diff --git a/surfsense_backend/app/automations/templating/allowlist.py b/surfsense_backend/app/automations/templating/allowlist.py
new file mode 100644
index 000000000..ed0103c8f
--- /dev/null
+++ b/surfsense_backend/app/automations/templating/allowlist.py
@@ -0,0 +1,31 @@
+"""Filter and test names admitted into the sandboxed environment."""
+
+from __future__ import annotations
+
+ALLOWED_FILTERS: tuple[str, ...] = (
+    "default",
+    "first",
+    "join",
+    "last",
+    "length",
+    "lower",
+    "replace",
+    "reverse",
+    "sort",
+    "tojson",
+    "trim",
+    "truncate",
+    "upper",
+    "date",
+    "slugify",
+)
+
+ALLOWED_TESTS: tuple[str, ...] = (
+    "defined",
+    "none",
+    "number",
+    "string",
+    "mapping",
+    "sequence",
+    "boolean",
+)