CodeGate - Local, Open Source Privacy Controls for AI Coding Assistants

CodeGate Local, Open Source Privacy Controls for AI Coding Assistants

Free

Home: https://codegate.ai

Code Assistant

#privacy
#local proxy
#Open Source
#encryption
#Retrieval Augmented Generation
#risk insight

Visit CodeGate

What is CodeGate?

CodeGate is designed as a local proxy to enhance privacy and security for developers who utilize AI coding assistants. Positioned between the AI coding assistant and the Large Language Model (LLM), it ensures robust protection of sensitive information by encrypting secrets before they are transmitted from a user's desktop, and decrypting them upon their return. It uses Retrieval Augmented Generation to incorporate current risk insights, bolstering the knowledge base of any LLM with crucial security data.

This tool is local, ensuring that secrets never leave the desktop environment, and it operates transparently in the background. Open source, its functionality is readily viewable and can be improved by the developer community contributions, thus ensuring that privacy measures are thoroughly vetted and continuously evolved.

Features

Local Operation: Keeps all secrets on the user's desktop, avoiding cloud transmission.
Open Source: Fully transparent and allows community contributions.
Secret Encryption: Encrypts secrets in prompts before they leave the desktop.
Retrieval Augmented Generation: Updates LLM knowledge with relevant risk insights.
Quiet Operation: Runs in the background and alerts only for secret leakage and security risks.

Use Cases

Enhancing the privacy of coding environments using AI assistants.
Securing code by integrating up-to-date risk information.
Collaborating with the open-source community to improve security measures.
Protecting proprietary information during software development.

FAQs

Who built this thing and why?

The team at Stacklok built CodeGate. It was important to us that CodeGate be open source, so we can build this with the community.
How do I get involved with CodeGate?

We’ve launched CodeGate as an MVP so we can start collaborating with other open source developers from the jump. This is a solution for developers, by developers. Come build with us in our GitHub repository.
How is CodeGate different from the litany of (mostly prompt) gateways that are already available?

Every other gateway we’ve found suffers from three major shortcomings: (1) they live in the cloud, so your secrets don’t stay on your desktop, (2) they are built by security professionals for security teams who want to measure risk, but not action it, and (3) they are not open source and therefore lack transparency.
Are you saying that AI coding assistants are evil?

No! CodeGate is a partner to, not an enemy of, coding assistants. Stacklok engineers created CodeGate to ensure we could embrace coding assistants without losing privacy and control of our own development environment.
Why doesn’t my coding assistant know about risky dependencies?

It’s actually the underlying LLMs that have stale training data. They’re so expensive and cumbersome to update that their training cutoffs are months or even years in the past; so, they don’t always know when a dependency has been deprecated or compromised.