Shield your AI platform
from within.
API Phantom is a security reverse-proxy for LLM platforms. It enforces authentication, detects SQL injection in JSON payloads, stores system prompts in a tamper-proof vault, and runs autonomous red-team probes around the clock.
Four layers. One proxy.
API Phantom wraps your AI platform as a transparent security layer — no SDK changes, no code modifications required.
Auth Enforcement
JWT validation with JWKS caching, mTLS certificate verification, API-key allowlists with expiry checks, and per-route role requirements.
SQL Injection Shield
Extended SQL injection detection targeting JSON key names, column aliases, and table references — catching the novel variants that missed the McKinsey Lilli breach.
IDOR Detection
Object-level authorization middleware that detects resource ID enumeration, cross-user access patterns, and blind iteration sequences.
Prompt Integrity Vault
Versioned, immutable system prompt storage with SHA-256 hash chains, advisory-locked writes, and a continuous integrity monitor that pages on tampering.
Autonomous Red-Team Agent
Python agent that continuously probes auth gaps, SQL injection surfaces, IDOR vulnerabilities, prompt integrity, and error leakage — reporting to the dashboard in real time.
Tamper-Proof Audit Chain
Every proxied request writes to a PostgreSQL append-only audit log with a cryptographic hash chain — INSERT-only role enforced at the database level.
Deploy in minutes
API Phantom runs as a Docker Compose stack or Kubernetes deployment. No code changes in your LLM application.
Point traffic at API Phantom
Route your LLM platform traffic through the API Phantom proxy. Update one environment variable — no SDK changes, no code modifications.
Configure security policies
Set auth methods (JWT/mTLS/API-key), define allowlists, configure IDOR checks, and load your system prompts into the Prompt Vault via the admin API.
Monitor the dashboard
Watch real-time security events, red-team probe results, audit chain integrity, and threat analytics — all in the built-in React dashboard.
Open source core. Enterprise support.
- ✓ Full proxy + auth enforcement
- ✓ SQL injection & IDOR detection
- ✓ Prompt Vault (local DB)
- ✓ Basic red-team probes
- ✓ Community support
- ✓ Everything in Developer
- ✓ Managed Prompt Vault (cloud sync)
- ✓ Advanced red-team agent (all 5 probes)
- ✓ Real-time alerting (Slack, PagerDuty)
- ✓ Dashboard with full analytics
- ✓ 10-user dashboard seats
- ✓ Priority support (24h SLA)
- ✓ Everything in Team
- ✓ On-premise / air-gap deployment
- ✓ HashiCorp Vault integration
- ✓ SSO / SAML / OIDC
- ✓ SOC2 audit export
- ✓ Custom red-team probe rules
- ✓ Dedicated security engineer
Secure your AI platform today
We'll help you deploy API Phantom and configure it for your AI stack.