Portkey

Portkey sits between an application and its LLM providers as a single API: it routes requests across more than 1,600 models from 40+ providers, handles fallbacks and load balancing when a provider is down or rate-limited, caches repeated calls, and layers on 50+ guardrails (PII/PHI redaction, content moderation) plus request-level observability (logs, traces, cost and latency per team or key). A self-hosted, MIT-licensed version of the core gateway ships as open source on GitHub. The vendor's own figures — 1,600+ models, 3,000+ GenAI teams, trillions of tokens processed monthly — are Portkey/PAN claims, not independently audited.

Palo Alto Networks announced its intent to acquire Portkey on 30 April 2026 and completed the acquisition on 29 May 2026 (financial terms undisclosed by either party — a widely circulated ~$140M figure traces to a single market-intelligence aggregator, not a company filing or statement, so it is not repeated here). Portkey is being integrated as the AI Gateway inside PAN's Prisma AIRS platform, which went generally available under that combined offering in July 2026; portkey.ai's own security page now leads with 'Portkey is now PRISMA AIRS AI Gateway.' Co-founders Rohit Agarwal (CEO) and Ayush Garg remain publicly associated with the product post-acquisition. For a buyer, this cuts two ways: PAN gives the product a much larger compliance and enterprise-sales apparatus than a 2023-founded, $18M-raised startup had on its own, but pricing, sales motion and the roadmap are now set inside a cybersecurity vendor's priorities rather than an independent AI-infra company's — several of Portkey's own 'Upgrade' and 'Contact us' links now route to paloaltonetworks.com.

The self-hosted gateway (Portkey-AI/gateway on GitHub, MIT-licensed, 13,065 stars) is not archived and still installs and runs. But its development pace changed sharply at the acquisition: the last tagged release is v1.15.2 from 12 January 2026, the last commit merged to the main branch was on 25 May 2026 — the same day the acquisition closed — and a GitHub search finds zero pull requests merged into the repo since then against twelve that were opened and closed unmerged in that window. That's a real signal for anyone planning to run the open-source version rather than the hosted product: it is currently a stable, usable, permissively-licensed codebase, not an actively developed one.

Verified on portkey.ai/pricing, 23 September 2026: Developer is free forever (10,000 recorded logs/month, 3-day log retention, community support) — Portkey's own copy flags it as suitable for prototyping, 'not suitable for production workloads.' Production is $49/month (100,000 logs/month, 30-day retention, guardrails, RBAC, caching), with overages at $9 per additional 100,000 requests up to 3 million requests/month. Enterprise is custom-priced and adds SSO, custom retention, private/VPC deployment, SOC 2 Type 2 / HIPAA / GDPR compliance artifacts and dedicated support. The self-hosted open-source gateway remains free to deploy yourself.

Portkey publishes concrete trust artifacts rather than just a marketing claim: a DPA (portkey.ai/dpa) and a sub-processor list (portkey.ai/sub-processor) are both live pages, and the vendor states SOC 2, ISO 27001, GDPR and HIPAA compliance. None of these were independently re-verified against a SOC 2 report in this pass — the pages list the claim, not the underlying report.

G2 lists Portkey (under the AIOps Tools category, now branded 'By Palo Alto Networks') at 4.6/5 from 19 reviews — a small sample, useful as a directional signal but not a statistically strong one.