Portkey AI Gateway

Portkey (Palo Alto Networks)

Open Source

Open-source AI gateway that routes to 250+ LLMs with fallbacks, caching and 50+ guardrails; managed SaaS and private-cloud options.

Curated by Tiberiu ArvaVerified

MITVersion 1.15.2Released 2026-01-12

Strengths

  • 50+ integrated input/output guardrails
  • Fallbacks, retries and load balancing
  • MCP gateway with auth and observability

Practitioner note

The OSS gateway is easy to self-host, while logs, audit logs and private-cloud deployment come with the paid tiers. Now that Palo Alto Networks owns Portkey, check the roadmap and licensing of the open-source repo before standardising on it.

Warning

Portkey AI Gateway: Palo Alto Networks completed its acquisition of Portkey on 2026-05-29, and Portkey is now the AI gateway for Prisma AIRS. Gateway 2.0, which merges Portkey's production gateway into the open-source codebase, has been a pre-release on the 2.0.0 branch since 2026-03-24.

Governance posture

Reviewed 2026-09-30
YesData residency

Self-host the OSS gateway, or use Enterprise VPC hosting / private cloud with data isolation.

Source
YesDeployment model

OSS gateway (self-hosted), managed SaaS, and Enterprise hybrid / private-cloud deployments. (self-hosted, saas, hybrid)

Source
PartialAudit logging

Audit logs of administrative activity are an Enterprise plan feature.

Source
YesSOC 2

Portkey states it is SOC 2 certified; the Enterprise plan lists SOC2 Type 2. Applies to the hosted service, not self-hosted OSS.

Source
YesISO 27001

Portkey states it is ISO 27001 certified (hosted service).

Source
UnknownISO 42001

No ISO 42001 claim found in Portkey docs or pricing pages.

N/AEU AI Act

Routing and guardrail infrastructure, not an AI system placed on the market; obligations rest with the deployer and model providers. (role: not-applicable)

YesLicense risk

MIT (main branch LICENSE) — permissive, OSI-approved. Paid features are in the hosted plans, not the repo. (low)

Source

EU AI Act obligations

Risk tier: Not applicable · as of 2026-08-23

Source-backed information mapped from Portkey AI Gateway's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.