The index is ciphertext.
Embeddings, IDs, and metadata are stored as ciphertext with per-record IVs and AEAD authentication. Compromise the disk, read nothing.
Billion-vector search on the storage you already operate. Encrypted in use, not just at rest.
At-rest encryption only protects against disk theft. CyborgDB keeps the index ciphertext through transit and search, too. Your KMS holds the only key that can unseal anything.
Embeddings, IDs, and metadata are stored as ciphertext with per-record IVs and AEAD authentication. Compromise the disk, read nothing.
Payloads are AEAD-encrypted by the client before transport. TLS is layered on top, but it isn't what's keeping the data safe.
Forward-secure ANN search runs on encrypted index nodes. Your server never holds plaintext embeddings or full index keys.
End-to-end encryption and per-tenant key custody answer the questions an enterprise security team is going to ask. Audits stop being a quarter-long detour.
Proxy mode sits in front of Postgres, Redis, or S3-compatible storage. Your data plane stays put. No new database for your team to staff.
Every tenant gets their own key. One bug in your filter logic doesn't cross a cryptographic boundary, because the bytes are unreadable to begin with.
On wiki-all-1M at 99% recall, CyborgDB beats Weaviate, Milvus, Elasticsearch, Qdrant, LanceDB and pgvector — encrypted.
| Database | Recall (%) | QPS |
|---|---|---|
| CyborgDB (encrypted) | 72.8 | 792 |
| CyborgDB (encrypted) | 76.3 | 744 |
| CyborgDB (encrypted) | 81.3 | 672 |
| CyborgDB (encrypted) | 85.9 | 638 |
| CyborgDB (encrypted) | 88.8 | 567 |
| CyborgDB (encrypted) | 91.8 | 499 |
| CyborgDB (encrypted) | 94.0 | 433 |
| CyborgDB (encrypted) | 96.2 | 351 |
| CyborgDB (encrypted) | 97.3 | 321 |
| CyborgDB (encrypted) | 98.2 | 266 |
| CyborgDB (encrypted) | 98.6 | 245 |
| CyborgDB (encrypted) | 99.0 | 220 |
| CyborgDB (encrypted) | 99.4 | 182 |
| CyborgDB (encrypted) | 99.8 | 151 |
| Qdrant | 89.5 | 113 |
| Qdrant | 95.2 | 89 |
| Qdrant | 97.8 | 68 |
| Qdrant | 99.1 | 45 |
| Qdrant | 99.4 | 35 |
| Qdrant | 99.7 | 27 |
| Qdrant | 99.9 | 17 |
| Weaviate | 77.2 | 840 |
| Weaviate | 83.4 | 737 |
| Weaviate | 86.9 | 715 |
| Weaviate | 91.3 | 600 |
| Weaviate | 93.3 | 533 |
| Weaviate | 95.9 | 430 |
| Weaviate | 97.5 | 349 |
| Weaviate | 98.6 | 266 |
| Weaviate | 98.9 | 224 |
| Weaviate | 99.4 | 176 |
| Weaviate | 99.8 | 108 |
| Milvus | 92.6 | 66 |
| Milvus | 96.7 | 61 |
| Milvus | 98.3 | 55 |
| Milvus | 99.1 | 47 |
| Milvus | 99.5 | 41 |
| Milvus | 99.7 | 29 |
| Elasticsearch | 81.4 | 303 |
| Elasticsearch | 83.4 | 293 |
| Elasticsearch | 89.6 | 278 |
| Elasticsearch | 90.8 | 276 |
| Elasticsearch | 94.6 | 241 |
| Elasticsearch | 95.2 | 240 |
| Elasticsearch | 96.6 | 218 |
| Elasticsearch | 97.5 | 198 |
| Elasticsearch | 97.8 | 184 |
| Elasticsearch | 98.7 | 161 |
| Elasticsearch | 99.2 | 131 |
| Elasticsearch | 99.2 | 129 |
| Elasticsearch | 99.4 | 120 |
| Elasticsearch | 99.4 | 117 |
| pgvector | 81.4 | 835 |
| pgvector | 89.2 | 497 |
| pgvector | 94.1 | 402 |
| pgvector | 96.7 | 283 |
| pgvector | 97.6 | 190 |
| pgvector | 98.5 | 130 |
| pgvector | 99.1 | 82 |
| pgvector | 99.5 | 47 |
| pgvector | 99.6 | 38 |
| LanceDB | 94.2 | 282 |
| LanceDB | 97.5 | 174 |
| LanceDB | 99.0 | 101 |
| LanceDB | 99.3 | 90 |
Single-threaded runs on the ann-benchmarks harness, c8g.4xlarge · May 2026.
The Cyborg–NVIDIA Enterprise RAG Blueprint is a reference architecture for deploying secure AI applications at NVIDIA scale. Cyborg is one of eight companies NVIDIA invited to author an Enterprise Blueprint.
NVIDIA NIMs handle the inference. CyborgDB handles encrypted-in-use retrieval across multimodal corpora.
A single Docker image, your existing storage and KMS, and one import change.
Already on Pinecone, Weaviate, or Milvus? Bring your workload to a thirty-minute call. We'll show you how CyborgDB performs against it. Free for up to 1M vectors.