Continuum AI

Security for AI Developer ToolsInfrastructureGovernance Risk Compliance also known as Continuum AI Pte. Ltd.

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Emerging: Market readiness of 24 or below. Below the typical band, where few analyzed companies sit.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2026
Last updated 2026-07-06

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

Continuum AI sells OrcaRouter, an OpenAI-compatible gateway that routes prompts across more than 200 models and adds guardrails and an agent firewall that screens the tool and MCP calls agents make. The routing is the part with real evidence behind it: it ships as open-source code, a published technical report describes the method, and it placed second on the public RouterArena leaderboard. The security controls that put it in the AI-defense category are newer, described mainly by the company, and made free only in June 2026. With no named customers, no disclosed funding, and a newly launched open-source edition, OrcaRouter is most credible today as a cost-cutting router and unproven as the security control plane it markets.

Sourced Details

Description Continuum AI operates OrcaRouter, an OpenAI-compatible AI gateway that routes prompts across more than 200 models and adds inline guardrails and a risk-scored agent firewall that grades tool and MCP calls before they run. [f1]
Founded 2026 [f2]
HQ Singapore [f3]

Products

Product What it does
OrcaRouter OpenAI-compatible AI gateway routing prompts across 200-plus models with adaptive routing and failover, plus inline guardrails and a risk-scored agent firewall gating tool and MCP calls.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

OrcaRouter routes prompts across models through one OpenAI-compatible endpoint and runs a risk-scored agent firewall that grades every tool and MCP call before it runs. These capabilities are mapped to the AI Defense Matrix. [f4]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Emerging 21 /40 Emerging: Market readiness of 24 or below. Below the typical band, where few analyzed companies sit.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 The two problems, model cost and reliability plus agent and MCP security, are named clearly and tied to a technical buyer. The pain is vendor-asserted and generic to the category, and its quantification comes from Continuum AI's own threat report, so the evidence is present but not independently grounded. [s1, s8]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 4/5 The routing is multiply evidenced beyond marketing: an MIT-licensed open-source edition, a published technical report on the method, a second-place RouterArena finish reported in its paper, and a full docs portal. The security controls are detailed but newer and vendor-described, so depth rests mainly on the router. [s5, s9, s4, s1]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 3/5 Agentic AI, the Model Context Protocol, and 2025 to 2026 prompt-injection and cost-abuse incidents make the timing credible for a young company. Buyer-side demand for OrcaRouter itself is indirect, evidenced only by one launch, free credits, and the company's own threat report rather than named adoption. The window risk is incumbents bundling routing and guardrails. [s1, s8]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 2/5 Six paper authors affiliated with Continuum AI are identifiable, with a named project lead, and they shipped a benchmarked product, so competence is real. No exit, senior in-domain role, or sustained publication record surfaced in the reviewed sources, leaving pedigree unverifiable. [s5, s6]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 2/5 OrcaRouter is live with free credits, a self-serve sign-up, and an open-source edition, but no customer is named, no revenue is disclosed, and it launched only two months ago. A threat-report giveaway markets the paid layer without evidence of conversion, keeping traction thin and vendor-only. [s1, s6, s8]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 2/5 Continuum AI discloses no funding round, revenue, or margin, so capital efficiency cannot be verified. The company ships a hosted gateway, an open-source edition, a paper, and a benchmark on an undisclosed budget, which shows no visible mismatch but leaves efficiency unconfirmed on one-sided evidence. [s6, s9]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 3/5 OrcaRouter fits the emerging AI-gateway and LLM-router category cleanly on routing, and buyers can place an OpenAI-compatible endpoint quickly. The blend into an agent firewall and governance still needs vendor explanation, and no major analyst report places the company in the category, so placement is real but unconfirmed. [s1, s7]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 2/5 Routing plus guardrails at an OpenAI-compatible endpoint is a plausible near-term feature for cloud platforms and model providers already adjacent to the buyer, and the MIT-licensed edition open-sources a working router. The drop-in design keeps switching cost low, and no accumulated data or install base yet resists absorption. [s1, s6, s9]
Business Risks Cloud platforms and model providers could bundle routing with guardrails at an OpenAI-compatible endpoint, absorbing OrcaRouter's core value as a platform feature…
  • Cloud platforms and model providers could bundle routing with guardrails at an OpenAI-compatible endpoint, absorbing OrcaRouter's core value as a platform feature.
  • The one-line, OpenAI-compatible drop-in and MIT-licensed core that ease adoption also ease departure, since a rival serving the same interface lets customers repoint with little code change.
  • Zero-markup routing means revenue depends entirely on converting free bring-your-own-key developers to paid governance features, a motion with no named customer two months after launch.
  • The agent firewall and guardrails that place OrcaRouter in the AI-defense category are newer than the router, vendor-described, and carry no independent validation.
  • Continuum AI's only compliance evidence is SOC 2, ISO 27001, GDPR, and HIPAA reports gated under NDA, with no public trust portal, so no attestation is independently verifiable.
  • No disclosed funding round and no named customer leave runway and traction unverifiable in the public record.
Problem & Market OrcaRouter addresses two linked problems that grew with production AI…

OrcaRouter addresses two linked problems that grew with production AI. One is cost and reliability, since teams calling many language models face token markups, provider outages, and no single place to route or fail over. The other is agent security. Models that gained tools and Model Context Protocol access also gained new risks: prompt injection, data leakage, and runaway spend.

The buyer is a developer or platform team that already runs model traffic and wants both problems solved at one gateway. Continuum AI states the pain plainly, from zero-markup routing to a firewall that gates agent tool calls. The quantification it cites, though, comes largely from its own threat report rather than independent grounding of demand.

The timing enabler is real and recent. Agentic AI and the Model Context Protocol are recent enablers, and OrcaRouter's own threat report cites prompt-injection and cost-abuse incidents through 2025 and 2026. Those shifts created the opening OrcaRouter sells into. Cloud platforms and model providers can absorb the same opportunity, though, folding routing and guardrails into their own products, which is the window risk. [s1, s6, s8]

Product Capabilities OrcaRouter presents one OpenAI-compatible endpoint that routes across more than 200 models. A team points an existing SDK at the gateway and gets adaptive routing, load balancing, caching, and sub-50-millisecond mid-stream failover. Continuum AI's technical report describes the routing as a contextual-bandit model that learns online from live traffic, and the paper reports it placed second on the public RouterArena leaderboard at 75.54 percent accuracy. The routing is partly open. An MIT-licensed self-hosted edition, OrcaRouter Lite, exposes a cheapest-capable router, while the benchmarked adaptive router is described in the paper. The docs portal covers streaming, tool calling, and multiple providers, and that mix of open code, a published method, and a benchmark is the strongest evidence in the record. The security controls are detailed but newer. Continuum AI describes an agent firewall that grades every tool call, MCP dispatch, and network egress against a default-deny policy with six verdicts, plus input and output guardrails, anomaly detection, and a signed audit trail. These controls became free in June 2026 and are documented by the company, not by an independent evaluation. The fetched OrcaRouter Lite README documents routing and a hosted fallback, not these controls…

OrcaRouter presents one OpenAI-compatible endpoint that routes across more than 200 models. A team points an existing SDK at the gateway and gets adaptive routing, load balancing, caching, and sub-50-millisecond mid-stream failover. Continuum AI's technical report describes the routing as a contextual-bandit model that learns online from live traffic, and the paper reports it placed second on the public RouterArena leaderboard at 75.54 percent accuracy.

The routing is partly open. An MIT-licensed self-hosted edition, OrcaRouter Lite, exposes a cheapest-capable router, while the benchmarked adaptive router is described in the paper. The docs portal covers streaming, tool calling, and multiple providers, and that mix of open code, a published method, and a benchmark is the strongest evidence in the record.

The security controls are detailed but newer. Continuum AI describes an agent firewall that grades every tool call, MCP dispatch, and network egress against a default-deny policy with six verdicts, plus input and output guardrails, anomaly detection, and a signed audit trail. These controls became free in June 2026 and are documented by the company, not by an independent evaluation. The fetched OrcaRouter Lite README documents routing and a hosted fallback, not these controls. [s1, s4, s5, s8, s9]

Competitive Positioning OrcaRouter positions against paid routers by charging nothing on tokens…

OrcaRouter positions against paid routers by charging nothing on tokens. Where OpenRouter and similar gateways take a spread of roughly five percent on every call, OrcaRouter has customers bring their own keys and pay providers directly. The company's line is that the data plane is free and the control plane is the product.

The competitive field is crowded and well-funded. Portkey, an AI gateway with guardrails and a control plane, charges on a subscription tied to recorded logs. LiteLLM offers a free open-source proxy but leaves operations to the user. Specialist AI-security vendors compete on the guardrail and firewall layer.

The structural risk is absorption. Routing plus guardrails at an OpenAI-compatible endpoint is a plausible feature for cloud platforms and model providers, and the MIT-licensed core lets anyone copy the routing. OrcaRouter's answer is to move value into a governance control plane, which no named customer has yet bought. [s1, s6, s7]

Go-to-Market & Traction OrcaRouter goes to market bottom-up, through developers rather than a sales team. Users sign up self-serve, receive free credits, and go live in about a minute with no card. The open-source edition and a Discord channel are the other entry points. Continuum AI also markets through security content. In June 2026 it published an AI threat report and made its agent firewall and guardrails free to every user, attaching them to an existing key. Giving two paid controls away is a demand-generation move for the control plane. Named traction, though, is absent from the public record. There is no disclosed customer, no revenue figure, and a launch only two months old, so the go-to-market is a promising motion without proof of conversion…

OrcaRouter goes to market bottom-up, through developers rather than a sales team. Users sign up self-serve, receive free credits, and go live in about a minute with no card. The open-source edition and a Discord channel are the other entry points.

Continuum AI also markets through security content. In June 2026 it published an AI threat report and made its agent firewall and guardrails free to every user, attaching them to an existing key. Giving two paid controls away is a demand-generation move for the control plane.

Named traction, though, is absent from the public record. There is no disclosed customer, no revenue figure, and a launch only two months old, so the go-to-market is a promising motion without proof of conversion. [s1, s6, s8]

Team & Credibility Six authors affiliated with Continuum AI are identifiable from the router paper, with Yi Shi as project lead and corresponding author, and their competence is visible in what they have shipped. A published method and a benchmarked, shipping product are real signals of machine-learning and systems skill. What the record lacks is verifiable pedigree. No prior exit, senior in-domain role, or sustained publication history surfaces in the reviewed record. The team is credible on what it has built, not yet on a track record buyers can check. Execution pace is the standout signal. In roughly two months the team shipped a hosted gateway, an open-source edition, a technical paper, a benchmark placement, and a security release. That output, on an undisclosed budget, is the clearest evidence of capability so far…

Six authors affiliated with Continuum AI are identifiable from the router paper, with Yi Shi as project lead and corresponding author, and their competence is visible in what they have shipped. A published method and a benchmarked, shipping product are real signals of machine-learning and systems skill.

What the record lacks is verifiable pedigree. No prior exit, senior in-domain role, or sustained publication history surfaces in the reviewed record. The team is credible on what it has built, not yet on a track record buyers can check.

Execution pace is the standout signal. In roughly two months the team shipped a hosted gateway, an open-source edition, a technical paper, a benchmark placement, and a security release. That output, on an undisclosed budget, is the clearest evidence of capability so far. [s5, s6, s8]

Trust Readiness Continuum AI leads its trust story with data handling…

Continuum AI leads its trust story with data handling. The privacy policy states the company does not log, store, or retain prompt or output content and does not train on customer content. The policy documents GDPR, UK GDPR, and CCPA rights.

Compliance attestations are shown but not publicly verifiable. The homepage displays SOC 2, ISO 27001, GDPR, and HIPAA badges, each marked available only under NDA. A probe of trust and security subdomains on 2026-07-06 found no public trust portal, so no report backs the badges in the open record.

The signed audit trail is a concrete readiness control. Continuum AI describes every policy match, verdict, and change landing in a tamper-evident log, correlated by agent run and exportable as evidence. Like the rest of the security stack, the company documents it, and no independent party has assessed it. [s1, s3, s10, s8]

Competitors OpenRouter, Portkey, LiteLLM, Pangea, Prompt Security, Lasso Security…
Company Relationship Note Compare
OpenRouter competes with LLM gateway that charges a token spread OrcaRouter undercuts with zero markup.
Portkey competes with AI gateway with guardrails and a control plane. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
LiteLLM competes with Open-source LLM proxy that leaves infrastructure and operations to the user.
Pangea adjacent AI security platform overlapping on input and output guardrails.
Prompt Security adjacent AI security vendor overlapping on the guardrail and firewall layer.
Lasso Security adjacent LLM and agent security vendor overlapping on runtime protection.

Add analyzed competitors to compare them side by side with Continuum AI.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 13 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

OrcaRouter is the inference gateway for every model call, so it is sticky once a team routes traffic through it, yet almost everything it does is reproducible. The Lite edition is MIT-licensed and the endpoint is OpenAI-compatible, so a rival can serve the same interface and a customer can leave with little code change, while the adaptive hosted router is published as a method, not as code. The guardrails and agent firewall are recent and overlap with what AI-security specialists sell. The one asset that could compound is the router that learns from live traffic, a dataset a rival would need comparable scale to match, but with no disclosed usage at two months it is a possibility, not a moat. Its hold today is gateway position plus lean execution, a head start rather than a durable lead.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 OrcaRouter delivers software the customer configures and runs, a gateway priced by optional features rather than a service that accepts accountability. Routing is free and revenue comes from team features, the software-product level with no human-expertise delivery layer.
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 The OpenAI-compatible router is substitutable by design, since a rival serving the same interface lets a customer repoint with little code change, and bring-your-own-key keeps no data hostage. The revert cost is the accumulated firewall policy, roles, budgets, and audit configuration a governance adopter would rebuild elsewhere.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 1/3 Continuum AI displays SOC 2, ISO 27001, GDPR, and HIPAA badges, but the reports sit under NDA with no public trust portal found by probe on 2026-07-06, so nothing is independently verified. Displayed certifications are a credibility floor, not a barrier a replacement must clear.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 The routing is a hard problem, and a published technical report documents an online-learning contextual-bandit method behind it. The product adds sub-50-millisecond multi-provider failover, and the vendor describes inline policy enforcement graded in under a millisecond, marking real machine-learning and real-time-systems difficulty rather than assembled features.
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 2/3 The evidenced buyer is a developer or platform team reached self-serve through free credits and a GitHub sign-up, a mid-market motion. An enterprise tier with private deployment and an uptime commitment is advertised, but no regulated-enterprise reference is public two months after launch.
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 3/3 OrcaRouter is infrastructure other applications depend on, the inference gateway that carries every model call for a team that adopts it. Removing it breaks those calls until traffic is repointed, the position of a platform dependency rather than an end-user tool.
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 1/3 The Lite edition is MIT-licensed and the adaptive method is published in the company's technical report, so the approach is reproducible. That report describes offline warmup on an internal curated prompt set alongside prompts drawn from a public routing benchmark, and it discloses no scale for the internal set. The online-learning router could accumulate a routing-quality dataset from live traffic, but at two months no such scaled asset is disclosed.
Strategic Market Segmentation OrcaRouter targets developers and platform teams that route many language-model calls and want to cut inference cost. The pitch is a single OpenAI-compatible endpoint across more than 200 models, with zero markup on tokens when a team brings its own provider keys. The entry buyer is technical and self-serve, reached through free credits and a fast sign-up rather than a sales team. A second segment is teams that need control over agent and tool traffic, not just routing. For them Continuum AI layers guardrails, a risk-scored agent firewall, budgets, roles, and audit trails above the gateway. That governance layer is what Continuum AI says it monetizes, but no named customer of it is public yet. Enterprise is an aspiration rather than an evidenced segment today. The site lists a custom Enterprise tier with private deployment, an uptime commitment, and dedicated support, but two months after launch there are no named enterprise references…

OrcaRouter targets developers and platform teams that route many language-model calls and want to cut inference cost. The pitch is a single OpenAI-compatible endpoint across more than 200 models, with zero markup on tokens when a team brings its own provider keys. The entry buyer is technical and self-serve, reached through free credits and a fast sign-up rather than a sales team.

A second segment is teams that need control over agent and tool traffic, not just routing. For them Continuum AI layers guardrails, a risk-scored agent firewall, budgets, roles, and audit trails above the gateway. That governance layer is what Continuum AI says it monetizes, but no named customer of it is public yet.

Enterprise is an aspiration rather than an evidenced segment today. The site lists a custom Enterprise tier with private deployment, an uptime commitment, and dedicated support, but two months after launch there are no named enterprise references.

Product Capabilities & AI Advantages The routing engine is OrcaRouter's strongest and best-evidenced capability…

The routing engine is OrcaRouter's strongest and best-evidenced capability. A published technical report describes a contextual-bandit router over lexical and sentence-embedding features that learns online from live traffic. At its RouterArena submission the paper reports the router placed second on that public leaderboard, achieving 75.54 percent accuracy. An MIT-licensed self-hosted edition, OrcaRouter Lite, exposes routing code anyone can run, though its default selects the cheapest capable model rather than the paper's adaptive engine.

The security stack is detailed but newer. Continuum AI describes an agent firewall that judges every tool call, MCP dispatch, and network egress against a default-deny policy with six verdicts, plus input and output guardrails for injection, PII, and secrets, anomaly detection, and a signed audit trail. These controls became free in June 2026 and are documented by the company, not by an independent evaluation.

The durable technical advantage, if one forms, is the router that keeps learning from real traffic. The open-source Lite edition documents routing and a hosted fallback; its README does not cover the firewall or guardrails, which appear to run on the hosted service. Whether the learning router compounds into an edge depends on traffic the company has not yet disclosed.

Sales Engagement & Go-to-Market Continuum AI sells bottom-up to developers, not top-down to buyers…

Continuum AI sells bottom-up to developers, not top-down to buyers. New users sign up, get free credits, and go live in about a minute with no card required. The open-source edition and a public Discord round out the self-serve on-ramps.

The company also runs security content marketing. In June 2026 it published an AI threat report and made its agent firewall and guardrails free to every user, attaching them to an existing key. The company markets the paid control plane by giving two of its controls away.

What the record does not show is a repeatable sales motion or named traction. There is no public customer, no disclosed revenue, and a launch only two months old, so adoption stays unproven.

Pricing Model Continuum AI prices the control plane and gives the data plane away…

Continuum AI prices the control plane and gives the data plane away. Routing carries zero markup, so customers bring their own keys and pay providers directly at published rates. The company states plainly that the data plane is free and the control plane is the product.

Revenue comes from optional team features and a custom enterprise tier. The paid layer bundles caching, governance, single sign-on, audit, and policy. Enterprise pricing is quote-based and adds private deployment and an uptime commitment.

The pricing is positioning as much as economics. By charging nothing on tokens, OrcaRouter undercuts routers that take a spread on every call, and it bets that governance is what teams will pay for. That bet is untested at two months.

Product Delivery & Operations OrcaRouter ships in two modes…

OrcaRouter ships in two modes. The hosted service adds accelerated inference, sub-50-millisecond mid-stream failover, and adaptive routing that learns from traffic. The self-hosted Lite edition needs no Postgres or Redis, so it starts on a laptop or a small server.

The open-source edition ships with a documented API. The docs portal covers an OpenAI-compatible API with streaming, tool calling, and multiple providers, and routing overhead is stated at under a millisecond.

Operational maturity at scale is unproven. The uptime commitment and dedicated infrastructure sit in the enterprise tier, but no third party has reported on reliability, and the company discloses no production scale.

Earning Customers' Trust Continuum AI leads its trust story with data handling…

Continuum AI leads its trust story with data handling. The privacy policy states the company does not log, store, or retain prompt or output content and does not train on customer content. The policy documents GDPR, UK GDPR, and CCPA rights.

Compliance attestations are displayed but not publicly verifiable. The homepage shows SOC 2, ISO 27001, GDPR, and HIPAA badges, and the company states that audit reports are available under NDA on request. A probe of trust and security subdomains on 2026-07-06 found no public trust portal, so no report backs the badges in the open record.

One concrete trust control is the signed audit trail. The company describes every policy match, verdict, and change landing in a tamper-evident log, correlated by agent run and exportable as evidence. That control is documented by the company rather than independently assessed.

Platform Strategy & Ecosystem Positioning OrcaRouter's platform strategy is compatibility…

OrcaRouter's platform strategy is compatibility. It presents an OpenAI-compatible endpoint, so teams point an existing SDK at it and keep their framework, editor, and code. That drop-in design makes adoption fast, and it makes leaving just as easy, since a rival serving the same interface lets a customer repoint quickly.

The gateway plugs into a wide toolchain. Continuum AI lists an MCP server plus integrations with the OpenAI, Anthropic, and Google SDKs, LangChain, LlamaIndex, the Vercel AI SDK, and the Cursor editor. Agents can connect over the OrcaRouter MCP server rather than a bespoke integration.

The open-source Lite edition is the ecosystem lever. Continuum AI hopes a free, MIT-licensed router builds a community that adopts the paid hosted features. The repository is new. It shows early engagement in stars and forks, but no sustained outside contribution or production adoption is evidenced yet.

Team & Execution Capability Six authors affiliated with Continuum AI are identifiable from the router paper, with Yi Shi named project lead and corresponding author. The published method and a benchmarked product demonstrate real machine-learning and systems competence. What the record lacks is verifiable pedigree. No prior exit, senior in-domain role, or sustained publication history surfaces in the reviewed record. The team is credible on output, not yet on track record. Execution cadence is the encouraging signal. In roughly two months the team shipped a hosted gateway, an open-source edition, a technical paper, a benchmark placement, and a security release. That pace, on an undisclosed budget, is the clearest evidence of capability so far…

Six authors affiliated with Continuum AI are identifiable from the router paper, with Yi Shi named project lead and corresponding author. The published method and a benchmarked product demonstrate real machine-learning and systems competence.

What the record lacks is verifiable pedigree. No prior exit, senior in-domain role, or sustained publication history surfaces in the reviewed record. The team is credible on output, not yet on track record.

Execution cadence is the encouraging signal. In roughly two months the team shipped a hosted gateway, an open-source edition, a technical paper, a benchmark placement, and a security release. That pace, on an undisclosed budget, is the clearest evidence of capability so far.

Sources

Company Detail Sources (4)
Id Source Tier Accessed
f1 OrcaRouter homepage official 2026-07-06
f2 Continuum AI launches OrcaRouter press 2026-07-06
f3 OrcaRouter Terms of Service (Continuum AI Pte. Ltd.) official 2026-07-06
f4 AI Defense Matrix Catalog mapping (aligned to catalog) other 2026-07-06
Profile Analysis Sources (10)
Id Source Tier Accessed
s1 OrcaRouter homepage
“Every tool and MCP call is graded ALLOW, REVIEW, or BLOCK before it runs, and anomaly detection flags rate and cost spikes against learned hour-of-week baselines.”
official 2026-07-06
s2 OrcaRouter Terms of Service
“operated by CONTINUUM AI PTE. LTD., a private limited company incorporated in Singapore”
official 2026-07-06
s3 OrcaRouter Privacy Policy
“we do not log, store, or retain the content of your prompts or model outputs”
official 2026-07-06
s4 OrcaRouter documentation
“OrcaRouter is an OpenAI-compatible API gateway. Point your existing OpenAI SDK at https://api.orcarouter.ai/v1”
official 2026-07-06
s5 OrcaRouter: A Production-Oriented LLM Router (Continuum AI, arXiv preprint)
“OrcaRouter-Adaptive ranked second on the public RouterArena leaderboard with an arena score of 72.08, achieving 75.54% accuracy at $1.00 per 1K queries.”
research 2026-07-06
s6 Continuum AI launches OrcaRouter (PR Newswire)
“While OpenRouter and other incumbents charge a 5% spread on every token, OrcaRouter charges nothing.”
press 2026-07-06
s7 BriefGlance on OrcaRouter's zero-markup routing
“Other platforms, like Portkey, use a subscription model based on metrics such as recorded logs rather than direct token usage, separating their platform fee from the LLM provider costs.”
press 2026-07-06
s8 OrcaRouter releases AI Threat Report 2026, makes security controls free (brand post)
“every tool call, MCP dispatch, and network egress is judged against ordered, default-deny policy with six verdicts: allow, audit, deny, sanitize, pending-approval, and cap-cost.”
press 2026-07-06
s9 OrcaRouter-Lite open-source repository
“Self-hosted LLM router with a managed safety net. OpenAI-compatible. BYOK. Single-workspace. Streaming.”
official 2026-07-06
s10 Trust probe 2026-07-06: homepage shows SOC 2, ISO 27001, GDPR, HIPAA badges, reports under NDA, no trust or security subdomain
“Audit reports available under NDA, request a copy below.”
official 2026-07-06
Deep-Dive Sources (10)
Id Source Tier Accessed
s1 OrcaRouter homepage
“Every tool and MCP call is graded ALLOW, REVIEW, or BLOCK before it runs, and anomaly detection flags rate and cost spikes against learned hour-of-week baselines.”
official 2026-07-06
s2 OrcaRouter Terms of Service
“operated by CONTINUUM AI PTE. LTD., a private limited company incorporated in Singapore”
official 2026-07-06
s3 OrcaRouter Privacy Policy
“we do not log, store, or retain the content of your prompts or model outputs”
official 2026-07-06
s4 OrcaRouter documentation
“OrcaRouter is an OpenAI-compatible API gateway. Point your existing OpenAI SDK at https://api.orcarouter.ai/v1”
official 2026-07-06
s5 OrcaRouter: A Production-Oriented LLM Router (Continuum AI, arXiv preprint)
“OrcaRouter-Adaptive ranked second on the public RouterArena leaderboard with an arena score of 72.08, achieving 75.54% accuracy at $1.00 per 1K queries.”
research 2026-07-06
s6 Continuum AI launches OrcaRouter (PR Newswire)
“While OpenRouter and other incumbents charge a 5% spread on every token, OrcaRouter charges nothing.”
press 2026-07-06
s7 BriefGlance on OrcaRouter's zero-markup routing
“Other platforms, like Portkey, use a subscription model based on metrics such as recorded logs rather than direct token usage, separating their platform fee from the LLM provider costs.”
press 2026-07-06
s8 OrcaRouter releases AI Threat Report 2026, makes security controls free (brand post)
“every tool call, MCP dispatch, and network egress is judged against ordered, default-deny policy with six verdicts: allow, audit, deny, sanitize, pending-approval, and cap-cost.”
press 2026-07-06
s9 OrcaRouter-Lite open-source repository
“Self-hosted LLM router with a managed safety net. OpenAI-compatible. BYOK. Single-workspace. Streaming.”
official 2026-07-06
s10 Trust probe 2026-07-06: homepage shows SOC 2, ISO 27001, GDPR, HIPAA badges, reports under NDA, no trust or security subdomain
“Audit reports available under NDA, request a copy below.”
official 2026-07-06

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.