#threat-model

Security · 17 · 12 min

Threat model: what RedDB protects against (and what it doesn't)

An honest STRIDE walkthrough of the RedDB engine and vault. What the database protects against (cold-storage breach, replicated-secret leakage, key compromise during rotation) and what it does not (compromised application process, host-level side channels, malicious operator). Gaps are named, not hidden.