diff --git a/app/flask-postgres/app/app.py b/app/flask-postgres/app/app.py
index 0ffb353..94c0603 100644
--- a/app/flask-postgres/app/app.py
+++ b/app/flask-postgres/app/app.py
@@ -408,8 +408,14 @@ def health():
 
 
 @app.route("/images/<path:filename>")
-def serve_image(filename):
-    return send_from_directory("/app/images", filename)
+def images(filename):
+
+    # 🔒 Schutz für Videos
+    if filename.startswith("videos/"):
+        if not session.get("user_id"):
+            return redirect(url_for("login", next=request.path))
+
+    return send_from_directory("images", filename)
 
 
 @app.route("/styles/<path:filename>")
diff --git a/app/flask-postgres/images/videos/C3 Vendor.mp4 b/app/flask-postgres/images/videos/C3 Vendor.mp4
new file mode 100644
index 0000000..bd85d95
Binary files /dev/null and b/app/flask-postgres/images/videos/C3 Vendor.mp4 differ
diff --git a/app/flask-postgres/images/videos/C4 Risk Mapping.mp4 b/app/flask-postgres/images/videos/C4 Risk Mapping.mp4
new file mode 100644
index 0000000..9bc9f86
Binary files /dev/null and b/app/flask-postgres/images/videos/C4 Risk Mapping.mp4 differ
diff --git a/app/flask-postgres/images/videos/C5 Umsetzung.mp4 b/app/flask-postgres/images/videos/C5 Umsetzung.mp4
new file mode 100644
index 0000000..5ad8a9c
Binary files /dev/null and b/app/flask-postgres/images/videos/C5 Umsetzung.mp4 differ