Observed arrival · 2026-09-24
BASTİYON: a self-hosted AI security gateway
BASTİYON sits between an application and a language model, inspecting requests and responses to mask sensitive data, flag or block risky prompts, and hold certain tool actions for human approval.
- For
- Teams running language models with sensitive data
- Worth noticing
- The page says audit logs retain decision reasons while request content is not retained by default.
Field notes
The page frames the gateway as an API-compatible layer and says an application needs only a base_url change to route traffic through it. Its decision vocabulary distinguishes a flagged-but-passed request from a blocked one, while the 428 outcome pauses a high-impact tool call for approval. The homepage also describes source-aware checks that treat instructions arriving through retrieved documents or web pages differently from a user's own text.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue