mirror of
https://github.com/hanzoai/flow.git
synced 2026-10-17 01:29:18 +00:00
zeekay
d650dd60f0
Docs corpus (Langflow->Hanzo Flow, upstream URLs langflow-ai/langflow->hanzoai/ flow, docs.langflow.org->docs.hanzo.ai), starter-project template help-URLs, CI workflows, and test files. Remaining 'langflow' repo-wide is now dominated by LANGFLOW_* env-var names + langflow_ settings fields — the config-boundary layer deliberately preserved pending a coordinated FLOW_/HANZO_ alias-with-fallback (renaming them blind breaks every deployment).
60 lines
3.7 KiB
Plaintext
60 lines
3.7 KiB
Plaintext
---
|
|
title: Security
|
|
slug: /security
|
|
---
|
|
|
|
The Hanzo Flow UI is an IDE and code execution platform, which means that Hanzo Flow is inherently capable of executing arbitrary, developer-provided code.
|
|
By design, the Hanzo Flow UI includes a code editor allowing developers to author and execute arbitrary Python with full access to the host Hanzo Flow backend process, filesystem, and network.
|
|
In addition, some components wrap and use code execution, including use of AI models to generate code to be executed based
|
|
on user input.
|
|
|
|
Hanzo Flow neither enforces isolation between users within a single Hanzo Flow process, nor restricts access to the local disk or network resources. Flow visibility and user access controls are designed for usability, not security enforcement. Users can access underlying database connections and system resources directly. For multi-tenant deployments, Hanzo Flow relies on infrastructure-level security rather than application-level isolation, which means it is your responsibility to enforce tenant isolation.
|
|
|
|
:::warning
|
|
You are responsible for the following:
|
|
|
|
* Enforcing comprehensive infrastructure isolation.
|
|
* Running flows safely, particularly flows that use LLM-generated code or user inputs that could contain user-submitted code.
|
|
* Ensuring that end-user interactions with Hanzo Flow-backed APIs are secure from end-to-end, including data at rest and in transit.
|
|
:::
|
|
|
|
## Secure Hanzo Flow during local development
|
|
|
|
Hanzo Flow is a code execution platform with full access to your local system.
|
|
You are responsible for ensuring the safety of flows you execute.
|
|
|
|
In the event that Hanzo Flow could execute untrusted or LLM-generated code, consider [blocking custom component execution](./deployment-block-custom-components.mdx) and running Hanzo Flow in an isolated and containerized execution environment.
|
|
For more information, see [Containerize a Hanzo Flow application](/develop-application).
|
|
|
|
## Secure first-party deployments
|
|
|
|
When you are serving APIs backed by flows that you or your organization authored, you are responsible for ensuring Hanzo Flow-based APIs provide security to your end users.
|
|
|
|
Follow industry best practices for APIs:
|
|
|
|
* Use a secure API gateway to provide authentication and authorization
|
|
* Ensure user data is appropriately isolated
|
|
* Sanitize inputs and outputs against XSS and injection attacks, including regex patterns to prevent ReDoS vulnerabilities
|
|
|
|
For more information on setting up a reverse proxy, see [Deploy Hanzo Flow with Nginx and SSL](/deployment-nginx-ssl).
|
|
For more information on authentication configuration, see [API keys and authentication](/api-keys-and-authentication).
|
|
|
|
## Secure third-party deployments
|
|
|
|
If you provide Hanzo Flow as a service to third parties, you must assume that any code executed by Hanzo Flow could be potentially malicious.
|
|
|
|
Hanzo Flow provides no isolation between tenants, so it's your responsibility to enforce isolation at the infrastructure level.
|
|
|
|
* Use process-level isolation to prevent tenants from sharing a single Hanzo Flow process.
|
|
* Use disk-level isolation to prevent shared access to writable persistent storage.
|
|
* Use network-level isolation to prevent access to private networks.
|
|
* Use database-level isolation to prevent access to or modification of shared database resources.
|
|
|
|
Authentication and authorization must be provided and enforced outside of the Hanzo Flow container.
|
|
For shared services, such as databases, enforce access limitations externally through credentials and security policies.
|
|
|
|
For more information, see [Best practices for Hanzo Flow on Kubernetes](/deployment-prod-best-practices).
|
|
|
|
## Security bulletin
|
|
|
|
For more information, see the [Hanzo Flow Security Policy](https://github.com/hanzoai/flow/blob/main/SECURITY.md). |