All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Palo Alto Networks closed its purchase of Portkey on May 29, 2026, at a price neither company disclosed, and made it the core AI gateway of Prisma AIRS, its AI security platform. Portkey sells software that sits between a company's applications and the AI models they call, checking and routing each request, with its core code published as open source. The public record documents Portkey's usage far better than its paying customers. Press coverage reported more than 120 million AI requests a day across some 24,000 organizations. The customers Portkey names appear in homepage testimonials from Qoala, Internet2, and QA.tech rather than in documented contracts, and the company had raised about 18 million dollars when it sold.
| Description | Portkey is an AI gateway and control plane for teams putting generative AI into production. It routes requests to language models and adds observability, guardrails that redact sensitive data, governance, and prompt management in one platform. | [f1] |
|---|---|---|
| Acquisition | Palo Alto Networks, announced 2026-04-30 | [f2] |
| Founded | 2023 | [f3] |
| HQ | San Francisco, California, US | [f4] |
| Latest funding | Series A, $15M, led by Elevation Capital (2026) | [f5] |
| Deployment | SaaS, Self-hosted | [f6] |
| Compliance | GDPR, HIPAA, ISO 27001, SOC 2 | [f6] |
| Product | What it does |
|---|---|
| Portkey | AI gateway and control plane that routes requests across many LLM providers and runs guardrails on inputs and outputs to catch prompt injection, PII leaks, and unsafe content. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Portkey is an AI gateway and control plane that routes requests across many LLM providers and runs guardrails on inputs and outputs to catch prompt injection, PII leaks, and unsafe content. It is mapped to the AI Defense Matrix. [f7]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score |
|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs, demos, and third-party validation. | 4/5 |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 4/5 |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 4/5 |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
reinforce or reposition
| Dimension | Score |
|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 2/3 |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Portkey: Production Stack for Gen AI Builders | official | 2026-07-10 |
| f2 | Palo Alto Networks: Intent to Acquire Portkey (April 30, 2026) | official | 2026-07-10 |
| f3 | Inc42 on Portkey | press | 2026-07-10 |
| f4 | Portkey contact page | official | 2026-06-14 |
| f5 | Portkey Series A announcement | press | 2026-07-10 |
| f6 | AI Defense Matrix Catalog entry | other | 2026-06-13 |
| f7 | AI Defense Matrix Catalog mapping | other | 2026-06-23 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Portkey: Production Stack for Gen AI Builders (acquisition banner live on 2026-07-10) “We're excited to announce Palo Alto Networks has completed the acquisition of Portkey.” | official | 2026-07-10 |
| s2 | Portkey: AI Gateway feature page “Connect, manage, and secure AI interactions across 3000+ LLMs with centralized control, real-time monitoring, and enterprise-grade governance.” | official | 2026-07-10 |
| s3 | Portkey: Guardrails feature page “Portkey runs 60+ powerful AI guardrails on top of the open-source Gateway, so you can filter, fix, or route every LLM request as it happens.” | official | 2026-07-10 |
| s4 | Portkey: Pricing (Enterprise compliance certificates and deployment options) “SOC2, ISO27001, GDPR, HIPAA Compliance Certificates ... BAA Signing for Compliances ... VPC Managed Hosting ... Private Tenancy” | official | 2026-07-10 |
| s5 | Portkey-AI/gateway: open-source repository (more than 12,000 stars, MIT license) “A blazing fast AI Gateway with integrated guardrails. Route to 1,600+ LLMs, 50+ AI Guardrails with 1 fast & friendly API.” | official | 2026-07-10 |
| s6 | Palo Alto Networks: Completes Acquisition of Portkey, Expands Prisma AIRS (May 29, 2026) “today announced it has closed the acquisition of Portkey, a pioneer in AI Gateways. By establishing Portkey as the core AI Gateway for Prisma AIRS, the comprehensive AI security platform, Palo Alto Networks will be able to deliver a solution that natively integrates.” | press | 2026-07-10 |
| s7 | Palo Alto Networks: Intent to Acquire Portkey (April 30, 2026) “Portkey delivers a critical centralized control plane to manage and protect autonomous AI agents, already processing trillions of tokens per month with the low latency required for agent-to-agent communication.” | press | 2026-07-10 |
| s8 | Inc42: Portkey Bags 3 Million Dollar Seed Funding (Lightspeed-led, 2023) “The startup currently claims to serve millions of requests a day and has so far partnered with names such as Postman, Jio Haptik, and Springworks, among others.” | press | 2026-07-10 |
| s9 | Portkey: Series A announcement (15 million dollars, February 2026) “Today we're proud to announce Portkey has raised $15 million in Series A funding led by Elevation Capital, with participation from Lightspeed.” | official | 2026-07-10 |
| s10 | National Vulnerability Database: CVE-2025-66405 (Portkey-AI gateway SSRF, fixed in 1.14.0) “Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header ... This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.” | research | 2026-07-10 |
| s11 | MITRE CVE Record: CVE-2025-66405 Portkey.ai Gateway Server-Side Request Forgery in Custom Host “Portkey.ai Gateway: Server-Side Request Forgery (SSRF) in Custom Host” | research | 2026-07-10 |
| s12 | SEC Form D: Portkey, Inc. Notice of Exempt Offering of Securities (CIK 0001989908, filed 2023-08-22) “entityName Portkey, Inc. ... industryGroupType Other Technology ... totalOfferingAmount 3000000 ... totalAmountSold 2699999” | regulatory | 2026-07-10 |
| s13 | Portkey: Homepage customer testimonials (QA.tech, Qoala, Internet2, Fortune 500 pharma) “Trusted by Fortune 500s & Startups ... Patrick L, Founder and CPO, QA.tech ... With 30 million policies a month, managing over 25 GenAI use cases became a pain ... Prateek Jogani, CTO, Qoala ... Tim Manik, Cloud Solutions Architect, Internet2” | official | 2026-07-10 |
| s14 | LiteLLM Docs: Getting Started (Call 100+ LLMs using the OpenAI Input/Output Format) “Call 100+ LLMs using the OpenAI Input/Output Format ... Central service (LLM Gateway) to access multiple LLMs” | official | 2026-07-10 |
| s15 | The New Stack: Portkey open-sources its AI gateway after processing 2 trillion tokens a day (March 31, 2026) “This month, the company launched its newly unified Portkey Gateway service and made it fully open-source.” | press | 2026-07-10 |
| s16 | The New Stack: Portkey usage figures at the March 2026 open-source launch “The company's platform is already processing trillions of tokens and more than 120 million AI requests every day, managing $180 million in annualized AI spend across some 24,000 organizations.” | press | 2026-07-10 |
| s17 | The New Stack: Palo Alto Networks makes a $700M-class AI bet on Portkey gateway (Janakiram MSV, May 4, 2026) “Portkey, LiteLLM, Kong AI Gateway, and Cloudflare AI Gateway each solved the same fragmentation problem in slightly different ways.” | press | 2026-07-10 |
| s18 | Futurum: Can Palo Alto Networks Route the Agentic Future Through Portkey's AI Gateway? (Fernando Montenegro, May 7, 2026) “Portkey fits meaningfully within the Prisma AIRS portfolio, adding a gateway capability that addresses a real and growing control gap as agentic AI workloads move from pilot to production.” | research | 2026-07-10 |
| s19 | SDxCentral: Palo Alto Networks completes Portkey acquisition, adding AI gateway to flagship platform “Financial details of the deal were not disclosed.” | press | 2026-07-10 |
| s20 | Inc42: Lightspeed partner Dev Khare on backing the Portkey founders (2023 seed coverage) “Lightspeed Partner Dev Khare said, We are excited to partner with Portkey ... We are equally excited by the founding team of Rohit and Ayush whom we've known for the past decade through multiple 0 to 1 journeys.” | press | 2026-07-10 |
| s21 | Inc42 on the Portkey founders Rohit Agarwal and Ayush Garg “This prompted Agarwal to join hands with Pepper Content's erstwhile director of engineering Ayush Garg to build a control panel for AI apps, Portkey.ai. Founded in April 2023” | press | 2026-07-10 |
| s22 | GitHub API repository record for Portkey-AI/gateway (pushed_at, star count, license) “"pushed_at": "2026-05-25T13:54:51Z", "stargazers_count": 12391, "license": MIT License, "archived": false” | other | 2026-07-10 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Portkey homepage (Production Stack for Gen AI Builders, acquisition banner live on 2026-07-10) “Portkey equips AI teams with everything they need to go to production - AI Gateway, Observability, Guardrails, Governance, and Prompt Management, all in one platform.” | official | 2026-07-10 |
| s2 | Portkey AI Gateway feature page “Connect, manage, and secure AI interactions across 3000+ LLMs with centralized control, real-time monitoring, and enterprise-grade governance.” | official | 2026-07-10 |
| s3 | Portkey guardrails feature page (60+ guardrails and Patronus integration) “Portkey runs 60+ powerful AI guardrails on top of the open-source Gateway, so you can filter, fix, or route every LLM request as it happens ... Patronus AI's suite of evaluators are now available on the Portkey Gateway.” | official | 2026-07-10 |
| s4 | Portkey pricing page (Production plan and compliance certificates) “Production $49/month ... 100k recorded logs per month ... +$9 overages per additional 100k requests ... SOC2, ISO27001, GDPR, HIPAA Compliance Certificates ... BAA Signing for Compliances ... VPC Managed Hosting ... Private Tenancy ... Enterprise-Grade Reliability, backed by robust SLAs” | official | 2026-07-10 |
| s5 | Portkey-AI/gateway open-source repository (more than 12,000 stars, MIT license) “A blazing fast AI Gateway with integrated guardrails. Route to 1,600+ LLMs, 50+ AI Guardrails with 1 fast & friendly API.” | official | 2026-07-10 |
| s6 | Palo Alto Networks completes acquisition of Portkey (May 29, 2026) “today announced it has closed the acquisition of Portkey, a pioneer in AI Gateways ... Portkey's unique architecture is purpose-built to secure AI deployments at scale, with its ability to process trillions of tokens ... By establishing Portkey as the core AI Gateway for Prisma AIRS” | press | 2026-07-10 |
| s7 | Portkey homepage customer testimonials (Qoala, Internet2, QA.tech, Fortune 500 pharma) “Trusted by Fortune 500s & Startups ... Patrick L, Founder and CPO, QA.tech ... With 30 million policies a month, managing over 25 GenAI use cases became a pain ... Prateek Jogani, CTO, Qoala ... AI Leader, Fortune 500 Pharma Company ... Tim Manik, Cloud Solutions Architect, Internet2” | official | 2026-07-10 |
| s8 | Portkey AI Gateway routing features (conditional routing, fallbacks, load balancing) “Conditional Routing ... Fallbacks. Switch between LLMs during failures or errors. Automatic retries ... Load balancing. Use the AI gateway to distribute network traffic across LLMs.” | official | 2026-07-10 |
| s9 | Inc42 on how Portkey steers enterprises through the GenAI maze (founders and named clients) “This prompted Agarwal to join hands with Pepper Content's erstwhile director of engineering Ayush Garg to build a control panel for AI apps, Portkey.ai. Founded in April 2023 ... our client companies like Postman or Quizizz ... have built their own products using generative AI.” | press | 2026-07-10 |
| s10 | Inc42 on Rohit Agarwal's product and AI background before Portkey “The genesis of Portkey started with a problem statement when Agarwal was still working with Freshworks, where he led the product and AI vertical from 2015 to 2020 ... he transitioned to Pepper Content in 2021 ... scaling up the company's AI writing assistant, Peppertype.ai.” | press | 2026-07-10 |
| s11 | The New Stack: Portkey open-sources its AI gateway after processing 2 trillion tokens a day (March 31, 2026) “This month, the company launched its newly unified Portkey Gateway service and made it fully open-source.” | press | 2026-07-10 |
| s12 | The New Stack: Portkey usage figures at the March 2026 open-source launch “The company's platform is already processing trillions of tokens and more than 120 million AI requests every day, managing $180 million in annualized AI spend across some 24,000 organizations.” | press | 2026-07-10 |
| s13 | Futurum: Can Palo Alto Networks Route the Agentic Future Through Portkey's AI Gateway? (Fernando Montenegro, May 7, 2026) “Portkey fits meaningfully within the Prisma AIRS portfolio, adding a gateway capability that addresses a real and growing control gap as agentic AI workloads move from pilot to production.” | research | 2026-07-10 |
| s14 | SDxCentral: Palo Alto Networks completes Portkey acquisition, adding AI gateway to flagship platform “Financial details of the deal were not disclosed.” | press | 2026-07-10 |
| s15 | Portkey Series A announcement (15 million dollars, February 2026) “Today we're proud to announce Portkey has raised $15 million in Series A funding led by Elevation Capital, with participation from Lightspeed.” | official | 2026-07-10 |
| s16 | SEC Form D: Portkey, Inc. Notice of Exempt Offering of Securities (CIK 0001989908, filed 2023-08-22) “entityName Portkey, Inc. ... industryGroupType Other Technology ... totalOfferingAmount 3000000 ... totalAmountSold 2699999” | regulatory | 2026-07-10 |
| s17 | GitHub API repository record for Portkey-AI/gateway (pushed_at, star count, license) “"pushed_at": "2026-05-25T13:54:51Z", "stargazers_count": 12391, "license": MIT License, "archived": false” | other | 2026-07-10 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Do not republish its content or share access without the operator's permission.