LiteLLM, creator of a popular AI gateway used by millions of developers, has publicly announced that she abandons compliance startup Delve and redoes her security certifications with another company and an auditor. This announcement comes after the open source version of LiteLLM suffered horrible credential stealing malware last week.
Prior to the incident, LiteLLM had obtained two security compliance certifications by hiring AI compliance startup Delve. These certifications aim to verify that a company has procedures in place to minimize potential incidents.
Delve was accused of misleading clients about their true compliance by allegedly generating false data and using auditors who approved their reports. The founder of Delve denied these allegations and offered free testing and audits to all its customers. This denial encouraged the anonymous Delve whistleblower to redouble his efforts, including the publication of purported receipts over the weekend.
Monday, Ishaan Jaffer, CTO of LiteLLM job on X that his company will use Delve’s competitor Vanta to recertify and find its own independent third-party auditor to verify its compliance controls. After such a difficult week, LiteLLM is voting with its feet.