Per TechCrunch, LiteLLM, a popular AI gateway provider used by millions of developers, has announced it is discontinuing its relationship with compliance startup Delve. This decision follows a recent security incident where the open-source version of LiteLLM was compromised by credential-stealing malware.
The incident occurred shortly after LiteLLM had obtained two security compliance certifications from Delve. These certifications are designed to assure users that a company has implemented robust security measures. However, allegations have surfaced that Delve may have misled customers by fabricating data and using auditors who allegedly rubber-stamped reports.
Despite denials from Delve's founder, a whistleblower has released further alleged evidence. In response, LiteLLM CTO Ishaan Jaffer stated on X that the company will pursue recertification with Vanta, a competitor to Delve, and will engage an independent third-party auditor.
Source: TechCrunch
