Popular AI gateway startup LiteLLM ditches controversial startup Delve

LiteLLM, a leading provider of AI gateway solutions favored by millions of developers, has made a significant decision to sever its partnership with compliance startup Delve. This move comes in the wake of a serious security breach that saw LiteLLM's open-source version compromised by credential-stealing malware just last week. Before this incident, LiteLLM had engaged Delve to secure two essential security compliance certifications, which are crucial for demonstrating that a company has robust processes to mitigate risks. However, Delve has faced serious allegations of misleading clients by purportedly fabricating compliance data and utilizing auditors who merely approved their reports without thorough scrutiny. In response to these claims, Delve's founder has publicly denied any wrongdoing and offered free audits and re-tests to its customer base. Despite this, an anonymous whistleblower from Delve has intensified the situation by releasing what are said to be incriminating receipts over the weekend. In light of the turmoil, LiteLLM's Chief Technology Officer, Ishaan Jaffer, announced via X that the company will now partner with Vanta, a competitor of Delve, for re-certification, alongside engaging an independent third-party auditor to ensure the integrity of its compliance processes. Following a tumultuous week, LiteLLM is clearly taking decisive action to protect its reputation and the security of its users.