Research

LiteLLM's Security Record

Run LiteLLM like any internet-facing service that holds credentials. Pin the image by digest to a supported minor line, since BerriAI's own pipeline signed October's malicious release, and find every CI image and agent tool that installs it.

AI Gateways in Practice

Teams adopt LiteLLM for spend control and one endpoint for every coding tool, and leave it over stability under load. Public accounts describe budgets, failures, and moves to OpenRouter, Portkey, or custom code.

Also covers OpenRouter and Portkey