Portkey governs the model call. Omnia governs the tool call.
An injected instruction does harm when the agent acts on it, so Omnia’s checks sit on the tool call: its arguments and the person behind it. Portkey, now part of Palo Alto Networks, is a model gateway, and its guardrails see the model call.
The model is convinced, and the agent calls the payment tool. The account isn’t on the approved list and the caller isn’t authorisedauthorized for payments, so policy refuses the call. The audit records both reasons. docs
on portkey Portkey only evaluates the last message in the request body when running guardrail checks. Policy on tool-call arguments isn’t documented. their docs
Budgets for everyone
Budgets per agent, provider or workspace are in the free core, daily or monthly, with an action on breach. how it works
Portkey: Budget limits that expire a key are on Enterprise and select Pro plans. source
At a glance
| Topic | Omnia | Portkey, per its docs |
|---|---|---|
| Model providers | yes Seven native protocols and any OpenAI-compatible URL. docs | documented A very large cataloguecatalog, with fallbacks. source |
| Argument-level tool policy | yes A CEL rule on every call. docs enterprise | not documented Not documented. source |
| End-user identity in policy | yes Yes. docs enterprise | partly Identity headers to MCP servers. source |
| Blocking budgets | yes Free core. how it works | partly Enterprise and select Pro. source |
| Red teaming before release | yes Adversarial callers gate the release. docs | not documented Not documented. source |
| Runs the agent | yes Yes. docs | not documented Gateway only. source |
Common questions
- Can I use Portkey with Omnia?
- Yes. Point an Omnia provider at Portkey’s OpenAI-compatible endpoint and Omnia’s tool policy, testing and rollout sit on top.
- Who owns Portkey?
- Palo Alto Networks completed its acquisition of Portkey in May 2026; the gateway is now the Prisma AIRS AI Gateway.
Put your own agent through the gate.
Install Omnia in your cluster and run it free while you build.
Portkey claims are from Portkey, now part of Palo Alto Networks’s published documentation, checked 22 October 2026. Spot something out of date? Tell us.