Palo Alto adds unified AI gateway
- Palo Alto Networks said on April 30 it will acquire Portkey and fold its AI gateway into Prisma AIRS to govern autonomous agents. - The key detail is scale: Portkey says its gateway already handles trillions of tokens monthly, with routing, telemetry, audit logs, and failover. - This pushes AI security from model guardrails toward full control planes as enterprises move agents from pilots into production.
AI gateways are becoming the plumbing layer nobody can skip. That is the real news here. On April 30, Palo Alto Networks said it plans to acquire Portkey and make its technology the AI Gateway inside Prisma AIRS — Palo Alto’s platform for securing AI apps and agents. The point is simple: once AI systems stop answering questions and start taking actions, companies need one place to watch, route, and restrict everything those agents do. (paloaltonetworks.com) ### What is an AI gateway? An AI gateway sits between an application and the models or tools it calls. It can decide which model gets a request, log what happened, apply policy checks, block risky prompts or outputs, and keep records for debugging and compliance. Portkey had alre(paloaltonetworks.com)it. (portkey.ai) ### Why does that matter more for agents? A chatbot can be annoying. An autonomous agent can be dangerous. Agents can trigger workflows, touch internal systems, call APIs, and make chained decisions without a human approving every step. Palo Alto’s pitch is that these systems behave like highly privileged insiders, which means the risk is not just bad text output — it is real actions taken with real permissions. (paloaltonetworks.com) ### What exactly did Palo Alto buy? Not just another guardrail product. Portkey is the control plane piece. Palo Alto said Portkey will become the AI Gateway for Prisma AIRS, giving customers a central layer to monitor, route, and secure AI transactions across the enterprise. The(paloaltonetworks.com)of tokens per month. Terms of the deal were not disclosed, and Palo Alto said it expects the acquisition to close in its fiscal fourth quarter ending July 31. (paloaltonetworks.com) ### Why wasn’t Prisma AIRS enough on its own? Turns out Palo Alto and Portkey were already paired up. In August 2025, Portkey announced an integration that let customers run Prisma AIRS guardrails through Portkey’s gateway. That setup gave Palo Alto the security layer and Portkey(paloaltonetworks.com)ly, the partnership became product strategy. (portkey.ai) ### What does “unified” really mean here? It means one enforcement point instead of scattered checks. Palo Alto says the combined stack can inspect AI traffic at runtime, enforce governance policies, apply least-privilege identity controls, keep audit logs, and manage access to models, agents, and MCP servers. There is also a rel(portkey.ai)t breaks uptime is not useful in production. Palo Alto even attached a 99.99% uptime claim to that part of the pitch. (paloaltonetworks.com) ### Why is Palo Alto moving so aggressively now? Because the company is trying to own the security architecture of the agent era. Prisma AIRS 3.0 launched on March 23 with broader lifecycle security for autonomous agents. Palo Alto also completed its Koi deal on April 14 to secur(paloaltonetworks.com) now gateway control around AI systems. (paloaltonetworks.com) ### What is the bigger shift? The market is moving past “can we use a model safely?” and toward “who governs machine actions at enterprise scale?” That is a different problem. It needs traffic control, permissions, telemetry, and rollback paths — more like API management and zero-trust secu(paloaltonetworks.com)ke mission-critical infrastructure. (paloaltonetworks.com) ### Bottom line? Palo Alto is treating AI agents as a new security perimeter. The Portkey deal matters because it gives the company the missing control plane — the layer that can actually govern agent behavior once those systems leave demo mode and start doing real work. (paloaltonetworks.com)
