diff --git a/cli/internal/validate/panel.go b/cli/internal/validate/panel.go
index 66fb9fd7..1ff6cb1c 100644
--- a/cli/internal/validate/panel.go
+++ b/cli/internal/validate/panel.go
@@ -194,21 +194,12 @@ func renderCategoryColumn(cats []categoryStats, width int) string {
 		counts := fmt.Sprintf("%d/%d", c.pass, c.total)
 		countsCell := padRight(styleMuted.Render(counts), countsWidth)
 
-		var detail string
-		switch {
-		case c.fail > 0 && c.warn > 0:
-			detail = fmt.Sprintf("x%d !%d", c.fail, c.warn)
-		case c.fail > 0:
-			detail = fmt.Sprintf("x%d", c.fail)
-		case c.warn > 0:
-			detail = fmt.Sprintf("!%d", c.warn)
-		}
+		// Only show the fail/warn breakdown when both are present; otherwise
+		// pass/total + the row icon already convey it (e.g. `[x] 3/6` is 3
+		// fails, `[!] 3/6` is 3 warns).
 		var detailCell string
-		switch {
-		case c.fail > 0:
-			detailCell = styleErr.Render(detail)
-		case c.warn > 0:
-			detailCell = styleWarn.Render(detail)
+		if c.fail > 0 && c.warn > 0 {
+			detailCell = styleErr.Render(fmt.Sprintf("x%d !%d", c.fail, c.warn))
 		}
 		detailCell = padRight(detailCell, detailWidth)
 
diff --git a/playbooks.yml b/playbooks.yml
index 85a4b3ad..27c52259 100644
--- a/playbooks.yml
+++ b/playbooks.yml
@@ -13,6 +13,7 @@ NHA:
   - ad-acl.yml
   - servers.yml
   - security.yml
+  - security_logging.yml
   - vulnerabilities.yml
 
 SCCM:
@@ -30,6 +31,7 @@ SCCM:
   - ad-acl.yml
   - servers.yml
   - security.yml
+  - security_logging.yml
   - vulnerabilities.yml
   - sccm-install.yml
   # Waiting 10 minutes for the install to complete
@@ -54,6 +56,7 @@ GOAD-Mini:
   - adcs.yml
   - ad-acl.yml
   - security.yml
+  - security_logging.yml
   - vulnerabilities.yml
 
 DRACARYS:
@@ -68,6 +71,7 @@ DRACARYS:
   - klink.yml
   - keepass.yml
   - security.yml
+  - security_logging.yml
   - vulnerabilities.yml
   - reboot.yml
   - glpi.yml
@@ -91,4 +95,5 @@ default:
   - ad-acl.yml
   - servers.yml
   - security.yml
+  - security_logging.yml
   - vulnerabilities.yml