Secure ChatGPT – a safer way to interact with generative AI
Hi HN, I’m the founder of Pangea. We’ve built a developer platform where you can easily add security to your code through a simple set of APIs - features like authentication, secrets management, audit logging, redaction of PII, restricting embargoed countries, known threat actor intelligence, etc. With the ChatGPT and LLM explosion, we thought of ways to reduce the risk of both the inputs and outputs from these services. Our NextJS sample app adds a security layer on top of ChatGPT with various security services that you can implement quickly. It’s basically a front end to the OpenAI API…
In plain words
Secure ChatGPT is a Next.js application that adds a security layer on top of OpenAI's API. It implements authentication to track users, redacts personally identifiable information from prompts, and maintains audit logs of interactions. The tool is designed for developers who want to use ChatGPT while reducing security risks around data exposure and unauthorized access. It's available as an open-source sample app that can be deployed as a custom front-end to the OpenAI API.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hi HN, I’m the founder of Pangea. We’ve built a developer platform where you can easily add security to your code through a simple set of APIs - features like authentication, secrets management, audit logging, redaction of PII, restricting embargoed countries, known threat actor intelligence, etc. With the ChatGPT and LLM explosion, we thought of ways to reduce the risk of both the inputs and outputs from these services. Our NextJS sample app adds a security layer on top of ChatGPT with various security services that you can implement quickly. It’s basically a front end to the OpenAI API that you can deploy which does a few security-related things: - AuthN - it provides authentication to track who inputs what and when - Redact - provides PII redaction with detection of over 40 different types of sensitive information - Secure Audit Log - logs the user, cleansed prompt, and model to a secure tamper-proof audit trail - Sends the cleansed prompt to the OpenAI API and receives the response - Domain Intel - Performs a Domain Reputation lookup on any domain names in the response - URL Intel - Performs a URL Reputation lookup on any URLs in the response - Defangs any malicious domains or URLs found in the response - On closing your session, the history of prompts disappears Storing what users have prompted allows you to better train your model, feed it more relevant information, and keep an audit log of the history. The Secure Audit Log service can store the user inputs in a secure log so that you can track who did what and when. The final layer of defense is a Domain Intel service to detect and neutralize the malicious URLs and domain names in the OpenAI API's response. The proof-of-concept app is open-source on GitHub. Visit our repo https://github.com/pangeacyber/secure-chatgpt and deploy the app with a simple NPX command. We’d love your feedback. -Oliver
More ai this month
the category →
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com
Astute▲585Automate your B2B brand going viral, with new media creators
AI · 18d ago · company-app.joinastute.com
Hey HN, Henry from Cactus here! We previously released Cactus Needle, a 14MB agentic LLM for tool call, device use, and structured extraction for phones, wearables, smart homes, small robots and microcontrollers. We got really great feedback here, and have now incorporated the suggestions to release Needle 2. The whole model is a single 14MB binary that runs a full session in 28MB of RAM; 45m parameters at 2bit compression. Needle hits 500 tokens/sec decode speed on a Raspberry Pi 5, sits between 400-1,500 tokens/sec on VR devices like Meta Quest 3S and Apple Vision Pro, and ranges…
AI · 26d ago · cactuscompute.com
Launched alongside, June 2023
the whole month →- NI
Heya HN, I've been working on a reddit-like platform as my primary side project for the last few years. Doing a (very) soft launch today, mainly because I want to use it to encourage discussion of alternatives. How non.io works: 1. Free to browse, paid to interact. 2. Minimum subscription is $2 (though you can choose more). I take $1 to run the servers, everything left gets split evenly between everything you upvote that month. It's a simple model, but I hope it's a better one than the freemium model we've been relying on for the last few years. Fundamentally I feel like any ad-supported…
Commerce · 2023 · non.io
Typefully 2.0▲931Effortlessly publish on Twitter and LinkedIn, now with AI
Growth · 2023 · typefully.com
SlashPage▲760Create websites in seconds to build your first 1K community
Growth · 2023 · slashpage.com
