https://bastio.com/assets/index-wnTfzzTp.js

1import{j as e}from"./index-BkgFiefw.js";let c={title:"What is Bastio?",description:"Protect model requests, sensitive data, and autonomous agent actions with one observable AI security platform."},d=[{href:"/docs/getting-started"},{href:"/docs/architecture"},{href:"/docs/gateway"},{href:"/docs/developer-apis"},{href:"/docs/threats"},{href:"/docs/observability"}],l={contents:[{heading:void 0,content:"Bastio is an open-source AI security platform for model gateways, custom LLM pipelines, and agentic workflows. It detects prompt injection, jailbreaks, PII, secrets, and dangerous tool arguments before they become incidents."},{heading:"choose-your-integration",content:"Route OpenAI- or Anthropic-compatible traffic through Bastio with minimal application changes."},{heading:"choose-your-integration",content:"Call detection, PII, and agent-action controls directly and own the enforcement UX."},{heading:"choose-your-integration",content:"Start the complete self-hosted stack with Docker Compose and verify your first trace."},{heading:"choose-your-integration",content:"Use the OpenAPI contract and interactive Scalar reference on a running Bastio instance."},{heading:"one-engine-three-control-points",content:"Control point"},{heading:"one-engine-three-control-points",content:"What Bastio evaluates"},{heading:"one-engine-three-control-points",content:"Typical integration"},{heading:"one-engine-three-control-points",content:"Model gateway"},{heading:"one-engine-three-control-points",content:"Prompts and model responses"},{heading:"one-engine-three-control-points",content:"Change the provider base URL"},{heading:"one-engine-three-control-points",content:"Developer APIs"},{heading:"one-engine-three-control-points",content:"Messages, retrieved context, PII, and outputs"},{heading:"one-engine-three-control-points",content:"Call a focused REST API or SDK"},{heading:"one-engine-three-control-points",content:"Agent actions"},{heading:"one-engine-three-control-points",content:"Final tool names and arguments"},{heading:"one-engine-three-control-points",content:"Authorize immediately before execution"},{heading:"one-engine-three-control-points",content:"All surfaces feed Bastio's trace and threat model so security teams can investigate the same event developers enforced in code."},{heading:"platform-capabilities",content:"Policy-driven detection: profile steps define detector, strategy, and threshold."},{heading:"platform-capabilities",content:"Reversible PII tokenization: replace sensitive values with stable placeholders and restore approved output."},{heading:"platform-capabilities",content:"Agent action inspection: block dangerous shell, filesystem, database, and path patterns before execution."},{heading:"platform-capabilities",content:"Operational context: traces connect latency, provider, tokens, cost, environment, and security findings."},{heading:"platform-capabilities",content:"Deployment choice: run the open-source stack yourself or use Bastio Cloud's managed gateway and enterprise controls."},{heading:"recommended-reading-order",content:"Getting started — run Bastio and verify a protected request."},{heading:"recommended-reading-order",content:"Architecture — understand the request path and data stores."},{heading:"recommended-reading-order",content:"Gateway or Developer APIs — implement your control point."},{heading:"recommended-reading-order",content:"Threat detection — tune profiles and actions."},{heading:"recommended-reading-order",content:"Observability — operate the integration in production."}],headings:[{id:"choose-your-integration",content:"Choose your integration"},{id:"one-engine-three-control-points",content:"One engine, three control points"},{id:"platform-capabilities",content:"Platform capabilities"},{id:"recommended-reading-order",content:"Recommended reading order"}]};const h=[{depth:2,url:"#choose-your-integration",title:e.jsx(e.Fragment,{children:"Choose your integration"})},{depth:2,url:"#one-engine-three-control-points",title:e.jsx(e.Fragment,{children:"One engine, three control points"})}

1,{depth:2,url:"#platform-capabilities",title:e.jsx(e.Fragment,{children:"Platform capabilities"})},{depth:2,url:"#recommended-reading-order",title:e.jsx(e.Fragment,{children:"Recommended reading order"})}];function i(n){const t={a:"a",h2:"h2",li:"li",ol:"ol",p:"p",strong:"strong",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",ul:"ul",...n.components},{DocsCard:o,DocsGrid:r}=t;return o||s("DocsCard"),r||s("DocsGrid"),e.jsxs(e.Fragment,{children:[e.jsx(t.p,{children:"Bastio is an open-source AI security platform for model gateways, custom LLM pipelines, and agentic workflows. It detects prompt injection, jailbreaks, PII, secrets, and dangerous tool arguments before they become incidents."}),`
2`,e.jsx(t.h2,{id:"choose-your-integration",children:"Choose your integration"}),`
3`,e.jsxs(r,{children:[e.jsx(o,{title:"Protect an existing LLM client",href:"/docs/gateway",icon:"server",children:e.jsx(t.p,{children:"Route OpenAI- or Anthropic-compatible traffic through Bastio with minimal application changes."})}),e.jsx(o,{title:"Build a custom security pipeline",href:"/docs/developer-apis",icon:"code",children:e.jsx(t.p,{children:"Call detection, PII, and agent-action controls directly and own the enforcement UX."})}),e.jsx(o,{title:"Run locally",href:"/docs/getting-started",icon:"security",children:e.jsx(t.p,{children:"Start the complete self-hosted stack with Docker Compose and verify your first trace."})}),e.jsx(o,{title:"Inspect every endpoint",href:"/docs/api-reference",icon:"key",children:e.jsx(t.p,{children:"Use the OpenAPI contract and interactive Scalar reference on a running Bastio instance."})})]}),`
4`,e.jsx(t.h2,{id:"one-engine-three-control-points",children:"One engine, three control points"}),`
5`,e.jsxs(t.table,{children:[e.jsx(t.thead,{children:e.jsxs(t.tr,{children:[e.jsx(t.th,{children:"Control point"}),e.jsx(t.th,{children:"What Bastio evaluates"}),e.jsx(t.th,{children:"Typical integration"})]})}),e.jsxs(t.tbody,{children:[e.jsxs(t.tr,{children:[e.jsx(t.td,{children:"Model gateway"}),e.jsx(t.td,{children:"Prompts and model responses"}),e.jsx(t.td,{children:"Change the provider base URL"})]}),e.jsxs(t.tr,{children:[e.jsx(t.td,{children:"Developer APIs"}),e.jsx(t.td,{children:"Messages, retrieved context, PII, and outputs"}),e.jsx(t.td,{children:"Call a focused REST API or SDK"})]}),e.jsxs(t.tr,{children:[e.jsx(t.td,{children:"Agent actions"}),e.jsx(t.td,{children:"Final tool names and arguments"}),e.jsx(t.td,{children:"Authorize immediately before execution"})]})]})]}),`
6`,e.jsx(t.p,{children:"All surfaces feed Bastio's trace and threat model so security teams can investigate the same event developers enforced in code."}),`
7`,e.jsx(t.h2,{id:"platform-capabilities",children:"Platform capabilities"}),`
8`,e.jsxs(t.ul,{children:[`
9`,e.jsxs(t.li,{children:[e.jsx(t.strong,{children:"Policy-driven detection:"})," profile steps define detector, strategy, and threshold."]}),`
10`,e.jsxs(t.li,{children:[e.jsx(t.strong,{children:"Reversible PII tokenization:"})," replace sensitive values with stable placeholders and restore approved output."]}),`
11`,e.jsxs(t.li,{children:[e.jsx(t.strong,{children:"Agent action inspection:"})," block dangerous shell, filesystem, database, and path patterns before execution."]}),`
12`,e.jsxs(t.li,{children:[e.jsx(t.strong,{children:"Operational context:"})," traces connect latency, provider, tokens, cost, environment, and security findings."]}),`
13`,e.jsxs(t.li,{children:[e.jsx(t.strong,{children:"Deployment choice:"})," run the open-source stack yourself or use Bastio Cloud's managed gateway and enterprise controls."]}),`
14`]}),`
15`,e.jsx(t.h2,{id:"recommended-reading-order",children:"Recommended reading order"}),`
16`,e.jsxs(t.ol,{children:[`
17`,e.jsxs(t.li,{children:[e.jsx(t.a,{href:"/docs/getting-started",children:"Getting started"})," — run Bastio and verify a protected request."]}),`
18`,e.jsxs(t.li,{children:[e.jsx(t.a,{href:"/docs/architecture",children:"Architecture"})," — understand the request path and data stores."]}),`
19`,e.jsxs(t.li,{children:[e.jsx(t.a,{href:"/docs/gateway",children:"Gateway"})," or ",e.jsx(t.a,{href:"/docs/developer-apis",children:"Developer APIs"})," — implement your control point."]}),`
20`,e.jsxs(t.li,{children:[e.jsx(t.a,{href:"/docs/threats",children:"Threat detection"})," — tune profiles and actions."]}),`
21`,e.jsxs(t.li,{children:[e.jsx(t.a,{href:"/docs/observability",children:"Observability"})," — operate the integration in production."]}),`
22`]})]})}function p(n={}){const{wrapper:t}=n.components||{};return t?e.jsx(t,{...n,children:e.jsx(i,{...n})}):i(n)}function s(n,t){throw new Error("Expected component `"+n+"` to be defined: you likely forgot to import, pass, or provide it.")}export{p as default,d as extractedReferences,c as frontmatter,l as structuredData,h as toc};