Palo Alto Networks said on April 30 that it has agreed to acquire Portkey, a startup that builds AI gateways for autonomous agents, in a deal that pulls one of the busiest pieces of agent infrastructure into the security giant's portfolio. Financial terms were not disclosed, and the company expects the transaction to close in its fourth quarter of fiscal 2026.
The acquisition lands as enterprises rush to deploy agents that act on behalf of employees, calling APIs, moving data, and chaining work across systems. Palo Alto framed the deal in characteristically blunt terms. "As autonomous agents join the enterprise workforce, they also become a new, unmanaged attack surface," said Lee Klarich, the company's chief product and technology officer.
What Portkey Brings
Portkey, founded in 2023 and based in San Francisco, runs what it calls an AI gateway: a centralized control plane that sits between agents and the models or tools they call. According to Palo Alto's announcement, Portkey already processes trillions of tokens per month with low-latency agent-to-agent communication and brokers requests across more than 3,000 large language models, including offerings from OpenAI, Anthropic, Google, and DeepSeek.
The startup raised a $15 million Series A in February led by Elevation Capital with participation from Lightspeed. Co-founder and chief executive Rohit Agarwal said in the announcement that "scaling AI in production requires a delicate balance between total flexibility for developers and absolute control for security teams" — a sentiment that maps directly onto Palo Alto's pitch to chief information security officers.
Folding Into Prisma AIRS
Portkey will become the AI gateway for Prisma AIRS, Palo Alto's AI runtime security platform, where the company says it will act as a "central nervous system" for agentic traffic. The combined product is meant to give enterprises a single seam at which to enforce identity controls, monitor every model call, and apply policy against threats such as prompt injection, data leakage, and unauthorized access.
Palo Alto is also positioning the integration around availability — claiming a target of 99.99 percent uptime for autonomous workloads — and around governance across the rapidly expanding catalog of LLMs and Model Context Protocol tools.
Why It Matters
The deal is the latest sign that AI security is consolidating from a feature into a category. Cisco, CrowdStrike, and a clutch of well-funded startups have all moved into agent governance over the past quarter, and Anthropic's Model Context Protocol has made it trivial for agents to plug into hundreds of external systems — multiplying the surface area defenders have to cover.
For Palo Alto, buying Portkey is a way to skip the slow build-out of a gateway from scratch and instead inherit traffic patterns and integrations that are already running in production. For customers, the bet is that one vendor's platform will end up cheaper and easier than stitching together a separate gateway, observability tool, and policy engine for every agent that gets deployed.
If agents really are about to join payroll, Palo Alto wants to be the badge reader at the door.
