The acquisition closed May 29. No financial terms were disclosed.
What Palo Alto Networks acquired isn’t just a product, it’s a category bet. AI gateways sit between an organization’s applications and the AI models those applications call. They inspect traffic, enforce token budgets, log interactions, and, in Portkey’s case, manage permissions for autonomous agents operating without direct human oversight. That’s the control layer enterprise security teams have been asking for since agentic workflows started reaching production.
According to Palo Alto Networks’ official announcement, Portkey’s gateway will be integrated as the core control plane for Prisma AIRS. The platform will, per the announcement, inspect AI traffic at runtime to identify agent-based threats, manage token usage, and govern agent permissions. Palo Alto Networks also describes a feature called Idira™ designed to authenticate agentic interactions and treat autonomous agents as privileged users requiring identity verification at runtime. These are vendor-stated capabilities, not independently evaluated.
The catch is what “undisclosed” means here. Palo Alto Networks hasn’t revealed what it paid, which limits any read on how aggressively the company is pricing AI security M&A. What the deal does reveal is strategic sequencing: Prisma AIRS launched as a platform for AI application security; Portkey adds the runtime inspection layer that makes that platform functional for organizations running agents, not just models.
Enterprise security teams evaluating AI infrastructure now face a consolidated decision. Before this acquisition, Portkey competed as an independent gateway option alongside other emerging tools. Inside Prisma AIRS, it becomes part of a broader platform pitch. That’s a meaningful shift for buyers who’ve been assembling point solutions, and a signal to watch for other gateway vendors about where the independent market shrinks.
This is the third enterprise AI governance acquisition to close in roughly two weeks. Snowflake acquired Natoma for data governance and MCP integration on May 27, and the Check Point / Deepchecks deal extended into LLM evaluation earlier this month. Three vendors. Three weeks. Three distinct layers of the enterprise AI governance stack. The pattern isn’t coincidental, it reflects how quickly enterprise security buyers are demanding integrated solutions over point products for AI risk management.
What to Watch
What to watch
Palo Alto Networks’ next quarterly earnings call is the first place where management will discuss attach rates for Prisma AIRS post-integration. Watch specifically for whether Portkey’s gateway capabilities are sold as a standalone add-on or bundled into the existing Prisma license tier, that pricing decision will signal whether PANW is treating AI security as an upsell or a platform inclusion. Competing gateway vendors who haven’t yet found an acquirer will face a narrower window as more security platforms consolidate this layer.
The real story is platform gravity. Palo Alto Networks didn’t buy a product. It bought the argument that enterprise organizations shouldn’t need a separate vendor for AI gateway control when they already pay for Prisma. Watch the Q2 earnings call for the first hard data on Prisma AIRS attach rates post-Portkey, that number will confirm whether the platform bet is converting or just consolidating.