Operations Manual
Securing DuckDB
DuckDB is quite powerful, which can be problematic, especially if untrusted SQL queries are run, e.g., from public-facing user inputs.
This page lists some options to restrict the potential fallout from malicious SQL queries.  
The approach to securing DuckDB varies depending on your use case, environment, and potential attack models.
Therefore, consider the security-related configuration options carefully, especially when working with confidential data sets.  
If you plan to embed DuckDB in your application, please consult the [“Embedding DuckDB”](#docs:operations_manual:embedding_duckdb) page.