{"slug":"portkey","url":"https://www.altairalabs.ai/vs/portkey/","markdown":"https://www.altairalabs.ai/vs/portkey.md","name":"Portkey","vendor":"Portkey, now part of Palo Alto Networks","category":"Gateways and guardrails","checked":"2026-10-22","summary":"Omnia checks each tool call’s arguments and caller, refuses what it can’t approve, and runs the agent in your cluster. Portkey’s guardrails govern the model call.","headline":"Portkey governs the model call. Omnia governs the tool call.","scene":{"setup":"A retrieved document carries an instruction to pay a supplier’s new bank account.","omnia":"The model is convinced, and the agent calls the payment tool. The account isn’t on the approved list and the caller isn’t authorised for payments, so policy refuses the call. The audit records both reasons.","omniaCaps":["per-call-policy","claim-based-access","end-user-identity","audit-log"],"them":"Portkey only evaluates the last message in the request body when running guardrail checks. Policy on tool-call arguments isn’t documented.","source":"https://portkey.ai/docs/product/guardrails","omniaEvidence":"https://omnia.altairalabs.ai/how-to/security/configure-tool-policies/"},"differences":[{"title":"Policy on what the agent does","body":"A rule can say who may call the payment tool and which accounts it may pay. A broker checks both on every call.","caps":["per-call-policy","claim-based-access"],"them":"Guardrails check the last message; the MCP gateway controls which tools each user can call.","source":"https://portkey.ai/docs/product/mcp-gateway","omniaEnterprise":true,"omniaEvidence":"https://omnia.altairalabs.ai/how-to/security/configure-tool-policies/"},{"title":"Fails closed by default","body":"A call policy can’t approve doesn’t run, including when the broker can’t answer. The decision goes into the transcript and into a compliance record.","caps":["per-call-policy","audit-log"],"them":"With Deny off, a request that fails a check is still sent, with a different status code.","source":"https://portkey.ai/docs/product/guardrails","omniaEnterprise":true,"omniaEvidence":"https://omnia.altairalabs.ai/how-to/security/configure-tool-policies/"},{"title":"Budgets for everyone","body":"Budgets per agent, provider or workspace are in the free core, daily or monthly, with an action on breach.","caps":["cost-budgets","cost-analytics"],"them":"Budget limits that expire a key are on Enterprise and select Pro plans.","source":"https://portkey.ai/docs/product/ai-gateway/virtual-keys/budget-limits","omniaEnterprise":false,"omniaEvidence":"https://www.altairalabs.ai/scale"}],"rows":[{"topic":"Model providers","omnia":"Seven native protocols and any OpenAI-compatible URL.","caps":["native-interfaces","openai-compatible"],"them":"A very large catalogue, with fallbacks.","coverage":"yes","source":"https://github.com/Portkey-AI/gateway","omniaEnterprise":false,"omniaEvidence":"https://omnia.altairalabs.ai/reference/core/provider/"},{"topic":"Argument-level tool policy","omnia":"A CEL rule on every call.","caps":["per-call-policy"],"them":"Not documented.","coverage":"undocumented","source":"https://portkey.ai/docs/product/guardrails","omniaEnterprise":true,"omniaEvidence":"https://omnia.altairalabs.ai/how-to/security/configure-tool-policies/"},{"topic":"End-user identity in policy","omnia":"Yes.","caps":["claim-based-access"],"them":"Identity headers to MCP servers.","coverage":"partly","source":"https://portkey.ai/docs/product/mcp-gateway","omniaEnterprise":true,"omniaEvidence":"https://omnia.altairalabs.ai/reference/policies/toolpolicy/"},{"topic":"Blocking budgets","omnia":"Free core.","caps":["cost-budgets"],"them":"Enterprise and select Pro.","coverage":"partly","source":"https://portkey.ai/docs/product/ai-gateway/virtual-keys/budget-limits","omniaEnterprise":false,"omniaEvidence":"https://www.altairalabs.ai/scale"},{"topic":"Red teaming before release","omnia":"Adversarial callers gate the release.","caps":["adversarial","deploy-gate"],"them":"Not documented.","coverage":"undocumented","source":"https://portkey.ai/docs/product/guardrails","omniaEnterprise":false,"omniaEvidence":"https://promptarena.altairalabs.ai/arena/how-to/voice/voice-red-team/"},{"topic":"Runs the agent","omnia":"Yes.","caps":["progressive-rollout"],"them":"Gateway only.","coverage":"undocumented","source":"https://github.com/Portkey-AI/gateway","omniaEnterprise":false,"omniaEvidence":"https://omnia.altairalabs.ai/tutorials/progressive-rollouts/"}],"faq":[{"q":"Can I use Portkey with Omnia?","a":"Yes. Point an Omnia provider at Portkey’s OpenAI-compatible endpoint and Omnia’s tool policy, testing and rollout sit on top."},{"q":"Who owns Portkey?","a":"Palo Alto Networks completed its acquisition of Portkey in May 2026; the gateway is now the Prisma AIRS AI Gateway."}]}