Palo Alto Networks recently announced its intent to acquire Portkey, a San Francisco-based AI gateway and control plane company. The deal, expected to close in Palo Alto Networks’ fiscal fourth quarter of 2026, will integrate Portkey’s technology into Prisma AIRS, the company’s agentic AI security platform.

The acquisition gives Palo Alto Networks a production-hardened AI gateway with traction among enterprise customers, capable of routing and governing AI agent traffic at scale.

The strategic logic is straightforward: as enterprises shift from AI copilots to autonomous agents, the security perimeter expands to encompass every API call, model invocation, and agent-to-agent interaction. Portkey sits at that intersection, providing observability, governance, semantic routing, and cost control for AI traffic. .

Who Is Portkey?

Portkey was founded in 2023 by Rohit Agarwal and Ayush Garg.

The company’s core product is an AI gateway that sits between applications and LLMs, providing a single control plane for managing model traffic, enforcing policies, and monitoring costs. Portkey provides access to over 3,000 large language models through a unified API, and its architecture requires only three lines of code to integrate.

Portkey raised approximately $18 million across three funding rounds. Lightspeed Venture Partners led the initial $3 million seed round in August 2023. In February 2026 (ten weeks before this acquisition announcement), the company closed a $15 million Series A. The rapid timeline from Series A to acquisition is notable.

Portkey’s customer base included Fortune 500 enterprises across finance, pharma, and technology, as well as developer-facing companies such as Postman and Snorkel AI.

The company made its core enterprise gateway available at no cost ahead of the Series A, a deliberate move to accelerate adoption and establish the product as the default infrastructure for production AI workflows. 

Strategic Rationale

Palo Alto Networks built Prisma AIRS to secure the agentic AI lifecycle, releasing Prisma AIRS 3.0 earlier this year with coverage spanning model scanning, runtime security, and automated red teaming. The platform lacks a native, production-grade AI gateway, a centralized enforcement point that sits in-path for every agent interaction, routing requests, applying policies, and authenticating agents in real time. 

Portkey fills that gap with a battle-tested component already operating at enterprise scale.

This is Palo Alto’s second major acquisition this year, following its $25 billion acquisition of CyberArk, which closed in February 2026. CyberArk brought identity security capabilities to the platform; Portkey’s agent registry and access controls connect directly to those identity primitives.

The combined architecture creates a unified control plane that spans network security, cloud security, identity, and now AI agent governance. This is a stack designed to appeal to large enterprises consolidating security vendors.

Three additional factors reinforce the logic of the acquisition:

• Agentic AI creates a fundamentally new attack surface: autonomous agents make decisions across internal and external systems at scale, acting as what Palo Alto Networks describes as highly privileged insiders. Without a centralized enforcement layer, enterprises lack a systematic way to authenticate agent actions, enforce least-privilege controls, or detect anomalous behavior. Portkey’s gateway provides that layer.
• Portkey’s scale validates production readiness: processing trillions of tokens per month while meeting the low-latency requirements for agent-to-agent communication is a nontrivial engineering achievement. Palo Alto Networks acquires not only technology but also operational proof that the architecture works at enterprise-scale levels.
• Timing is competitive: the AI gateway market is forming quickly. Prisma AIRS, without a native gateway, risked being outflanked by competitors or alternative architectures. Acquiring Portkey locks in a leading gateway asset before the market consolidates around a small number of control plane providers.

Analysis

The acquisition of Portkey enables Palo Alto Networks to continue its platform consolidation strategy for AI security. Prisma AIRS 3.0, the CyberArk identity layer, and Portkey’s AI gateway now form a three-layer architecture covering model lifecycle security, agent identity governance, and traffic control.

This is a more integrated AI security stack than any comparable competitor offers, and it positions Palo Alto Networks to capture significant budget in the emerging agentic AI governance category.

The freemium adoption model Portkey pursued before its acquisition gives Palo Alto Networks a large installed base to convert to paid Prisma AIRS customers. That conversion pipeline provides a meaningful near-term revenue opportunity (though converting freemium users to paid can be challenging).

For enterprises already running Palo Alto Networks’ security stack, adding a native AI gateway to Prisma AIRS offers a genuine consolidation opportunity. IT security teams gain a single platform for governing AI traffic without deploying and managing a separate tool.

The combination of Portkey’s gateway with CyberArk-derived agent identity controls creates a more comprehensive governance architecture than either component provides on its own.

The Portkey acquisition advances Palo Alto Networks’ platform consolidation strategy in a logical direction. The company identified a missing component in Prisma AIRS (a production-grade AI gateway capable of governing agentic traffic at enterprise scale) and acquired a company that had already proven the technology with Fortune 500 customers. The deal closes a gap that would have taken significant time and engineering investment to address organically.

The integration risk is real but manageable. Portkey’s adoption has been driven in part by its simplicity and developer-friendliness, and preserving those characteristics within a large enterprise security platform requires deliberate product discipline. Palo Alto Networks’ track record of executing acquisitions, including CyberArk, will be the key variable in how quickly the combined platform delivers on its positioning.

The broader takeaway for enterprise IT and security buyers is that AI governance is shifting from a software tool category to a core security platform requirement. Palo Alto Networks is betting that enterprises buying AI security will consolidate on a single platform rather than assemble a collection of point solutions.

Overall, the Portkey acquisition puts the company in its strongest position to date. The company’s platformization strategy is clearly working.