omnia vs portkey

Portkey governs the model call. Omnia governs the tool call.

An injected instruction does harm when the agent acts on it, so Omnia’s checks sit on the tool call: its arguments and the person behind it. Portkey, now part of Palo Alto Networks, is a model gateway, and its guardrails see the model call.

A retrieved document carries an instruction to pay a supplier’s new bank account.
on omnia

The model is convinced, and the agent calls the payment tool. The account isn’t on the approved list and the caller isn’t authorisedauthorized for payments, so policy refuses the call. The audit records both reasons. docs

on portkey

Portkey only evaluates the last message in the request body when running guardrail checks. Policy on tool-call arguments isn’t documented. their docs

Policy on what the agent does

A rule can say who may call the payment tool and which accounts it may pay. A broker checks both on every call. docs enterprise

Portkey: Guardrails check the last message; the MCP gateway controls which tools each user can call. source

Fails closed by default

A call policy can’t approve doesn’t run, including when the broker can’t answer. The decision goes into the transcript and into a compliance record. docs enterprise

Portkey: With Deny off, a request that fails a check is still sent, with a different status code. source

Budgets for everyone

Budgets per agent, provider or workspace are in the free core, daily or monthly, with an action on breach. how it works

Portkey: Budget limits that expire a key are on Enterprise and select Pro plans. source

At a glance

Topic Omnia Portkey, per its docs
Model providers yes Seven native protocols and any OpenAI-compatible URL. docs documented A very large cataloguecatalog, with fallbacks. source
Argument-level tool policy yes A CEL rule on every call. docs enterprise not documented Not documented. source
End-user identity in policy yes Yes. docs enterprise partly Identity headers to MCP servers. source
Blocking budgets yes Free core. how it works partly Enterprise and select Pro. source
Red teaming before release yes Adversarial callers gate the release. docs not documented Not documented. source
Runs the agent yes Yes. docs not documented Gateway only. source

Common questions

Can I use Portkey with Omnia?
Yes. Point an Omnia provider at Portkey’s OpenAI-compatible endpoint and Omnia’s tool policy, testing and rollout sit on top.
Who owns Portkey?
Palo Alto Networks completed its acquisition of Portkey in May 2026; the gateway is now the Prisma AIRS AI Gateway.

Put your own agent through the gate.

Install Omnia in your cluster and run it free while you build.

Portkey claims are from Portkey, now part of Palo Alto Networks’s published documentation, checked 22 October 2026. Spot something out of date? Tell us.