%20scale(0.0817%20-0.0817)'%20fill='%2307080a'%3e%3cpath%20d='M66%200%20L66%20700%20L370%20700%20Q436%20700%20485%20677%20Q534%20654%20561%20612%20Q588%20570%20588%20513%20L588%20501%20Q588%20438%20558%20399%20Q528%20360%20484%20342%20L484%20324%20Q524%20322%20546%20296.5%20Q568%20271%20568%20229%20L568%200%20L436%200%20L436%20210%20Q436%20234%20423.5%20249%20Q411%20264%20382%20264%20L198%20264%20L198%200%20ZM198%20370.28%20L368.64%20370.28%20Q419.4%20370.28%20448.02%20399.35%20Q476.64%20428.42%20476.64%20476.3%20L476.64%20487.7%20Q476.64%20535.58%20448.56%20564.65%20Q420.48%20593.72%20368.64%20593.72%20L198%20593.72%20Z'/%3e%3c/g%3e%3cg%20transform='translate(130%2038)%20scale(0.86835)'%3e%3cg%20transform='translate(0%2070)%20scale(0.1%20-0.1)'%20fill='%2307080a'%3e%3cpath%20d='M66%200L66%20700L370%20700Q436%20700%20485%20677Q534%20654%20561%20612Q588%20570%20588%20513L588%20501Q588%20438%20558%20399Q528%20360%20484%20342L484%20324Q524%20322%20546%20296.5Q568%20271%20568%20229L568%200L436%200L436%20210Q436%20234%20423.5%20249Q411%20264%20382%20264L198%20264L198%200ZM198%20384L356%20384Q403%20384%20429.5%20409.5Q456%20435%20456%20477L456%20487Q456%20529%20430%20554.5Q404%20580%20356%20580L198%20580Z'%20transform='translate(0%200)'/%3e%3cpath%20d='M296%20-14Q222%20-14%20165.5%2017.5Q109%2049%2077.5%20106.5Q46%20164%2046%20242L46%20254Q46%20332%2077%20389.5Q108%20447%20164%20478.5Q220%20510%20294%20510Q367%20510%20421%20477.5Q475%20445%20505%20387.5Q535%20330%20535%20254L535%20211L174%20211Q176%20160%20212%20128Q248%2096%20300%2096Q353%2096%20378%20119Q403%20142%20416%20170L519%20116Q505%2090%20478.5%2059.5Q452%2029%20408%207.5Q364%20-14%20296%20-14ZM175%20305L407%20305Q403%20348%20372.5%20374Q342%20400%20293%20400Q242%20400%20212%20374Q182%20348%20175%20305Z'%20transform='translate(614%200)'/%3e%3cpath%20d='M270%20-14Q211%20-14%20159.5%2015.5Q108%2045%2077%20102Q46%20159%2046%20240L46%20256Q46%20337%2077%20394Q108%20451%20159%20480.5Q210%20510%20270%20510Q315%20510%20345.5%20499.5Q376%20489%20395%20473Q414%20457%20424%20439L442%20439L442%20700L568%20700L568%200L444%200L444%2060L426%2060Q409%2032%20373.5%209Q338%20-14%20270%20-14ZM308%2096Q366%2096%20405%20133.5Q444%20171%20444%20243L444%20253Q444%20325%20405.5%20362.5Q367%20400%20308%20400Q250%20400%20211%20362.5Q172%20325%20172%20253L172%20243Q172%20171%20211%20133.5Q250%2096%20308%2096Z'%20transform='translate(1173%200)'/%3e%3cpath%20d='M46%200L46%20116L138%20116L138%20584L46%20584L46%20700L334%20700Q475%20700%20548.5%20628.5Q622%20557%20622%20416L622%20284Q622%20143%20548.5%2071.5Q475%200%20334%200ZM270%20120L336%20120Q416%20120%20453%20162Q490%20204%20490%20280L490%20420Q490%20497%20453%20538.5Q416%20580%20336%20580L270%20580Z'%20transform='translate(1793%200)'/%3e%3cpath%20d='M46%200L46%20116L138%20116L138%20584L46%20584L46%20700L406%20700Q470%20700%20517.5%20678.5Q565%20657%20591.5%20617.5Q618%20578%20618%20523L618%20513Q618%20465%20600%20434.5Q582%20404%20557.5%20387.5Q533%20371%20511%20364L511%20346Q533%20340%20559%20323.5Q585%20307%20603.5%20276Q622%20245%20622%20195L622%20185Q622%20127%20595%2085.5Q568%2044%20520.5%2022Q473%200%20410%200ZM270%20120L394%20120Q437%20120%20463.5%20141Q490%20162%20490%20201L490%20211Q490%20250%20464%20271Q438%20292%20394%20292L270%20292ZM270%20412L392%20412Q433%20412%20459.5%20433Q486%20454%20486%20491L486%20501Q486%20539%20460%20559.5Q434%20580%20392%20580L270%20580Z'%20transform='translate(2419%200)'/%3e%3c/g%3e%3c/g%3e%3c/svg%3e){kind=small}
Blog · Tag
#vault
3 posts tagged with this.
- May 2026 Security · · 12 min Threat model: what RedDB protects against (and what it doesn't) An honest STRIDE walkthrough of the RedDB engine and vault. What the database protects against (cold-storage breach, replicated-secret leakage, key compromise during rotation) and what it does not (compromised application process, host-level side channels, malicious operator). Gaps are named, not hidden.
- Security · · 7 min Per-row encryption with zero-downtime key rotation How the vault keeps reads hot during rotation, and the one knob you should never touch in production.
- Security · · 9 min BYOK, KMS, and the boring parts of multi-tenant secrets AWS KMS, GCP KMS, and HSM integration for RedDB — plus the three failure modes nobody writes about until they happen at 03:00.
RedDB Cloud
Join the private beta.
One-click managed deploy. Free during beta. Founding pricing locked at GA.