We’re building a phone-intake AI voice bot that is connected for Virginia Legal Aid Society (VLAS) with Twilio, Pipecat, and FastAPI (Github). Without proper safeguards, this system could be exploited by attackers who go after our backend directly. That opens the door to unauthorized traffic, inflated usage costs, and degraded service quality for our users. […]