LiteLLM partners with Delve after major security scandal

LiteLLM, the creator of a popular AI gateway used by millions of developers, has publicly announced its decision to part ways with Delve, a controversial compliance company. This decision comes after malware, which stole identification data, infected the open-source version of LiteLLM last week.

Before this incident, LiteLLM had obtained two security certifications through Delve. These certifications are essential to ensure that companies have implemented measures to reduce the risk of incidents. However, Delve has been accused of deceiving its clients by falsifying compliance data and using auditors who validated their reports without real verification.

The founder of Delve has denied these accusations and offered free re-tests and audits to its clients. This denial prompted an anonymous whistleblower from Delve to bolster their claims, including publishing alleged receipts over the weekend.

On Monday, LiteLLM's CTO, Ishaan Jaffer, posted on X that his company would use Vanta for re-certification and would seek its own independent third-party auditor to verify its compliance controls. This decision clearly demonstrates LiteLLM's intent to restore trust after a tumultuous week.