Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise. Learn more →
Top 12 Rust llm-security Projects
-
Project mention: Gate: a deterministic PII boundary between your data and AI agents | dev.to | 2026-06-04
If you've been holding off on connecting your AI agent to a real data source — database, internal API, or MCP server — because "what the model sees" was a vibes-based decision, this is the layer that turns it into a config file. Try it, scan your schema, and share what you find. The repo is github.com/GaaraZhu/gate. The issue tracker is open. The license is MIT.
-
AppSignal
AppSignal knows why the f*#k it crashed. Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.
-
Project mention: Show HN: Lilith-zero update: fast Rust security for agents | news.ycombinator.com | 2026-04-23
-
Armorer-Guard
Fast local Rust scanner for AI-agent prompt injection, credential leaks, exfiltration, and risky tool calls
Project mention: Agent security needs a local enforcement point, not just logs | dev.to | 2026-06-22Try it in the browser: https://huggingface.co/spaces/armorer-labs/armorer-guard-demo Source: https://github.com/ArmorerLabs/Armorer-Guard
-
vellaveto
Agentic security control plane for MCP and AI agent tool calls. MCP-native policy gateway with topology discovery and audit. (by paolovella)
Project mention: Show HN: VellaVeto – fail-closed gateway for MCP tool calls | news.ycombinator.com | 2026-03-28 -
bulwark
Kernel-level read gate for AI agents — protected file opens are denied or routed through off-band consent before bytes reach the agent. Linux (fanotify) + macOS (Endpoint Security). (by obstalabs)
Project mention: Show HN: Bulwark – a kernel read gate so coding agents can't read .env or .ssh | news.ycombinator.com | 2026-06-30 -
topgent
Monitor your local AI agents. See what files they can reach, what networks they communicate with, and stop them if required. Detect a rogue agent.
How do you spot and stop a rogue AI agent on your machine? https://github.com/farikonsec/topgent
-
fishnet
Security proxy for AI agents (OpenClaw, LangChain, CrewAI). Protects API keys, enforces spend limits, blocks dangerous endpoints. Local-first Rust binary — your credentials never leave your machine. (by fishnetproxy)
Project mention: How I Saved 20,000 Gas Per Transaction by Reordering One Line in Solidity | dev.to | 2026-03-01While building a smart wallet contract for Fishnet — an AI agent transaction security proxy — I ran a self-imposed code review and found a subtle optimization that every Solidity developer should know about.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
project-guardian
AI Guardian Firewall — a local, user-space, agent-agnostic firewall that mediates an autonomous AI agent's actions (files, shell, network, services) with a deterministic policy boundary, a tamper-evident audit log, and a human-in-the-loop approval cockpit. No kernel modules. Apache-2.0.
Project mention: A user-space firewall that gates an AI agent's actions | news.ycombinator.com | 2026-06-29 -
customhouse
Deterministic MCP proxy that blocks money-moving and data-egress tool calls in any agent session that has received untrusted content. No model in the decision path.
Project mention: Blocking prompt injection deterministically costs 40% false positives | news.ycombinator.com | 2026-08-17 -
shield
Local guardrails for AI coding agents. Wraps any MCP server and blocks destructive tool calls — DROP TABLE, rm -rf, force-push, unscoped UPDATE/DELETE — before they execute. Free, open-source, runs entirely on your machine. (by AperionAI)
Project mention: Aperion Shield v0.7 – guardrails for AI coding agents now run as Git hooks | news.ycombinator.com | 2026-05-26 -
Project mention: Comment and Control: a GitHub comment hijacks Claude Code in CI | dev.to | 2026-06-02
Three lines of YAML, one secret. No gateway to deploy. The same call works in the Cursor IDE, on a laptop, or in any pipeline via clampd-guard directly.
-
Project mention: I built a static + runtime security scanner for MCP servers (Rust) | dev.to | 2026-08-18
TL;DR: MCP (Model Context Protocol) has had 40+ CVEs disclosed just this year, and there wasn't a purpose-built scanner for it, so I built one. sentrymcp does static analysis (path traversal, injection, tool poisoning, missing auth) plus a runtime proxy mode that catches "rug pulls" — servers that silently change a tool's description after you've already approved it. Rust, MIT, Docker one-liner. Repo: https://github.com/zaydmulani09/sentrymcp
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Rust llm-security discussion
Rust llm-security related posts
-
Blocking prompt injection deterministically costs 40% false positives
-
I built a local Rust MCP security proxy for AI agents
-
Where to plug security hooks into AI agents: tool calls, MCP results, logs, and sends
-
Install Armorer Guard from Cargo: local Rust scanning for AI-agent tool calls
-
Armorer Guard Learning Loop: live local feedback for AI-agent security, without model drift
-
Show HN: Lilith-zero update: fast Rust security for agents
-
A note from our sponsor - AppSignal
www.appsignal.com | 9 Oct 2026
Index
What are some of the best open-source llm-security projects in Rust? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | gate | 36 |
| 2 | lilith-zero | 23 |
| 3 | Armorer-Guard | 6 |
| 4 | vellaveto | 6 |
| 5 | bulwark | 5 |
| 6 | topgent | 4 |
| 7 | fishnet | 2 |
| 8 | project-guardian | 2 |
| 9 | customhouse | 2 |
| 10 | shield | 2 |
| 11 | clampd | 1 |
| 12 | sentrymcp | 0 |
Sponsored
AppSignal knows why the f*#k it crashed.
Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.
www.appsignal.com