12 section
Security & Access
The LLM-specific attack surface — injection through retrieved content, extraction, unsafe tool output — plus the access-control machinery that keeps one tenant's data out of another tenant's answers.
What is in here
Read LLM Security first: it explains why prompt injection is not solvable by prompting, and maps the threats onto the OWASP LLM Top 10. Access Control then covers the parts an audit actually checks — RBAC and ABAC, tenant filtering at the vector store, key rotation, audit logs. The Multi-Tenant SaaS case study is the applied version of both.
01
10 min
LLM Security
Prompt injection, indirect injection through retrieved content, data extraction and unsafe output, mapped onto the OWASP LLM Top 10 with layered defenses and red-team tests.
securityguardrails
02
6 min
Access Control
Authentication, RBAC and ABAC, tenant isolation at the vector store, API key lifecycle, and the audit log a compliance team will eventually ask to see.
access-controlsecuritymulti-tenancy