Drop-in AI security proxy. Redacts PII, blocks prompt injection, enforces spend limits — before prompts reach any LLM.
OpenAI SDK compatible. Change your base URL. Two lines of code.

Get Started · Docs · OSS vs Cloud · Managed Cloud (1M free credits)

Every LLM application we audited had the same problem: sensitive data flowing directly from user prompts to third-party AI providers, unfiltered.

AI Security Gateway is the control layer that sits between your application and any LLM provider — scanning every request for PII, secrets, and prompt injection attacks before anything reaches the model.

    ┌──────────┐           ┌─────────────────────────────┐           ┌──────────────┐
    │          │  POST     │        AISG Gateway          │           │              │
    │ Your App ├──────────▸│  1. Auth (API key)           │──────────▸│ LLM Provider │
    │          │           │  2. DLP scan (Presidio)      │           │(OpenAI/Groq) │
    │          │◂──────────│  3. Block or redact PII      │◂──────────│              │
    └──────────┘  response │  4. Forward to upstream      │  response └──────────────┘
                           │  5. Return with metadata     │
                           └─────────────────────────────┘

• PII Redaction — 13 entity types out of the box: emails, phone numbers, credit cards, SSNs, names, locations, IP addresses, and more
• Secret Detection — API keys (OpenAI, Anthropic, Google, AWS), GitHub tokens, private keys, Slack webhooks
• Prompt Injection Blocking — jailbreaks, DAN variants, instruction overrides, system prompt extraction, developer mode exploits
• OpenAI SDK Compatible — drop-in replacement, change one line of code
• Multi-Provider Routing — BYOK, swap providers in config
• Fail-Closed Security — if the safety layer is down, requests are blocked, never forwarded unscanned
• Zero Cloud Dependencies — runs entirely on your infrastructure via Docker
• No Telemetry — zero external calls, no analytics, no phone-home

git clone https://github.com/aisecuritygateway/aisecuritygateway.git
cd aisecuritygateway
cp .env.example .env        # add your provider key
docker compose up --build   # gateway + presidio

curl http://localhost:8000/v1/chat/completions \
  -H "Authorization: Bearer change-me-to-a-real-secret" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "llama-4-maverick",
    "messages": [{"role": "user", "content": "My email is alice@acme.com and SSN is 123-45-6789"}]
  }'

The gateway redacts the email and SSN before forwarding. The response includes aisg_metadata.pii_detected: true.

13 entity types self-hosted — the managed cloud extends this to 30+ entity types with OCR image scanning, street addresses, crypto addresses, medical identifiers, and more.

• Fail-closed by default — if Presidio is unreachable, requests are blocked, never forwarded unscanned
• Auth by default — API key authentication enabled out of the box
• No telemetry — zero external calls, no analytics, no phone-home
• Secret scrubbing — structured logs automatically mask API keys and tokens
• Rate limiting — token bucket per API key (default 10 req/sec)

Designed for teams building GDPR, HIPAA, and SOC 2-compliant AI applications. Prompts are never stored.

This repo gives you the core AI security proxy. The managed AI Security Gateway Cloud adds everything you need to run it across teams at scale.

Skip the setup? aisecuritygateway.ai — everything here plus dashboards, smart cost routing, and 8+ providers. 1M free credits, no credit card.

⭐ Star the repo · Learn more · Try the managed cloud free

_{Security · License (Apache 2.0) · Crunchbase · LinkedIn · X / Twitter · YouTube}

_{Built by Datum Fuse LLC — making AI safe by default.}