Security · 18h ago
Why one developer skips LLMs for LLM security
A developer argues against using an LLM as the primary security judge for every request, citing latency, cost, and non-determinism. Instead, they propose a tiered escalation ladder: regex, classical ML, a transformer, and finally an LLM for ambiguous cases. This approach reduces LLM costs to only the fraction of requests that genuinely need it.
Meridian48 take
The tiered approach is pragmatic, but the real test is whether deterministic tiers catch enough novel attacks to justify the complexity.
llm-securitytiered-detection