Skip to content

1.0.0

Choose a tag to compare

View all tags
@alpha-cen alpha-cen released this 06 May 21:09
· 20 commits to main since this release
v1.0.0
fd5937b

AISG v1.0.0 — Production Release

The AI Security Gateway is production-ready. This release marks the first stable version of the self-hosted AI firewall and LLM proxy.

Core Features

AI Firewall (DLP)

  • 13 PII entity types detected and redacted via Microsoft Presidio — emails, phone numbers, credit cards, SSNs, names, locations, IP addresses
  • 5 secret recognizers — OpenAI/Anthropic/GCP API keys, AWS access keys, RSA/EC private keys, GitHub tokens (PAT, OAuth), Slack webhooks
  • Prompt injection blocking — detects and blocks jailbreak attempts, instruction overrides, system prompt extraction, DAN attacks, developer mode exploits
  • Configurable policy: redact (replace with [REDACTED]) or block (reject the request entirely)
  • Adjustable confidence threshold per deployment

LLM Proxy

  • OpenAI SDK compatible — drop-in replacement, change one line of code
  • Multi-provider routing via LiteLLM (Groq, OpenAI, and any LiteLLM-supported provider)
  • Header-based provider and model override (x-provider, x-model)
  • Structured aisg_metadata in every response (provider selected, latency, PII findings, action taken)

Security

  • Fail-closed by default — if Presidio is unreachable, requests are blocked, never forwarded unscanned
  • API key authentication enabled out of the box
  • Token bucket rate limiting per API key (default 10 req/sec)
  • Structured logs with automatic secret scrubbing
  • Zero telemetry — no external calls, no analytics, no phone-home

Deployment

  • Single docker compose up — gateway + Presidio orchestrated with health checks
  • Environment variable resolution in gateway.yaml (${VAR} / ${VAR:-default})
  • Configurable via 3 files: gateway.yaml, providers.json, .env

What's Next

See the roadmap for upcoming features.

The managed cloud version extends this with 28+ PII entity types, OCR image scanning, smart cost routing across 8+ providers, automatic failover, per-project budget enforcement, dashboards, and analytics — 1M free credits, no credit card required.

Links

Apache 2.0 — Copyright 2026 Datum Fuse LLC

Assets 2
Loading