Home / Technology / LiteLLM Ditches Delve Amid Security Certification Scandal
LiteLLM Ditches Delve Amid Security Certification Scandal
31 Mar
Summary
- LiteLLM ends partnership with Delve due to credential-stealing malware.
- Delve faces accusations of fabricating data and rubber-stamping reports.
- LiteLLM will use Vanta for re-certification and an independent auditor.
LiteLLM, a widely used AI gateway provider, announced it is terminating its relationship with compliance startup Delve. This decision follows a recent incident where the open-source version of LiteLLM experienced a credential-stealing malware attack.
Previously, LiteLLM had secured two compliance certifications through Delve. However, allegations have surfaced accusing Delve of providing misleading compliance information by allegedly generating fake data and utilizing auditors who allegedly approved reports without proper scrutiny. These accusations were intensified by a whistleblower releasing purported evidence.
In response, LiteLLM's CTO announced on Monday that the company will pursue re-certification with Vanta, a competitor to Delve. Furthermore, LiteLLM plans to select its own independent third-party auditor to validate its compliance measures. This action underscores LiteLLM's commitment to strengthening its security protocols after the recent events.
