diff --git a/conf/default.yaml b/conf/default.yaml
index 4729f8025..2d7af82d2 100644
--- a/conf/default.yaml
+++ b/conf/default.yaml
@@ -44,9 +44,9 @@ packages:
     proxy: npmjs
 
 # To use `npm audit` uncomment the following section
-#middlewares:
-#  audit:
-#    enabled: true
+middlewares:
+  audit:
+    enabled: true
 
 # log settings
 logs:
diff --git a/conf/docker.yaml b/conf/docker.yaml
index 91cef82ca..4c8ace41f 100644
--- a/conf/docker.yaml
+++ b/conf/docker.yaml
@@ -48,9 +48,9 @@ packages:
     proxy: npmjs
 
 # To use `npm audit` uncomment the following section
-#middlewares:
-#  audit:
-#    enabled: true
+middlewares:
+  audit:
+    enabled: true
 
 # log settings
 logs:
diff --git a/docs/config.md b/docs/config.md
index daa13f627..ddeeffad2 100644
--- a/docs/config.md
+++ b/docs/config.md
@@ -182,8 +182,18 @@ notify:
 > For more detailed configuration settings, please [check the source code](https://github.com/verdaccio/verdaccio/tree/master/conf).
 
 
-
-
+### Audit
+
+`npm audit` is a new command released with [npm 6.x](https://github.com/npm/npm/releases/tag/v6.1.0). Verdaccio includes
+a built-in middleware plugin to handle this command.
+
+> If you have a new installation it comes by default, otherwise you need to add the following props to your config file
+
+```yaml
+middlewares:
+  audit:
+    enabled: true
+```