diff --git a/docs/development/security/rbac.asciidoc b/docs/development/security/rbac.asciidoc
index 5651c776360c1..916ec72ab76c7 100644
--- a/docs/development/security/rbac.asciidoc
+++ b/docs/development/security/rbac.asciidoc
@@ -10,7 +10,7 @@ When {kib} first starts up, it executes the following `POST` request against {es
 
 [source,js]
 ----------------------------------
-POST /_xpack/security/privilege
+POST /_security/privilege
 Content-Type: application/json
 Authorization: Basic kibana changeme
 
@@ -80,7 +80,7 @@ The {es} {ref}/security-api-has-privileges.html[has privileges API] determines w
 
 [source,js]
 ----------------------------------
-POST /_xpack/security/user/_has_privileges
+POST /_security/user/_has_privileges
 Content-Type: application/json
 Authorization: Basic foo_read_only_user password
 
@@ -110,7 +110,7 @@ Within the secured instance of the `SavedObjectsClient` the `_has_privileges` ch
 
 [source,js]
 ----------------------------------
-POST /_xpack/security/user/_has_privileges
+POST /_security/user/_has_privileges
 Content-Type: application/json
 Authorization: Basic foo_legacy_user password
 
diff --git a/docs/security/reporting.asciidoc b/docs/security/reporting.asciidoc
index 21a119bcb6e4b..0b602674d3759 100644
--- a/docs/security/reporting.asciidoc
+++ b/docs/security/reporting.asciidoc
@@ -23,7 +23,7 @@ the following request creates a `reporter` user that has the
 +
 [source, sh]
 ---------------------------------------------------------------
-POST /_xpack/security/user/reporter
+POST /_security/user/reporter
 {
   "password" : "x-pack-test-password",
   "roles" : ["kibana_user", "reporting_user"],
diff --git a/docs/security/securing-kibana.asciidoc b/docs/security/securing-kibana.asciidoc
index 412d2f5bcf6eb..f9869d704551b 100644
--- a/docs/security/securing-kibana.asciidoc
+++ b/docs/security/securing-kibana.asciidoc
@@ -91,7 +91,7 @@ role:
 
 [source,js]
 --------------------------------------------------------------------------------
-POST /_xpack/security/user/jacknich
+POST /_security/user/jacknich
 {
   "password" : "t0pS3cr3t",
   "roles" : [ "kibana_user" ]