Live data from Hacker News

Discussion – has anyone build a firewall for AI models yet?

news.ycombinator.com

1–10 of 14 posts

Re: Discussion – has anyone build a firewall for AI models yet?

#2
I am not a firewall or security expert but would you have organizations protect their sensitive data from AI's reach thereby limiting AI's ability ? Wouldn't the real ROI of AI will depend on the sensitive data ?

I guess dynamic firewall's with runtime permissions are needed protect the data and at the same time let AI do it's thing.

Re: Discussion – has anyone build a firewall for AI models yet?

#3
post #2

I am not a firewall or security expert but would you have organizations protect their sensitive data from AI's reach thereby limiting AI's ability ? Wouldn't the real ROI of AI will depend on the sensitive data ? I guess dynamic firewall's with runtime permissions are needed protect the data and at the same time let AI do it's thing.

I beg to differ - manipulating a model to extract data is worse that protecting sensitive data. I am curious as to why this is not a big space yet?

Re: Discussion – has anyone build a firewall for AI models yet?

#4
post #3
post #2

I am not a firewall or security expert but would you have organizations protect their sensitive data from AI's reach thereby limiting AI's ability ? Wouldn't the real ROI of AI will depend on the sensitive data ? I guess dynamic firewall's with runtime permissions are needed protect the data and at the same time let AI do it's thing.

I beg to differ - manipulating a model to extract data is worse that protecting sensitive data. I am curious as to why this is not a big space yet?

We already have many components and solutions for "firewalls", like everything we've done with microservice isolation. If you mean "sandbox" more than "firewall", there are 100s since Claude Code came out

Re: Discussion – has anyone build a firewall for AI models yet?

#5
post #4
post #3

Earlier quoted context omitted.

I beg to differ - manipulating a model to extract data is worse that protecting sensitive data. I am curious as to why this is not a big space yet?

We already have many components and solutions for "firewalls", like everything we've done with microservice isolation. If you mean "sandbox" more than "firewall", there are 100s since Claude Code came out

So my first thesis that I want to prove is - are all enterprises going to start self hosting open source models ? If yes, then one will need to deploy a solution around the models to act as a firewall. A firewall fine tuned for the context that’s coming in and coming out of a model. Way different from how microservices work today.

Re: Discussion – has anyone build a firewall for AI models yet?

#7

When you say firewalls for AI models, you mean firewalls for agents, right? Otherwise, I don't see the need to firewall a model.

I meant for a model. Like agents could be many within an organization, instead of patching up each agent with a security solution, wouldn’t it be easier to build one that wraps around the model ?

Re: Discussion – has anyone build a firewall for AI models yet?

#8
post #5
post #4

Earlier quoted context omitted.

We already have many components and solutions for "firewalls", like everything we've done with microservice isolation. If you mean "sandbox" more than "firewall", there are 100s since Claude Code came out

So my first thesis that I want to prove is - are all enterprises going to start self hosting open source models ? If yes, then one will need to deploy a solution around the models to act as a firewall. A firewall fine tuned for the context that’s coming in and coming out of a model. Way different from how microservices work today.

1. Most enterprises are not self hosting at this point, hardware is too expensive. We want model choice. Eg. we are buying Fireworks.ai, however this is irrelevant to point 2

2. "firewall" is the wrong term, you are looking for "guardrails" if you are talking about prompt protections. Here again, there are 100s of projects and takes on this. Ai is the hottest space right now, people are thinking about all of these things. This piece is central to Fable access being shut off.

Re: Discussion – has anyone build a firewall for AI models yet?

#9
post #5
post #4

Earlier quoted context omitted.

We already have many components and solutions for "firewalls", like everything we've done with microservice isolation. If you mean "sandbox" more than "firewall", there are 100s since Claude Code came out

So my first thesis that I want to prove is - are all enterprises going to start self hosting open source models ? If yes, then one will need to deploy a solution around the models to act as a firewall. A firewall fine tuned for the context that’s coming in and coming out of a model. Way different from how microservices work today.

[deleted]

Re: Discussion – has anyone build a firewall for AI models yet?

#10
post #8
post #5

Earlier quoted context omitted.

So my first thesis that I want to prove is - are all enterprises going to start self hosting open source models ? If yes, then one will need to deploy a solution around the models to act as a firewall. A firewall fine tuned for the context that’s coming in and coming out of a model. Way different from how microservices work today.

1. Most enterprises are not self hosting at this point, hardware is too expensive. We want model choice. Eg. we are buying Fireworks.ai, however this is irrelevant to point 2 2. "firewall" is the wrong term, you are looking for "guardrails" if you are talking about prompt protections. Here again, there are 100s of projects and takes on this. Ai is the hottest space right now, people are thinking about all of these th…

Ack on the guardrail analogy. On fireworks - do you just run serverless or do you take their dedicated instance. My question is how do you ensure that the model is not being manipulated to getting stuff it shouldn’t be.
Post reply on HN