Secure RAG

3 articles

Agent Security Agentic Permissions AI Agent Security AI Governance Evidence Ai Impact AI Incident Response Ai Integration AI Red Teaming AI SDLC & Product Security AI Security AI Security Engineer Career Ai Security Engineering AI Security Foundations AI Security Monitoring AI Security Tools AI Supply Chain AI System Inventory Architecture and Trust Boundaries Ats Systems Attack Career Development Corporate Culture Corporate Culture And Leadership Culture Security Cyber Security cybersecurity Cybersecurity Strategy Data Exposure and Privacy Defend Detection Engineering Distributed Governance Distributed Systems Economic Governance Education Evaluation and Regression Testing Evidence Evidence Based Governance Future of Work governance Governance And Resilience Governance Evidence and Customer Trust Governance, Risk & Compliance Hiring & Talent Hiring Strategy Incident Response Incident Response & Observability Leadership And Governance LLM Application Security Logging and Telemetry Map MLOps & Platform Security Model and Provider Risk Model Supply Chain Operational Risk Organizational Governance Organizational Resilience Platform Governance Privacy & Data Protection Prompt Injection Prompt Injection & Context Security Psychological Safety psychometrics RAG Authorization RAG Security Recruitment And Talent Red Teaming & Evaluations red-team seceng-workbench Secure Architecture & Design Secure RAG Security Architecture Stochastic Governance Stochastic Resilience Systemic Resilience Talent Acquisition Talent Engineering Team Engineering Technical Intelligence Threat Modeling Toolchain Integrity Training & Workshops Vendor Risk & Procurement Workforce Science Workplace Evolution

Defend

Vector Database Security: Access Control, Tenant Isolation, Poisoning, and Forensic Logging

Vector database security requires the same seriousness as other production data infrastructure, with additional attention to embeddings, metadata filtering, retrieval authorization, tenant isolation, poisoning resistance, deletion workflows, and forensic logging.

11 min read

Attack

RAG Data Leakage: How Private Documents Escape Through Retrieval, Embeddings, and Context Windows

RAG data leakage happens when retrieval, embeddings, metadata, prompt context, generated answers, logs, or deletion workflows expose information outside intended boundaries. Secure RAG requires authorization-aware retrieval, tenant isolation, metadata filtering, sensitive-data minimization, protected traces, retention limits, and incident-ready evidence.

12 min read

Map

Secure RAG Architecture: Threat Modeling Retrieval-Augmented Generation Systems

RAG is not just search with a model on top. It is a controlled knowledge path. If retrieval is not governed, the model can be steered by the wrong documents, the wrong tenant, or the wrong metadata.

3 min read