/docs/security/best-practices.mdx
+++ b/docs/security/best-practices.mdx
@@ -322,7 +322,7 @@ The container runtime spawns a `$$nemoclaw connect` shell outside that tree, so
 
 <AgentOnly variant="openclaw">
 For additional protection, pass `--cap-drop=ALL` with `docker run` or Compose.
-Refer to [Sandbox Hardening](../deployment/sandbox-hardening).
+Refer to [Sandbox Hardening](../manage-sandboxes/sandbox-hardening).
 </AgentOnly>
 
 | Aspect | Detail |
@@ -658,7 +658,7 @@ The following patterns weaken security without providing meaningful benefit.
 - [Customize the Network Policy](../network-policy/customize-network-policy) for static and dynamic policy changes.
 - [Approve or Deny Network Requests](../network-policy/approve-network-requests) for the operator approval flow.
 <AgentOnly variant="openclaw">
-- [Sandbox Hardening](../deployment/sandbox-hardening) for container-level security measures.
+- [Sandbox Hardening](../manage-sandboxes/sandbox-hardening) for container-level security measures.
 </AgentOnly>
 - [Inference Options](../inference/inference-options) for provider configuration details.
 - [How It Works](../about/how-it-works) for the protection layer architecture.