---
title: "Security"
url: "/docs/proxy/security/overview"
canonical_url: "https://docs.litellm.ai/docs/proxy/security/overview"
type: "docs"
last_updated: "2026-11-12"
summary: "Protect your LiteLLM gateway, manage secrets, and review network and compliance requirements."
related:
  - "/docs/traffic_mirroring"
  - "/docs/proxy/security_best_practices"
---
# Security

> Index of all LiteLLM docs: https://docs.litellm.ai/llms.txt


Use these guides to protect your LiteLLM gateway, control its outbound requests, and store credentials safely.

Start with [Security Best Practices](../security_best_practices.md) for the production checklist. For installation and infrastructure setup, see [Deploy](../deploy.md).

## Choose a topic

| Topic | What it covers |
| --- | --- |
| [Security Best Practices](../security_best_practices.md) | Secure releases, access controls, network settings, secrets, and audit logs. |
| [Client Authentication with mTLS](../deploy/mtls.md) | Check client certificates at ingress and require LiteLLM keys. |
| [Identity-Aware Proxy](../deploy/iap/overview.md) | Check identity and access before traffic reaches LiteLLM. |
| [SSL & HTTP Proxies](../../guides/security_settings.md) | Configure certificate verification, custom CA bundles, and outbound HTTP proxies. |
| [Outbound Requests and Offline Mode](../outbound_requests.md) | The external services LiteLLM contacts and which requests you can disable. |
| [OWASP LLM Top 10 mapping](../security_owasp_llm_top10.md) | Which LLM risks LiteLLM controls address and which your application must handle. |
| [FIPS Mode](../fips_mode.md) | Check current support and limits. FIPS mode remains in development. |
| [Secret Managers](../../secret_managers/overview.md) | Read and store secrets with supported secret managers. These integrations require an Enterprise license. |
| [Docker Image Security](../docker_image_security.md) | Verify image signatures and review image security options. |

## Identity and access

[Authentication](../authentication.md) identifies callers and people who sign in to the Admin UI. [Access Management](../access_management/overview.md) controls which models, MCP servers, and agents they can use and manage.

## Related pages

- [Traffic Mirroring](https://docs.litellm.ai/docs/traffic_mirroring.md)
- [Security Best Practices](https://docs.litellm.ai/docs/proxy/security_best_practices.md)