Skip to main content
LiteLLMProduct page

LiteLLM Signals

What teams building AI features on LiteLLM report, with every finding tied to its evidence.

Read the findings

What the evidence says

Whose sources count

Practitioner sentiment, teams and leaders

+8 Mixed from 37 sources that take a side

How this figure is made

Mixed overall signal, net 8 points

From 36 authors in 33 discussions. Run a pilot on one service's model traffic to measure added latency, failed fallbacks and how closely its spend records match each provider's bill.

Analyzed
137 total sources
Top praise
Virtual Keys, Budgets & Spend Tracking (7 of 10 sources) See praise evidence
Top concern
Stability & Code Quality (11 of 11 sources) See concern evidence

Jan 2025 to Oct 2026.

125 sources from practitioners, by month and sentiment.

Teams and leaders are mixed, and most of the mixed accounts are bug reports. Okta and Zalando run LiteLLM as the company gateway, and teams on Reddit cap each team key with a daily hard stop. Critics report budgets that track spend but do not block requests, and team keys that get messy past a handful of teams. Every team and leadership source that discusses stability raises it. On performance at scale, 7 of 9 raise concerns, and 5 of the 9 who describe a gateway choice picked another tool or their own code.

Positive, mixed and negative sources

The score counts them as 9 positive, 21 mixed and 6 negative votes, one per author. See How the numbers work.

See the evidence

Below: 4 praise themes, 3 concerns, 2 close to agreement and 2 disagreements.

Findings

Counted for Teams and technical leaders, from 47 sources. Change group

What practitioners praise

Every capability practitioners describe positively, ranked by how many sources say so. Open one to read who said it.

  1. Virtual Keys, Budgets & Spend Tracking7 of 10 sources on it praise itVirtual keys carry budgets and rate limits for people, teams, or apps. Spend records identify each key, user, and team.

    Counted for Teams and technical leaders.

    Positive, 7

    1. Positive

      9dev, Hacker News commenter

      Comment on: Litelm: LiteLLM Without the BloatHacker News comment

      Deploying LiteLLM in their platform for its reliable per-customer token spend tracking across services, the features slimmer forks remove.

      Published Sep 11, 2026self-described: Platform tracking token spend per customer

    2. Positive

      kgeist, Hacker News commenter

      Comment on: LLMCap - A proxy that hard-stops LLM API calls when you hit a dollar capHacker News comment

      Their team self-hosts LiteLLM for free and sets budgets per day or week.

      Published May 19, 2026self-described: Self-hosted gateway at work

    3. Positive

      intothemild, Hacker News commenter

      Comment on: AI subscriptions are a ticking time bomb for enterpriseHacker News comment

      Put self-hosted Qwen, Gemma, and DeepSeek behind LiteLLM to watch token use and bring inference cost in-house, and the company is rolling it out more widely.

      Published May 17, 2026self-described: Company pilot: self-hosted Qwen, Gemma, and DeepSeek behind LiteLLM

    4. Mixed

      Alina Dallmann, Speaker at PyData Berlin 2025

      One API to Rule Them All? LiteLLM in ProductionConference talk, PyData Berlin 2025 (PyData YouTube channel)

      Ran LiteLLM's proxy for a university chatbot with cost tracking, budgets and load balancing, but hit custom-budget limits, slow new-model support and bugs in new features.

      "…deploying the the proxy server we already get an admin user interface delivered as well. Um this is a screenshot um of one example of it. Um here we can do most of the process I just described earlier to assign budgets…"
      Transcript excerpt, at 9:47Partial support

      Published Nov 23, 2025self-described: Privacy-preserving university RAG chatbot for students and employees

    5. Mixed

      Bartosz Ocytko, Executive Principal Engineer, Zalando

      Agentic Engineering at Zalando: a snapshotEngineering blog post, Zalando Engineering Blog

      Zalando likes LiteLLM for its extensibility, using call hooks for anonymized cost tracking and client version checks. Stability and memory leaks force a restart every 20,000 requests, and the proxy serves 2,000 monthly users on six small pods.

      "…our ML platform team deployed in January 2024 a LiteLLM based API proxy with access to models from different providers (now: OpenAI, AWS Bedrock, and Google Vertex)."
      Excerpt, Bartosz Ocytko

      Published Aug 14, 2026Zalando's company-wide LLM proxy, run by its ML platform team since January 2024

    6. Positive

      lbreakjai, At a company that rolled out LiteLLM (as stated)

      Comment on: Kimi K2.7 Code is generally available in GitHub CopilotHacker News comment

      Their company canceled everyone's individual AI plans and rolled LiteLLM out internally instead.

      Published Jul 2, 2026self-described: Company-wide rollout replacing per-seat AI plans

    7. Positive

      Thoughtworks delivery teams, Technology Radar

      LiteLLM (Technology Radar, Languages & Frameworks)Technology Radar entry, Thoughtworks

      Thoughtworks teams increasingly adopt LiteLLM as a sensible default gateway for retries, failover, load balancing, and budgets. Provider-specific features still need provider-specific parameters, and drop_params silently discards unsupported ones.

      Published Apr 15, 2026self-described: Thoughtworks client teams that run LiteLLM as the AI gateway for enterprise applications

    Mixed or negative, 3

    1. Mixed

      Jack Wildman, Senior Software Engineer, FutureSearch

      LiteLLM made us accidentally make our product free for a weekEngineering blog post, FutureSearch blog

      A LiteLLM upgrade began stripping caller tags without an error, so FutureSearch billed no usage for 6.5 days. It calls the default-on change a footgun, added alerts, and stayed on LiteLLM at v1.86.4.

      "A routine LiteLLM version bump turned off our usage billing for six and a half days. We had many alerts for runaway spend, but not for spend dropping to zero."
      Excerpt, Jack Wildman

      Published Jun 10, 2026FutureSearch's research-agent platform, which bills users from LiteLLM spend logs

    2. Mixed

      lin0703, GitHub user

      [Bug]: Budget enforcement bypassed in v1.82.3 for key/user max_budget despite spend exceeding max_budgetGitHub issue

      On a fresh v1.82.3 deployment, key and user max_budget were stored and spend tracked, but requests were not blocked once spend passed the budget.

      Published Apr 28, 2026self-described: Fresh v1.82.3 deployment compared with v1.81.0

    3. Negative

      smcleod, Hacker News commenter

      Comment on: Control LLM Spend and Access with any-LLM-gatewayHacker News comment

      After deploying LiteLLM Proxy in several places, plans to swap it for Bifrost: budget limits not enforced, parameter bugs, latency, and slow responses to reported fixes.

      Published Nov 19, 2025self-described: Deployed LiteLLM Proxy in a number of locations

    GILD's fact checks, which don't count as sources

    Checked Oct 12, 2026.Every LiteLLM budget is enforced against spend read from the database, so none caps anything on a deployment without one. Budget reservation is on by default; fail-closed budget and rate-limit enforcement is opt-in. Budgets and rate limits

    Open them in the record
  2. Self-Hosted ControlAll 5 sources on it praise itTeams run the open-source gateway in their infrastructure with no per-token fee and keep prompts in their network.

    Counted for Teams and technical leaders.

    1. Mixed

      Bartosz Ocytko, Executive Principal Engineer, Zalando

      Agentic Engineering at Zalando: a snapshotEngineering blog post, Zalando Engineering Blog

      Zalando likes LiteLLM for its extensibility, using call hooks for anonymized cost tracking and client version checks. Stability and memory leaks force a restart every 20,000 requests, and the proxy serves 2,000 monthly users on six small pods.

      "…our ML platform team deployed in January 2024 a LiteLLM based API proxy with access to models from different providers (now: OpenAI, AWS Bedrock, and Google Vertex)."
      Excerpt, Bartosz Ocytko

      Published Aug 14, 2026Zalando's company-wide LLM proxy, run by its ML platform team since January 2024

    2. Positive

      NetworkChuck (Chuck Keith), creator of the NetworkChuck YouTube channel

      I'm changing how I use AI (Open WebUI + LiteLLM)Video, YouTube

      Uses LiteLLM behind Open WebUI to reach ChatGPT, Claude, Gemini and Grok through one self-hosted gateway shared with a team and family under their own controls.

      Published Mar 13, 2025self-described: Shared AI hub for a team and family on Open WebUI

    3. Positive

      kgeist, Hacker News commenter

      Comment on: LLMCap - A proxy that hard-stops LLM API calls when you hit a dollar capHacker News comment

      Their team self-hosts LiteLLM for free and sets budgets per day or week.

      Published May 19, 2026self-described: Self-hosted gateway at work

    4. Positive

      intothemild, Hacker News commenter

      Comment on: AI subscriptions are a ticking time bomb for enterpriseHacker News comment

      Put self-hosted Qwen, Gemma, and DeepSeek behind LiteLLM to watch token use and bring inference cost in-house, and the company is rolling it out more widely.

      Published May 17, 2026self-described: Company pilot: self-hosted Qwen, Gemma, and DeepSeek behind LiteLLM

    5. Mixed

      kingreflex, Hacker News commenter

      Comment on: Malicious litellm_init.pth in litellm 1.82.8 PyPI package - credential stealerHacker News comment

      During the March 2026 PyPI compromise, asked whether the team's Helm-deployed LiteLLM images on pinned stable tags were affected.

      Published Mar 24, 2026self-described: Team running LiteLLM Proxy from Helm charts

    Open them in the record
  3. Routing, Fallbacks & Load Balancing4 of 5 sources on it praise itTraffic spreads across deployments and providers. Retries and fallbacks handle provider failures or rate limits.

    Counted for Teams and technical leaders.

    Positive, 4

    1. Mixed

      Arseny Zinchenko, DevOps engineer and author of the RTFM blog

      LiteLLM: OpenRouter Integration and Fallbacks ConfigurationEngineering blog post, RTFM

      Added OpenRouter behind the team's existing LiteLLM gateway so services changed nothing. OpenRouter returned 429 errors in test production, so the team configured fallbacks to OpenAI in LiteLLM, keeping failover out of client code.

      Published Jul 31, 2026self-described: A company LiteLLM gateway that already handles requests from all of the team's services, with OpenRouter added behind it

    2. Positive

      Thoughtworks delivery teams, Technology Radar

      LiteLLM (Technology Radar, Languages & Frameworks)Technology Radar entry, Thoughtworks

      Thoughtworks teams increasingly adopt LiteLLM as a sensible default gateway for retries, failover, load balancing, and budgets. Provider-specific features still need provider-specific parameters, and drop_params silently discards unsupported ones.

      Published Apr 15, 2026self-described: Thoughtworks client teams that run LiteLLM as the AI gateway for enterprise applications

    3. Mixed

      sacrelege, Running a small inference provider (as stated)

      Comment on: N-Day-Bench - Can LLMs find real vulnerabilities in real codebases?Hacker News comment

      Their new inference service uses LiteLLM as the load balancer in front of its GPU servers, which they are replacing with a custom Rust implementation.

      Published Apr 14, 2026self-described: Small private datacenter serving inference customers

    4. Mixed

      Alina Dallmann, Speaker at PyData Berlin 2025

      One API to Rule Them All? LiteLLM in ProductionConference talk, PyData Berlin 2025 (PyData YouTube channel)

      Ran LiteLLM's proxy for a university chatbot with cost tracking, budgets and load balancing, but hit custom-budget limits, slow new-model support and bugs in new features.

      "…deploying the the proxy server we already get an admin user interface delivered as well. Um this is a screenshot um of one example of it. Um here we can do most of the process I just described earlier to assign budgets…"
      Transcript excerpt, at 9:47Partial support

      Published Nov 23, 2025self-described: Privacy-preserving university RAG chatbot for students and employees

    Mixed or negative, 1

    1. Mixed

      bjornjee, ML Ops team member (as stated)

      [Bug]: Litellm Proxy availability concerns. Cascading failures during high load to providersGitHub issue

      Under sustained provider 429s, new LiteLLM pods failed Kubernetes readiness probes, so all pods restarted and the gateway went down.

      Published Oct 14, 2025self-described: Kubernetes deployment, 2 to 5 replicas, about 60 QPS average and 500 QPS peak

    Open them in the record
  4. One API Across Providers4 of 7 sources on it praise itOne OpenAI-format interface calls multiple providers. A model-name change switches providers, with limits in request and response translation.

    Counted for Teams and technical leaders.

    Positive, 4

    1. Positive

      jbellis, Hacker News commenter, building Brokk

      Comment on: Hypermode Model Router Preview - OpenRouter AlternativeHacker News comment

      Brokk uses LiteLLM as one API over several models, but finds models not interchangeable for code, so routing to the fastest model does not appeal.

      Published May 8, 2025self-described: Brokk, an AI code tool

    2. Positive

      NetworkChuck (Chuck Keith), creator of the NetworkChuck YouTube channel

      I'm changing how I use AI (Open WebUI + LiteLLM)Video, YouTube

      Uses LiteLLM behind Open WebUI to reach ChatGPT, Claude, Gemini and Grok through one self-hosted gateway shared with a team and family under their own controls.

      Published Mar 13, 2025self-described: Shared AI hub for a team and family on Open WebUI

    3. Mixed

      Callum McMahon, Research Scientist at FutureSearch

      litellm 1.82.8 Supply Chain Attack on PyPI (March 2026)Engineering blog post, FutureSearch blog

      FutureSearch, which uses LiteLLM to balance quality, speed and cost across providers, caught the 1.82.8 credential stealer when an MCP plugin pulled it in; damage was minimal.

      "We discovered it when the package was pulled in as a transitive dependency by an MCP plugin running inside Cursor."
      Excerpt, Callum McMahon

      Published Mar 24, 2026self-described: FutureSearch, research product that uses LiteLLM across model providers

    4. Positive

      bitdribble, Founder of DocRouter (as stated)

      Comment on: Launch HN: Reducto Studio (YC W24) - Build accurate document pipelines, fastHacker News comment

      Their document-processing startup runs on top of LiteLLM as a portability layer so it supports all major LLMs.

      Published Jun 25, 2025self-described: DocRouter, open-source document extraction product

    Mixed or negative, 3

    1. Positive

      Thoughtworks delivery teams, Technology Radar

      LiteLLM (Technology Radar, Languages & Frameworks)Technology Radar entry, Thoughtworks

      Thoughtworks teams increasingly adopt LiteLLM as a sensible default gateway for retries, failover, load balancing, and budgets. Provider-specific features still need provider-specific parameters, and drop_params silently discards unsupported ones.

      Published Apr 15, 2026self-described: Thoughtworks client teams that run LiteLLM as the AI gateway for enterprise applications

    2. Mixed

      nicovank, Hacker News commenter, co-author of the project

      Comment on: AI Meets WinDBGHacker News comment

      Routes the project through LiteLLM, so other providers should work in theory, but in their experience only OpenAI's function calling works well.

      Published May 7, 2025self-described: Debugger assistant that relies on function calling

    3. Mixed

      jbellis, Building the Brokk coding tool (as stated)

      Comment on: The unreasonable effectiveness of an LLM agent loop with tool useHacker News comment

      LiteLLM still does not support parallel tool calls with Gemini models, so the Brokk team wrote its own on top of structured output.

      Published May 15, 2025self-described: Brokk, AI coding product

    GILD's fact checks, which don't count as sources

    Checked Oct 12, 2026.BerriAI's site lists 140+ providers and 1,892 models behind one OpenAI-compatible API; its documentation says 100+ providers. LiteLLM AI Gateway home page

    Open them in the record

What concerns them

Every concern practitioners raise, most raised first.

  1. Stability & Code QualityAll 11 sources on it raise it as a concernBugs, regressions after upgrades, broken features in new releases, and the quality of the codebase behind them.

    Counted for Teams and technical leaders.

    1. Mixed

      Bartosz Ocytko, Executive Principal Engineer, Zalando

      Agentic Engineering at Zalando: a snapshotEngineering blog post, Zalando Engineering Blog

      Zalando likes LiteLLM for its extensibility, using call hooks for anonymized cost tracking and client version checks. Stability and memory leaks force a restart every 20,000 requests, and the proxy serves 2,000 monthly users on six small pods.

      "…our ML platform team deployed in January 2024 a LiteLLM based API proxy with access to models from different providers (now: OpenAI, AWS Bedrock, and Google Vertex)."
      Excerpt, Bartosz Ocytko

      Published Aug 14, 2026Zalando's company-wide LLM proxy, run by its ML platform team since January 2024

    2. Negative

      yryzhan-vitech, GitHub user running the Noma guardrail on a LiteLLM proxy

      [Bug]: Noma v2 guardrail ignores streaming_end_of_stream_only and streaming_sampling_rateGitHub issue, BerriAI/litellm

      Two streaming settings for the Noma guardrail had no effect: post-call scans ran per chunk at the hard-coded default sampling rate of 5 whatever the config said, with no error or warning, so the misconfiguration stayed invisible.

      "Setting either in config.yaml has no effect: streaming post-call scans always run per chunk at the hard-coded default sampling rate of 5. There is no error and no warning, so the misconfiguration is invisible."
      Excerpt, yryzhan-vitech

      Published Jul 28, 2026self-described: A LiteLLM proxy with the Noma v2 guardrail scanning streamed responses

    3. Mixed

      Jack Wildman, Senior Software Engineer, FutureSearch

      LiteLLM made us accidentally make our product free for a weekEngineering blog post, FutureSearch blog

      A LiteLLM upgrade began stripping caller tags without an error, so FutureSearch billed no usage for 6.5 days. It calls the default-on change a footgun, added alerts, and stayed on LiteLLM at v1.86.4.

      "A routine LiteLLM version bump turned off our usage billing for six and a half days. We had many alerts for runaway spend, but not for spend dropping to zero."
      Excerpt, Jack Wildman

      Published Jun 10, 2026FutureSearch's research-agent platform, which bills users from LiteLLM spend logs

    4. Mixed

      ruettiger, GitHub user running LiteLLM on GKE

      Sync convert_url_to_base64() blocks asyncio event loop, causing pod health check failures and mass restartsGitHub issue

      In a 16-replica GKE production deployment, one unreachable image URL blocked LiteLLM's event loop for minutes, failed health checks, and left only 1 pod available.

      Published Mar 30, 2026self-described: GKE Autopilot production deployment with 16 replicas

    5. Mixed

      phanisarman, GitHub user

      [Bug]: Significant performance regression after upgrading from 1.80.5 to 1.81.x (UI + API slowness)GitHub issue

      Upgrading from 1.80.5 to 1.81.x made the UI and API consistently slower on the same infrastructure for a 50-user, 200-model gateway.

      Published Jan 28, 2026self-described: Gateway for 50 internal users and 200 models at about 10 RPS, with Postgres and Langfuse OTel callbacks

    6. Mixed

      Alina Dallmann, Speaker at PyData Berlin 2025

      One API to Rule Them All? LiteLLM in ProductionConference talk, PyData Berlin 2025 (PyData YouTube channel)

      Ran LiteLLM's proxy for a university chatbot with cost tracking, budgets and load balancing, but hit custom-budget limits, slow new-model support and bugs in new features.

      "…deploying the the proxy server we already get an admin user interface delivered as well. Um this is a screenshot um of one example of it. Um here we can do most of the process I just described earlier to assign budgets…"
      Transcript excerpt, at 9:47Partial support

      Published Nov 23, 2025self-described: Privacy-preserving university RAG chatbot for students and employees

    7. Negative

      sothatsit, Hacker News commenter

      Comment on: Control LLM Spend and Access with any-LLM-gatewayHacker News comment

      Their team calls LiteLLM a dumpster fire of enterprise features and bugs: key budget edits and old-log cleanup gated as Enterprise, and a UI that flooded itself with retries.

      Published Nov 19, 2025self-described: Team running LiteLLM, looking to switch

    8. Negative

      smcleod, Hacker News commenter

      Comment on: Control LLM Spend and Access with any-LLM-gatewayHacker News comment

      After deploying LiteLLM Proxy in several places, plans to swap it for Bifrost: budget limits not enforced, parameter bugs, latency, and slow responses to reported fixes.

      Published Nov 19, 2025self-described: Deployed LiteLLM Proxy in a number of locations

    9. Mixed

      Sanady, GitHub user at a firm running LiteLLM on Kubernetes

      Heavy RAM usage over some timeGitHub issue

      A firm running LiteLLM on two 4 GB Kubernetes pods sees memory fill within a day or two until the pods crash, after earlier fixes for the same leak.

      Published May 14, 2026self-described: Two-pod Kubernetes deployment with Redis caching and 4 GB pods

    10. Mixed

      lin0703, GitHub user

      [Bug]: Budget enforcement bypassed in v1.82.3 for key/user max_budget despite spend exceeding max_budgetGitHub issue

      On a fresh v1.82.3 deployment, key and user max_budget were stored and spend tracked, but requests were not blocked once spend passed the budget.

      Published Apr 28, 2026self-described: Fresh v1.82.3 deployment compared with v1.81.0

    11. Mixed

      TSJasonH, GitHub user

      [Bug]: Heavy RAM Usage over timeGitHub issue

      Their LiteLLM container's memory grows over days until monitoring alerts fire and a restart is needed, across stable releases.

      Published Jul 17, 2025self-described: Team testing an application through the proxy and pass-through routes

    GILD's fact checks, which don't count as sources

    Checked Oct 12, 2026.LiteLLM ships a stable minor release about every week and supports only the four most recent stable minor lines. A deployment more than four weeks behind receives no patches. Version support

    Open them in the record
  2. Performance at Scale7 of 9 sources on it raise it as a concernThe gateway adds latency and consumes memory. Growing traffic tests throughput and the load on Postgres or Redis.

    Counted for Teams and technical leaders.

    Raised as a concern, 7

    1. Mixed

      Sanady, GitHub user at a firm running LiteLLM on Kubernetes

      Heavy RAM usage over some timeGitHub issue

      A firm running LiteLLM on two 4 GB Kubernetes pods sees memory fill within a day or two until the pods crash, after earlier fixes for the same leak.

      Published May 14, 2026self-described: Two-pod Kubernetes deployment with Redis caching and 4 GB pods

    2. Mixed

      ruettiger, GitHub user running LiteLLM on GKE

      Sync convert_url_to_base64() blocks asyncio event loop, causing pod health check failures and mass restartsGitHub issue

      In a 16-replica GKE production deployment, one unreachable image URL blocked LiteLLM's event loop for minutes, failed health checks, and left only 1 pod available.

      Published Mar 30, 2026self-described: GKE Autopilot production deployment with 16 replicas

    3. Mixed

      jklinkenberg, GitHub user

      [Performance] LiteLLM Overhead and Performance in ProductionGitHub issue

      Benchmarked GPT-OSS-120B: about 16 requests per second direct versus about 9 requests per second through the LiteLLM proxy at 500 concurrent requests, even with spend logs disabled.

      Published Feb 12, 2026self-described: Proxy in front of self-hosted GPU models, 4 vCPU and 8 GB VM

    4. Mixed

      phanisarman, GitHub user

      [Bug]: Significant performance regression after upgrading from 1.80.5 to 1.81.x (UI + API slowness)GitHub issue

      Upgrading from 1.80.5 to 1.81.x made the UI and API consistently slower on the same infrastructure for a 50-user, 200-model gateway.

      Published Jan 28, 2026self-described: Gateway for 50 internal users and 200 models at about 10 RPS, with Postgres and Langfuse OTel callbacks

    5. Mixed

      TSJasonH, GitHub user

      [Bug]: Heavy RAM Usage over timeGitHub issue

      Their LiteLLM container's memory grows over days until monitoring alerts fire and a restart is needed, across stable releases.

      Published Jul 17, 2025self-described: Team testing an application through the proxy and pass-through routes

    6. Negative

      smcleod, Hacker News commenter

      Comment on: Control LLM Spend and Access with any-LLM-gatewayHacker News comment

      After deploying LiteLLM Proxy in several places, plans to swap it for Bifrost: budget limits not enforced, parameter bugs, latency, and slow responses to reported fixes.

      Published Nov 19, 2025self-described: Deployed LiteLLM Proxy in a number of locations

    7. Mixed

      bjornjee, ML Ops team member (as stated)

      [Bug]: Litellm Proxy availability concerns. Cascading failures during high load to providersGitHub issue

      Under sustained provider 429s, new LiteLLM pods failed Kubernetes readiness probes, so all pods restarted and the gateway went down.

      Published Oct 14, 2025self-described: Kubernetes deployment, 2 to 5 replicas, about 60 QPS average and 500 QPS peak

    Discussed without concern, 2

    1. Mixed

      phenethol, LLM infrastructure intern at the Ruđer Bošković Institute

      litellm-ops: operations toolkit and proxy-versus-direct latency benchmarkIndependent benchmark, GitHub repository

      Built against the Ruđer Bošković Institute's LiteLLM proxy, the toolkit's benchmark finds the proxy adds about 30 ms and is no bottleneck up to 8 concurrent requests. In places, the admin UI does not match what the API does.

      Published Sep 12, 2026self-described: The Ruđer Bošković Institute's self-hosted LiteLLM proxy, with users, budgets, and rate limits

    2. Positive

      mpyne, On a team that adopted LiteLLM (as stated)

      Comment on: Litelm: LiteLLM Without the BloatHacker News comment

      Their organization chose LiteLLM after internal discussion; its added latency has not been noticeable to users and it has behaved as the team expected.

      Published Sep 12, 2026self-described: Organization rolling out AI with LiteLLM as its gateway

    GILD's fact checks, which don't count as sources

    Checked Oct 12, 2026.BerriAI is porting request translation to a Rust core, opt-in per model and in beta. Python still runs authentication, routing, logging, and spend tracking, and the standalone Rust server has no published image. Rust AI Gateway (beta)

    Open them in the record
  3. Security & Supply Chain5 of 6 sources on it raise it as a concernProxy vulnerabilities and two supply-chain compromises expose applications that depend on LiteLLM: two PyPI releases in March 2026, and 1.107.0 on PyPI and four official Docker tags in October 2026.

    Counted for Teams and technical leaders.

    Raised as a concern, 5

    1. Mixed

      Matteo Dora and David Berenstein, Giskard

      LiteLLM supply chain compromise: what happened, impact on Giskard, and lessons learnedEngineering blog post, Giskard blog

      Giskard's own services were safe because LiteLLM was pinned, but its open-source packages could pull in the bad releases. It traces the compromise to LiteLLM's CI pipeline, which gave Trivy every secret and published with a long-lived PyPI token.

      Published Mar 25, 2026self-described: Giskard, AI red-teaming company whose services and open-source packages depend on LiteLLM

    2. Negative

      Daniel Hnyk, FutureSearch

      LiteLLM Hack: Were You One of the 47,000?Engineering blog post, FutureSearch blog

      FutureSearch counted 46,996 downloads of the two compromised LiteLLM releases in the 46 minutes they were live and found 88% of the 2,337 dependent packages allowed them.

      Published Mar 25, 2026Analysis of PyPI download logs and the 2,337 packages that depend on LiteLLM

    3. Negative

      santiagobasulto, Leading a team of developers (as stated)

      Comment on: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromisedHacker News comment

      Advised a team of less senior developers against LiteLLM and LangChain, citing supply-chain and vulnerability risk, and to call provider APIs directly.

      Published Mar 24, 2026self-described: Team of less senior developers

    4. Mixed

      ddp26, Leading the FutureSearch team (as stated)

      Comment on: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromisedHacker News comment

      Their FutureSearch team was first hit by the compromised release: uvx pulled the unpinned latest LiteLLM and Cursor started the local MCP server automatically.

      Published Mar 24, 2026self-described: FutureSearch, research product using LiteLLM

    5. Mixed

      Callum McMahon, Research Scientist at FutureSearch

      litellm 1.82.8 Supply Chain Attack on PyPI (March 2026)Engineering blog post, FutureSearch blog

      FutureSearch, which uses LiteLLM to balance quality, speed and cost across providers, caught the 1.82.8 credential stealer when an MCP plugin pulled it in; damage was minimal.

      "We discovered it when the package was pulled in as a transitive dependency by an MCP plugin running inside Cursor."
      Excerpt, Callum McMahon

      Published Mar 24, 2026self-described: FutureSearch, research product that uses LiteLLM across model providers

    Discussed without concern, 1

    1. Mixed

      kingreflex, Hacker News commenter

      Comment on: Malicious litellm_init.pth in litellm 1.82.8 PyPI package - credential stealerHacker News comment

      During the March 2026 PyPI compromise, asked whether the team's Helm-deployed LiteLLM images on pinned stable tags were affected.

      Published Mar 24, 2026self-described: Team running LiteLLM Proxy from Helm charts

    GILD's fact checks, which don't count as sources

    Checked Oct 12, 2026.From v1.83.0, every LiteLLM Docker image on GHCR is signed with cosign, and BerriAI documents how to reject unsigned images in Kubernetes. Docker image security

    Open them in the record

Where the evidence agrees

Statements this group's sources agree on, then the ones close to agreement.

Close to agreement: each needs 10 supporting sources

  1. Below threshold

    An organization needs one gateway that issues keys, sets limits, and logs every model call; provider keys stay out of individual apps.

    9 supporting sources
  2. Below threshold

    A share of teams and developers move to OpenRouter, Portkey, Bifrost, or a small gateway of their own.

    5 supporting sources

Where it disagrees

Questions the sources split on, with the count on each side.

  • Evidence remains split

    When practitioners weigh LiteLLM against another gateway, which do they keep?

    • Chose or kept LiteLLM, 4 sources

      Some chose LiteLLM for self-hosting with no per-token fee, spend tracking per key, and provider coverage.

    • Chose another tool, 5 sources

      Others moved to or picked OpenRouter, Portkey, Bifrost, or their own code, most often over stability or latency.

  • Evidence remains split

    Is LiteLLM ready to be the production gateway in front of every model call?

    • Runs it in production, 5 sources

      Some run it as their organization's gateway and report it behaving as planned, with latency their users do not notice.

    • Not production-grade, 3 sources

      Others judge it not production-grade, citing bugs, unenforced budgets, latency, and outages.

The evidence

Whose experience this is

The three groups, then every practitioner by the context they work in, and how emphasis changes with scale.

Three groups drawn from the same sources. Choose a group to select whose experience counts. Within that group, each author counts once in the practitioner sentiment, with their latest view. Signals open on Teams and technical leaders.

  • Teams and technical leaders

    47 sources. Shared-gateway teams and leaders describe why they chose or rejected LiteLLM, with accounts of spend control and operations work.

  • Individual builders

    78 sources. Developers describe LiteLLM in personal projects and coding tools, including self-hosted model setups.

  • All practitioners

    125 sources. Together, these accounts combine platform and small product teams with solo developers. Their traffic and hosting requirements differ.

125 sources from practitioners, by the context they work in. Filled rows count for this group.

  1. Individual builderDevelopers building on the platform on their own78 sources

    Emphasizes Coding tools behind one endpoint, stability, and performance

  2. Small product team2 to 10 engineers, or an unnamed startup team21 sources, counted here

    Emphasizes Budgets, upgrade regressions, and whether to keep it

  3. Product or platform team11 to 50 engineers, or a named company's team19 sources, counted here

    Emphasizes Per-developer cost tracking and incident response

  4. Technical leadershipLeaders setting model and platform choices across teams5 sources, counted here

    Emphasizes Gateway choice and supply-chain risk

  5. Organization-wideEnterprise or company-wide AI platform2 sources, counted here

    Emphasizes An institute's own proxy with per-user budgets and rate limits

What changes with scale. Individual developers praise the single endpoint for coding tools and spend tracking. Stability and performance lead their concerns, and after the October 2026 compromise several moved to Bifrost. Teams and leaders run it as the company gateway at Okta and Zalando and discuss budgets, upgrade regressions and supply-chain exposure. Those who left cite bugs, unenforced budgets or security lapses, along with excessive operations work.

Where the sources come from

Where this group's sources were published.

Counted for Teams and technical leaders, from 47 sources. Change group

59 sources for this group, 12 of them documentation

  • Developer Communities34, 58% of 59 sources
  • Product Documentation12, 20% of 59 sources
  • Engineering Blogs & Reviews11, 19% of 59 sources
  • Podcasts, Talks & Videos2, 3% of 59 sources

Earlier evidence remains when it still applies. Records tied to changed or fixed features carry Needs a recheck.

See sources by origin

The record

Who each source is, how it knows, whether it still applies and what it counts toward.

About this read

What changed, and how we count

What changed

  • Nov 1, 2026: since Oct 30 the page prints one vote per author, and a figure given on the weighted reading is the second view. Teams and leaders read +8, individual builders +7 and all practitioners +10.
  • Oct 31, 2026: lists Comet's incident write-up without counting it, because Comet's Opik takes LiteLLM as a direct dependency. On the weighted reading, leaders and teams stay at +7 on 37 sources and all practitioners at +8 on 108.
  • Oct 30, 2026: a second-model check removed an X post that sells RevenueFlow's services and a Reddit comment that names no workload or result. TU Vienna's Aqueduct post now counts as a competitor's and counts toward no score. Summaries of an Agents SDK issue, a Noma guardrail issue and a Reddit comment now say only what their pages say, a GitHub issue no longer prints a quote, since its stored text lost part of a URL the page shows, and FutureSearch's two authors carry the roles FutureSearch's company page lists. FutureSearch's incident card leaves the download count to the record that cites the follow-up post.
  • Oct 29, 2026: the 11 Reddit comments, Okta's gateway post and two research-pass GitHub issues now count toward no score, since GILD has not checked their authors' ties to BerriAI. Ten records no longer state an author identity that no profile or ledger record supports.
  • Oct 28, 2026: adds 21 records: 11 Reddit comments from r/devops, r/mlops and r/LocalLLaMA, Okta's company gateway post, an RTFM write-up on putting OpenRouter behind LiteLLM, TU Vienna's rejection of LiteLLM, Portkey and Kong and another Hacker News comment, five GitHub issues, and one X post. Fifteen records now print a quoted passage from their stored page, and seven carry the number they measured.
  • Oct 26, 2026: adds team and engineering-leader accounts of running LiteLLM, Zalando's company proxy among them. A FutureSearch engineering leader's role is as the company's team page states it.
  • Oct 25, 2026: adds 9 engineering blog, benchmark, and GitHub sources, including the October 2026 1.107.0 compromise and an independent proxy latency benchmark.
  • Every account links to its public source and names its author and publication date.
  • A finding shows only when at least 5 sources from 3 different authors discuss it. A disagreement also requires at least 2 sources on each side.
  • Counts practitioners who describe their own use or evaluation of LiteLLM; competitor vendors' comparisons and news reports of the March 2026 compromise are excluded.
  • Checks the budget, licensing, release, and security findings against BerriAI's documentation on the review date.

Method

A running review of what teams building AI features on LiteLLM report, from individual builders to company-wide platforms. Each finding links to its sources, and each conflict shows both sides.

Counts cover only the sources GILD reviewed.

Who counts

Teams and technical leaders
Small product team, Product or platform team, Technical leadership, Organization-wide
Individual builders
Individual builder
All practitioners
Everyone in the teams and leaders and individual builders groups

Choose a group to select whose experience counts. Within that group, each author counts once in the practitioner sentiment, with their latest view. GILD files each source in a group from how the account describes its author. A role or employer marked self-described is what the source states about themselves. Documentation checks facts for every group and never counts toward sentiment.

How the numbers work

  • Overall signal. Positive votes minus negative ones, per 100 votes from the sources that take a side. Each author counts once, with their latest view, whoever they are and wherever they posted. The older weighted reading, where accounts GILD matched to a named person count three times when GILD lists the author among technical leaders and twice otherwise, is shown beside it as a second view. Where an author wrote more than one source, the line beside the split gives the votes, one per author, so the score follows from it. When one author's sources from the same day disagree, that author counts as mixed, and a half point rounds away from zero. Sources with no opinion are listed and not counted. Strong positive is +50 or higher, positive +20 to +49, mixed −19 to +19, negative −20 to −49, strong negative −50 or lower.
  • Weighted reading, second view. Counted the older way, where an account GILD matched to a named person counts two or three times, teams and leaders read +7 mixed (method sentiment/S1). GILD printed that number as "GILD score" until October 29, 2026; most of those matches rest on a name or a self-described role.
  • Method change, Oct 30, 2026. GILD changed how practitioner sentiment counts, to one vote per author. Weighted, it read +10 Mixed; with one vote per author it reads +11 Mixed. No evidence changed.
  • Unscored. A group gets a score only with 20 sources from 15 authors. Below that, one source moves the score about 5 points, so the read says "Unscored until 20 sources from 15 authors" and shows its counts.
  • Independence. A source whose author works for the vendor, for one of its partners or programs, or for a competitor, and a page the vendor published or ran, is listed with that tie and counts toward nothing. One author counts on at most two records per product. The line under the score says how many authors and how many separate discussions the counted sources come from: comments in one thread are one discussion.
  • Praise and concerns. How many of the sources that discuss a theme praise it or raise it.
  • Consensus. A statement joins when 20% of the group's sources support it and fewer contradict it. Contradicting sources are counted separately. Below that line a statement shows as building. At 40% or more it reads Strong agreement; below, Recurring point.
  • Disagreements. The count on each side. GILD names no winner and gives no share of all users.
  • Minimum evidence. A finding needs 5 sources from 3 authors; a disagreement also needs 2 on each side. Smaller counts stay in the table below, marked under the minimum.

Labels on a source

A source's date and whether it still applies are separate: a recent post can describe an old version, and an old one can still hold.

Documented
Stated in official documentation.
Reported
A practitioner's account of their own use.
Measured
Backed by the source's own measurements, such as a comparative test or tracked team metrics.
GILD analysis
GILD's check of a claim against official documentation.
Current
Describes the product as it is now.
Still applicable
Older, and the behavior or lesson still holds.
Needs a recheck
May depend on a plan, version or setting that changed since it was written. It keeps counting until GILD rechecks it, since the rest of the account usually holds, and its card says so.
Out of date
No longer accurate. Kept in the record; counts toward nothing current.

Flagged for a recheck, of the sources that take a side: teams and leaders 4 of 37, individual builders 5 of 71, all practitioners 9 of 108.

Limits

  • These figures describe reviewed sources; they do not represent all LiteLLM users. Hacker News supplies 75 of the 125 sources from people using LiteLLM, GitHub 21, and Reddit 10. Its threads about gateways and the March 2026 compromise draw critics, which tilts that site negative. GitHub issues are bug reports and feature requests, which tilt toward problems. A bug report therefore counts as mixed unless its author rejects or abandons LiteLLM, or recommends against it. The Ruđer Bošković Institute's own proxy, with per-user budgets and rate limits, and Okta's company gateway are the organization-wide accounts. Two GitHub records from a research pass that sought out problems are shown with their quotes and count toward no score. So do the 10 Reddit comments and Okta's gateway post, whose authors' ties to BerriAI GILD has not checked, and TU Vienna's post announcing Aqueduct, a competing gateway its author built. BerriAI's own blog posts, including its customer stories, are kept out of the count.
  • Sources cover LiteLLM v1.5x through v1.107. Some 2025 and early 2026 complaints concern features that later moved, changed license requirements, or received fixes, including Enterprise-only key editing. Those records carry Needs a recheck. The window includes the March 24, 2026 PyPI compromise, later security fixes, and the October 21, 2026 compromise of the 1.107.0 release.

Every count, and the sources behind it

19 findings for 3 groups

Each row opens its sources for the group you are reading.

FindingTeams and technical leadersIndividual buildersAll practitionersSources
Current readCurrent sentiment10 positive, 21 mixed, 6 negative28 positive, 21 mixed, 22 negative38 positive, 42 mixed, 28 negativeSources
PraiseOne API Across Providers4 of 7 positive8 of 17 positive12 of 24 positiveSources
PraiseVirtual Keys, Budgets & Spend Tracking7 of 10 positive12 of 14 positive19 of 24 positiveSources
PraiseRouting, Fallbacks & Load Balancing4 of 5 positive4 of 5 positive8 of 10 positiveSources
PraiseSelf-Hosted Control5 of 5 positive7 of 7 positive12 of 12 positiveSources
PraiseProvider & Model Coverage0 of 3 positive (under the minimum)2 of 4 positive (under the minimum)2 of 7 positiveSources
ConcernStability & Code Quality11 of 11 raise it18 of 18 raise it29 of 29 raise itSources
ConcernPerformance at Scale7 of 9 raise it7 of 7 raise it14 of 16 raise itSources
ConcernSecurity & Supply Chain5 of 6 raise it5 of 8 raise it10 of 14 raise itSources
ConcernEnterprise-Gated Features2 of 2 raise it (under the minimum)4 of 4 raise it (under the minimum)6 of 6 raise itSources
ConcernOperational Burden2 of 2 raise it (under the minimum)7 of 8 raise it9 of 10 raise itSources
ConsensusOne gateway for the organization9 supporting (below threshold)5 supporting (below threshold)14 supporting (below threshold)Sources
ConsensusStay provider-neutral3 supporting (under the minimum)8 supporting (below threshold)11 supporting (below threshold)Sources
ConsensusCoding tools go through the gateway1 supporting (under the minimum)18 supporting19 supporting (below threshold)Sources
ConsensusThe library alone is enough for some1 supporting (under the minimum)8 supporting (below threshold)9 supporting (below threshold)Sources
ConsensusSome replace it or build their own5 supporting (below threshold)9 supporting (below threshold)14 supporting (below threshold)Sources
DisagreementIs LiteLLM ready to be the production gateway in front of every model call?Runs it in production 5, Not production-grade 3Runs it in production 2, Not production-grade 3Runs it in production 7, Not production-grade 6Sources
DisagreementWhen practitioners weigh LiteLLM against another gateway, which do they keep?Chose or kept LiteLLM 4, Chose another tool 5Chose or kept LiteLLM 5, Chose another tool 11Chose or kept LiteLLM 9, Chose another tool 16Sources
Current readEvidence mix59 sources90 sources137 sourcesSources

Fact checks

GILD's checks of claims against official documentation, kept apart from the source counts.

  • One API Across Providers. BerriAI's site lists 140+ providers and 1,892 models behind one OpenAI-compatible API; its documentation says 100+ providers. LiteLLM AI Gateway home page, checked Oct 12, 2026
  • Virtual Keys, Budgets & Spend Tracking. Every LiteLLM budget is enforced against spend read from the database, so none caps anything on a deployment without one. Budget reservation is on by default; fail-closed budget and rate-limit enforcement is opt-in. Budgets and rate limits, checked Oct 12, 2026
  • Stability & Code Quality. LiteLLM ships a stable minor release about every week and supports only the four most recent stable minor lines. A deployment more than four weeks behind receives no patches. Version support, checked Oct 12, 2026
  • Performance at Scale. BerriAI is porting request translation to a Rust core, opt-in per model and in beta. Python still runs authentication, routing, logging, and spend tracking, and the standalone Rust server has no published image. Rust AI Gateway (beta), checked Oct 12, 2026
  • Security & Supply Chain. From v1.83.0, every LiteLLM Docker image on GHCR is signed with cosign, and BerriAI documents how to reject unsigned images in Kubernetes. Docker image security, checked Oct 12, 2026
  • Enterprise-Gated Features. From v1.76.0, SSO for the Admin UI is free for up to 5 users; beyond that it needs an Enterprise license, whose price BerriAI quotes by deployment. SSO for the Admin UI, checked Oct 12, 2026