diff --git a/mongodb.md b/mongodb.md
index 4bca273..e1761ea 100644
--- a/mongodb.md
+++ b/mongodb.md
@@ -47,4 +47,8 @@ hours_ago=$(date -d '8 hour ago' "+%s")
 query="{'class': ${product_class}, 'ts': {'\$gt': ${hours_ago} }}"
 
 mongo Health --quiet --eval "var collection='Stats', query=${query}, outputFormat='json', limit=3000, maxDepth=1" variety.js
-```
\ No newline at end of file
+```
+
+## Security
+- https://www.cyberciti.biz/faq/how-to-secure-mongodb-nosql-production-database/
+- http://thecodebarbarian.com/casting-mongodb-queries-with-archetype.html
\ No newline at end of file