VellaVeto – Fail-closed runtime proxy for MCP tool calls, in Rust
Formal verification + 20 threat layers for AI agent security at sub-5ms latency.
The first locally-hosted, open-source LLM security proxy, written completely in Rust
Zero-code LLM firewall; heuristics under 1ms, optional Groq semantic layer.
LLM app builders, DevOps/SRE, enterprises running LLM APIs
LLM Guard · Lakera Guard · NeMo Guardrails
I've been working on Aegis.rs for a bit, and I wanted to share it. It's the first open-source Rust-based LLM security proxy (that I could find, at least).
I kept having the same issue, since existing LLM security tools are either Python libraries you have to manually integrate into your app, or cloud SaaS products that route your traffic through a third party (which you can't control), and i wanted something that just sat in the middle without touching my code or sending prompts anywhere.
So I built a transparent reverse proxy. You point your requests at localhost:8080 instead of your LLM endpoint and, so far, it catches prompt injections, jailbreaks, PII leakage, and other LLM attacks, blocking them before any malicious request even reaches the model. If a request is clean, it forwards it. If it's malicious, it blocks it. Zero code changes.
It runs two layers: a fast heuristic engine with 150+ hand-crafted (expandable) regex rules that runs in under 1ms (thanks to Actix-web), plus an AI judge using Groq for semantic analysis on ambiguous cases.
Can be easily shipped as a single binary with a live dashboard, hot-reloadable rules, and structured JSON logs.
Still v0.1 but it's working well enough for me to share its first version. The heuristic layer is fast enough for prod, and extending the rules is pretty easy.
Would love feedbacks (or contributions lol), especially from anyone dealing with LLMs' security and threat modeling :)
Formal verification + 20 threat layers for AI agent security at sub-5ms latency.
Subdomain routing means zero /etc/hosts edits—just change base_url and capture everything.
Wire-protocol proxy means zero code changes to existing LLM clients.
Transparent proxy blocks agent leaks to LLM APIs without touching agent code.
Fixes truncated JSON on the wire in ~10µs without SDK changes or retries.
Burp alternative with multi-engine crawling, but closed-source and crowded security tooling space.