diff --git a/actions/ql/src/Security/CWE-074/OutputClobberingHigh.ql b/actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-074/OutputClobberingHigh.ql
rename to actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql
diff --git a/actions/ql/src/Security/CWE-078/CommandInjectionCritical.ql b/actions/ql/src/experimental/Security/CWE-078/CommandInjectionCritical.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-078/CommandInjectionCritical.ql
rename to actions/ql/src/experimental/Security/CWE-078/CommandInjectionCritical.ql
diff --git a/actions/ql/src/Security/CWE-078/CommandInjectionMedium.ql b/actions/ql/src/experimental/Security/CWE-078/CommandInjectionMedium.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-078/CommandInjectionMedium.ql
rename to actions/ql/src/experimental/Security/CWE-078/CommandInjectionMedium.ql
diff --git a/actions/ql/src/Security/CWE-088/ArgumentInjectionCritical.md b/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionCritical.md
similarity index 100%
rename from actions/ql/src/Security/CWE-088/ArgumentInjectionCritical.md
rename to actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionCritical.md
diff --git a/actions/ql/src/Security/CWE-088/ArgumentInjectionCritical.ql b/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionCritical.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-088/ArgumentInjectionCritical.ql
rename to actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionCritical.ql
diff --git a/actions/ql/src/Security/CWE-088/ArgumentInjectionMedium.md b/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionMedium.md
similarity index 100%
rename from actions/ql/src/Security/CWE-088/ArgumentInjectionMedium.md
rename to actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionMedium.md
diff --git a/actions/ql/src/Security/CWE-088/ArgumentInjectionMedium.ql b/actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionMedium.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-088/ArgumentInjectionMedium.ql
rename to actions/ql/src/experimental/Security/CWE-088/ArgumentInjectionMedium.ql
diff --git a/actions/ql/src/Security/CWE-200/SecretExfiltration.ql b/actions/ql/src/experimental/Security/CWE-200/SecretExfiltration.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-200/SecretExfiltration.ql
rename to actions/ql/src/experimental/Security/CWE-200/SecretExfiltration.ql
diff --git a/actions/ql/src/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql b/actions/ql/src/experimental/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
rename to actions/ql/src/experimental/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
diff --git a/actions/ql/src/Security/CWE-829/ArtifactPoisoningPathTraversal.ql b/actions/ql/src/experimental/Security/CWE-829/ArtifactPoisoningPathTraversal.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-829/ArtifactPoisoningPathTraversal.ql
rename to actions/ql/src/experimental/Security/CWE-829/ArtifactPoisoningPathTraversal.ql
diff --git a/actions/ql/src/Security/CWE-918/RequestForgery.ql b/actions/ql/src/experimental/Security/CWE-918/RequestForgery.ql
similarity index 100%
rename from actions/ql/src/Security/CWE-918/RequestForgery.ql
rename to actions/ql/src/experimental/Security/CWE-918/RequestForgery.ql
diff --git a/actions/ql/test/query-tests/Security/CWE-074/OutputClobberingHigh.qlref b/actions/ql/test/query-tests/Security/CWE-074/OutputClobberingHigh.qlref
index 1e8b050bb9dc..cdcfaf116666 100644
--- a/actions/ql/test/query-tests/Security/CWE-074/OutputClobberingHigh.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-074/OutputClobberingHigh.qlref
@@ -1 +1 @@
-Security/CWE-074/OutputClobberingHigh.ql
+experimental/Security/CWE-074/OutputClobberingHigh.ql
diff --git a/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionCritical.qlref b/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionCritical.qlref
index 0cdb9a399a84..7057e60695b8 100644
--- a/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionCritical.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionCritical.qlref
@@ -1 +1 @@
-Security/CWE-078/CommandInjectionCritical.ql
+experimental/Security/CWE-078/CommandInjectionCritical.ql
diff --git a/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionMedium.qlref b/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionMedium.qlref
index 8e1bab538bbf..9fbbb302a175 100644
--- a/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionMedium.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-078/CommandInjectionMedium.qlref
@@ -1 +1 @@
-Security/CWE-078/CommandInjectionMedium.ql
+experimental/Security/CWE-078/CommandInjectionMedium.ql
diff --git a/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionCritical.qlref b/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionCritical.qlref
index e36c9c6f3e82..a2f6e1c12b9c 100644
--- a/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionCritical.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionCritical.qlref
@@ -1 +1 @@
-Security/CWE-088/ArgumentInjectionCritical.ql
+experimental/Security/CWE-088/ArgumentInjectionCritical.ql
diff --git a/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionMedium.qlref b/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionMedium.qlref
index afc26233870a..b96467552c5b 100644
--- a/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionMedium.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-088/ArgumentInjectionMedium.qlref
@@ -1 +1 @@
-Security/CWE-088/ArgumentInjectionMedium.ql
+experimental/Security/CWE-088/ArgumentInjectionMedium.ql
diff --git a/actions/ql/test/query-tests/Security/CWE-200/SecretExfiltration.qlref b/actions/ql/test/query-tests/Security/CWE-200/SecretExfiltration.qlref
index cd179c0f1e6b..c750afbeaf4a 100644
--- a/actions/ql/test/query-tests/Security/CWE-200/SecretExfiltration.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-200/SecretExfiltration.qlref
@@ -1,2 +1,2 @@
-Security/CWE-200/SecretExfiltration.ql
+experimental/Security/CWE-200/SecretExfiltration.ql
 
diff --git a/actions/ql/test/query-tests/Security/CWE-284/CodeExecutionOnSelfHostedRunner.qlref b/actions/ql/test/query-tests/Security/CWE-284/CodeExecutionOnSelfHostedRunner.qlref
index 43692e5ce43a..dc99068b3035 100644
--- a/actions/ql/test/query-tests/Security/CWE-284/CodeExecutionOnSelfHostedRunner.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-284/CodeExecutionOnSelfHostedRunner.qlref
@@ -1,2 +1,2 @@
-Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
+experimental/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
 
diff --git a/actions/ql/test/query-tests/Security/CWE-829/ArtifactPoisoningPathTraversal.qlref b/actions/ql/test/query-tests/Security/CWE-829/ArtifactPoisoningPathTraversal.qlref
index 7082dbada272..17a2059f7e99 100644
--- a/actions/ql/test/query-tests/Security/CWE-829/ArtifactPoisoningPathTraversal.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-829/ArtifactPoisoningPathTraversal.qlref
@@ -1,2 +1,2 @@
-Security/CWE-829/ArtifactPoisoningPathTraversal.ql
+experimental/Security/CWE-829/ArtifactPoisoningPathTraversal.ql
 
diff --git a/actions/ql/test/query-tests/Security/CWE-918/RequestForgery.qlref b/actions/ql/test/query-tests/Security/CWE-918/RequestForgery.qlref
index fcb4e41daf88..5479b022be0f 100644
--- a/actions/ql/test/query-tests/Security/CWE-918/RequestForgery.qlref
+++ b/actions/ql/test/query-tests/Security/CWE-918/RequestForgery.qlref
@@ -1 +1 @@
-Security/CWE-918/RequestForgery.ql
+experimental/Security/CWE-918/RequestForgery.ql