diff --git a/src/apps/Elsa.Server.Web/Program.cs b/src/apps/Elsa.Server.Web/Program.cs
index f84ef78ec..36855e779 100644
--- a/src/apps/Elsa.Server.Web/Program.cs
+++ b/src/apps/Elsa.Server.Web/Program.cs
@@ -63,7 +63,7 @@ const bool useMemoryStores = false;
 const bool useCaching = true;
 const bool useAzureServiceBus = false;
 const bool useReadOnlyMode = false;
-const bool useSignalR = true;
+const bool useSignalR = false; // Disabled until Elsa Studio sends authenticated requests.
 const WorkflowRuntime workflowRuntime = WorkflowRuntime.ProtoActor;
 const DistributedCachingTransport distributedCachingTransport = DistributedCachingTransport.ProtoActor;
 const MassTransitBroker massTransitBroker = MassTransitBroker.Memory;
diff --git a/src/modules/Elsa.Workflows.Api/RealTime/Hubs/WorkflowInstanceHub.cs b/src/modules/Elsa.Workflows.Api/RealTime/Hubs/WorkflowInstanceHub.cs
index 250da3fdd..8bf74045f 100644
--- a/src/modules/Elsa.Workflows.Api/RealTime/Hubs/WorkflowInstanceHub.cs
+++ b/src/modules/Elsa.Workflows.Api/RealTime/Hubs/WorkflowInstanceHub.cs
@@ -1,6 +1,7 @@
 using Elsa.Workflows.Api.RealTime.Contracts;
 using Elsa.Workflows.Runtime;
 using JetBrains.Annotations;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.SignalR;
 
 namespace Elsa.Workflows.Api.RealTime.Hubs;
@@ -9,6 +10,7 @@ namespace Elsa.Workflows.Api.RealTime.Hubs;
 /// Represents a SignalR hub for receiving workflow events on the client.
 /// </summary>
 [PublicAPI]
+[Authorize]
 public class WorkflowInstanceHub : Hub<IWorkflowInstanceClient>
 {
     private readonly IWorkflowRuntime _workflowRuntime;