diff --git a/BE/exceed/src/main/java/com/gaebaljip/exceed/adapter/in/member/EmailConfirmedController.java b/BE/exceed/src/main/java/com/gaebaljip/exceed/adapter/in/member/EmailConfirmedController.java
index f4744a70b..ce1e68f4c 100644
--- a/BE/exceed/src/main/java/com/gaebaljip/exceed/adapter/in/member/EmailConfirmedController.java
+++ b/BE/exceed/src/main/java/com/gaebaljip/exceed/adapter/in/member/EmailConfirmedController.java
@@ -1,16 +1,19 @@
 package com.gaebaljip.exceed.adapter.in.member;
 
+import org.springframework.http.HttpStatus;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
 import com.gaebaljip.exceed.application.port.in.member.EmailConfirmedUseCase;
 import com.gaebaljip.exceed.common.ApiResponse;
 import com.gaebaljip.exceed.common.ApiResponseGenerator;
+
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.security.SecurityRequirement;
 import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
-import org.springframework.http.HttpStatus;
-import org.springframework.web.bind.annotation.PutMapping;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
 
 @RestController
 @RequiredArgsConstructor
@@ -19,11 +22,11 @@
 @Tag(name = "[회원가입]")
 public class EmailConfirmedController {
     private final EmailConfirmedUseCase emailConfirmedUseCase;
+
     @PutMapping("/members/email/confirmed")
     @Operation(summary = "이메일 인증을 true로 바꾼다", description = "이메일 인증을 true바꾼다.")
-    public ApiResponse<ApiResponse.CustomBody<Void>> emailConfirmed(String email) {
+    public ApiResponse<ApiResponse.CustomBody<Void>> emailConfirmed(@RequestParam String email) {
         emailConfirmedUseCase.execute(email);
         return ApiResponseGenerator.success(HttpStatus.OK);
     }
-
 }
diff --git a/BE/exceed/src/main/java/com/gaebaljip/exceed/application/service/member/EmailConfirmedService.java b/BE/exceed/src/main/java/com/gaebaljip/exceed/application/service/member/EmailConfirmedService.java
index 99204fdfa..c6c7a8523 100644
--- a/BE/exceed/src/main/java/com/gaebaljip/exceed/application/service/member/EmailConfirmedService.java
+++ b/BE/exceed/src/main/java/com/gaebaljip/exceed/application/service/member/EmailConfirmedService.java
@@ -1,16 +1,19 @@
 package com.gaebaljip.exceed.application.service.member;
 
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
 import com.gaebaljip.exceed.application.domain.member.MemberEntity;
 import com.gaebaljip.exceed.application.port.in.member.EmailConfirmedUseCase;
 import com.gaebaljip.exceed.application.port.out.member.MemberPort;
+
 import lombok.RequiredArgsConstructor;
-import org.springframework.stereotype.Service;
-import org.springframework.transaction.annotation.Transactional;
 
 @Service
 @RequiredArgsConstructor
 public class EmailConfirmedService implements EmailConfirmedUseCase {
     private final MemberPort memberPort;
+
     @Override
     @Transactional
     public void execute(String email) {
diff --git a/BE/exceed/src/main/java/com/gaebaljip/exceed/common/security/config/SecurityConfig.java b/BE/exceed/src/main/java/com/gaebaljip/exceed/common/security/config/SecurityConfig.java
index d0fdc6ab1..327f881c8 100644
--- a/BE/exceed/src/main/java/com/gaebaljip/exceed/common/security/config/SecurityConfig.java
+++ b/BE/exceed/src/main/java/com/gaebaljip/exceed/common/security/config/SecurityConfig.java
@@ -68,18 +68,19 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
         http.authorizeRequests()
                 .requestMatchers(CorsUtils::isPreFlightRequest)
                 .permitAll()
-                .antMatchers(HttpMethod.GET, "/v1/members/checked/**")
+                .antMatchers(
+                        HttpMethod.GET,
+                        "/v1/members/checked/**",
+                        "/v1/members/email/checked",
+                        "/actuator/**",
+                        "/v1/health")
                 .permitAll()
-                .antMatchers(HttpMethod.GET, "/v1/members/email/checked")
+                .antMatchers(HttpMethod.PUT, "/v1/members/email/confirmed")
                 .permitAll()
                 .antMatchers(HttpMethod.POST, "/v1/members")
                 .permitAll()
                 .antMatchers(HttpMethod.POST, "/v1/auth/login")
                 .permitAll()
-                .antMatchers(HttpMethod.GET, "/actuator/**")
-                .permitAll()
-                .antMatchers(HttpMethod.GET, "/v1/health")
-                .permitAll()
                 .anyRequest()
                 .authenticated();