atlas-detect

MITRE ATLAS detection engine for LLM and AI agent attacks

atlas-detect is an open-source Rust tool that maps MITRE ATLAS techniques to real-time detection rules for LLM systems and AI agents. MITRE ATLAS is the adversarial threat landscape framework for AI — think ATT&CK but for machine learning systems — and atlas-detect is the first practical, deployable detection engine built on top of it. It ships with 97 pre-built detection rules covering 16 adversarial tactics, from prompt injection and model inversion to training data poisoning. The engine is written in Rust and designed for single-pass regex scanning, making it fast enough for inline deployment in API gateways or agent middleware. You feed it prompt-response pairs (or full conversation logs) and it returns matched technique IDs, severity ratings, and structured evidence. Think of it as a Snort/Suricata ruleset, but for the semantic attack surface of LLMs. With only 4 stars as of today, atlas-detect is an extremely early project — but it's filling a gap that no major security vendor has meaningfully addressed. As enterprises deploy AI agents with real tool access and real consequences, ATLAS-aligned detection will become a compliance requirement. This is the seed of that tooling.

Panel Reviews

The Builder

Developer Perspective

Ship

“97 detection rules for adversarial LLM attacks and it runs in a single pass — this is the kind of foundational security tooling the ecosystem has been missing. Drop this into your API gateway and you immediately have ATLAS coverage. Exactly what regulated industries need.”

The Skeptic

Reality Check

Skip

“Regex-based detection for semantic attacks is fundamentally limited. Sophisticated prompt injection won't pattern-match to static rules — attackers will route around them in days. This might work for known attack signatures but it's a weak defense against anything novel.”

The Futurist

Big Picture

Ship

“MITRE ATLAS coverage is going to show up in AI security audits within 12-18 months the same way ATT&CK coverage shows up in SOC2 reviews today. Building on this framework now, even imperfectly, is the right long-term investment.”

The Creator

Content & Design

Skip

“Not relevant to creative workflows, but I'll note that any tool protecting AI agents from manipulation ultimately protects the outputs I rely on. This is infrastructure that benefits everyone downstream.”