#llm-security
-
How to Secure Vector Database Access in RAG Systems
Vector stores in RAG pipelines carry auth gaps, embedding inversion risk and cross-tenant exposure. How to lock down both the read and write path.
-
AI Security Review: A Checklist for LLM Systems
An AI security review checklist for LLM systems: trust boundaries, data flows, control mapping, evidence to demand, and the findings reviewers miss.
-
How Prompt Injection Detection Works: Classifiers, Monitors
How prompt injection detection works, from input scanning and embedding classifiers to fine-tuned guardrails and runtime monitoring, with the trade-offs.
-
OWASP LLM Top 10 Mitigation Guide: Controls for Every Risk
A practitioner's OWASP LLM Top 10 mitigation guide covering all ten 2025 risk categories, from prompt injection to unbounded consumption, with controls.
-
PyRIT Review: Microsoft's AI Red Teaming Framework
A review of PyRIT, Microsoft's open-source AI red teaming framework: its target, orchestrator, converter, scorer and memory design, and multi-turn attacks.
-
Rebuff: Open-Source Prompt Injection Defense, Layer by Layer
Rebuff is a self-hosted prompt injection detector with four layers: heuristics, LLM-based detection, a vector database of past attacks, and canary tokens.
-
Lakera Guard: Prompt Injection Detection in Practice
Lakera Guard is built for prompt injection detection rather than content moderation. What the documentation shows about coverage, latency, and cost.