Back to browse
GitHub Repository

The first locally-hosted, open-source LLM security proxy, written completely in Rust

48 starsRust

Aegis.rs, the first open source Rust-based LLM security proxy

by ParzivalHack·Feb 19, 2026·2 points·2 comments

AI Analysis

●●SolidSolve My ProblemSlick

Zero-code LLM firewall; heuristics under 1ms, optional Groq semantic layer.

Strengths
  • True zero-code deployment: reverse proxy, one binary, no integration pain vs LLM Guard library
  • Sub-millisecond heuristic layer; hot-reloadable rules, optional AI-based semantic check
  • Self-contained: Rust + Actix-web, no Python runtime, local dashboard
Weaknesses
  • Heuristic rules are hand-crafted regex (150+) and may miss novel attacks; semantic layer adds latency/cost
  • Niche pain point: most shops use LLM API providers' own guardrails; adoption unproven
Category
Target Audience

LLM app builders, DevOps/SRE, enterprises running LLM APIs

Similar To

LLM Guard · Lakera Guard · NeMo Guardrails

Post Description

Hey HN,

I've been working on Aegis.rs for a bit, and I wanted to share it. It's the first open-source Rust-based LLM security proxy (that I could find, at least).

I kept having the same issue, since existing LLM security tools are either Python libraries you have to manually integrate into your app, or cloud SaaS products that route your traffic through a third party (which you can't control), and i wanted something that just sat in the middle without touching my code or sending prompts anywhere.

So I built a transparent reverse proxy. You point your requests at localhost:8080 instead of your LLM endpoint and, so far, it catches prompt injections, jailbreaks, PII leakage, and other LLM attacks, blocking them before any malicious request even reaches the model. If a request is clean, it forwards it. If it's malicious, it blocks it. Zero code changes.

It runs two layers: a fast heuristic engine with 150+ hand-crafted (expandable) regex rules that runs in under 1ms (thanks to Actix-web), plus an AI judge using Groq for semantic analysis on ambiguous cases.

Can be easily shipped as a single binary with a live dashboard, hot-reloadable rules, and structured JSON logs.

Still v0.1 but it's working well enough for me to share its first version. The heuristic layer is fast enough for prod, and extending the rules is pretty easy.

Would love feedbacks (or contributions lol), especially from anyone dealing with LLMs' security and threat modeling :)

Similar Projects