# Security

KMS can run as an in-process library or as an HTTP service. Security posture depends on deployment configuration.

Start here:

- [Overview](overview.md)
- [Security stance](security/stance.md)
- [Operations](operations.md)
- [Local vs remote KMS](local-vs-remote.md)
- [Authorization and bindings](authz-bindings.md)
- [Sessions](sessions.md)
- [Authentication factors](factors.md)
- [Additional authenticated data](aad.md)
- [Root master keys](rmk.md)
- [Fallback recovery](fallback-recovery.md)
- [Crash dumps](security/crash-dumps.md)