Head-to-headPublished July 16, 2026· Last verified July 16, 2026

Portkey vs TrueFoundry (2026): AI Gateways Compared — and Where Kosmoy Fits

Portkey and TrueFoundry both sell an enterprise AI gateway, but one is a managed control plane and the other a Kubernetes-native platform that also serves and fine-tunes models. Here is how they differ, and where each stops being a gateway question.

Portkey and TrueFoundry both put an enterprise-grade gateway in front of many model providers, and both were recognized as the AI-gateway category hardened in 2026. They differ in scope. Portkey is a managed control plane — gateway plus deep observability, a guardrails library and a prompt studio — with an open-source gateway core (MIT), now owned by Palo Alto Networks. TrueFoundry is a Kubernetes-native platform that pairs an LLM/MCP/Agent gateway with model serving, fine-tuning and GPU orchestration, deployable SaaS, in-VPC or fully air-gapped.

This page compares the two on the capability axes that matter, with every claim cited to each vendor's own documentation. It then does something a straight head-to-head cannot: it asks what happens when the requirement grows past the gateway — inventory, compliance evidence, agent containment — which is where a full AI management platform like Kosmoy enters the frame.


Who each product is for

Portkey

Portkey speaks to platform teams that want the gateway problem solved without operating it: a managed control plane with request logging (21+ metrics), budgets per key and workspace, a guardrails library, prompt management and a model catalog, spanning SaaS, hybrid and air-gapped deployments. Its open-source gateway core (MIT, ~12.4k stars) makes adoption easy; the platform monetizes the operational layer.

Since May 2026 it belongs to Palo Alto Networks, folded into Prisma AIRS — enterprise security distribution, with a quieter public roadmap since (the docs changelog stops at April 2026).

TrueFoundry

TrueFoundry speaks to platform-engineering and ML-infrastructure teams at regulated enterprises that run Kubernetes and want one self-hosted control plane for LLMs, MCP tools and agents plus model serving on their own GPUs. It combines an LLM/MCP/Agent gateway with vLLM/TGI/Triton serving, fine-tuning and fractional GPUs, and ships a documented air-gapped install targeting defense and regulated finance.

It was named a Representative Vendor in the Gartner Market Guide for AI Gateways (February 2026), launched an Agent Gateway in June 2026, and acquired MLOps vendor Seldon AI the same month. The core platform is proprietary.


Portkey vs TrueFoundry vs Kosmoy — the capability radar

Three shapes on the same ten axes. Portkey (orange) and TrueFoundry (violet) both peak on Gateway & Policy Control and score well on observability; TrueFoundry reaches further on agent containment and (off-radar here) model serving, Portkey on model breadth and prompt tooling. Both cluster low on the compliance and inventory axes — the gateway category's signature. Kosmoy (blue) trades some raw gateway breadth for reach across inventory, compliance and agent containment. Read it as area: the two gateways compete on one spoke; the suite covers the web.

  • Portkey
  • TrueFoundry
  • Kosmoy
Portkey vs TrueFoundry vs Kosmoy — capability radarCapability radar comparing Portkey, TrueFoundry and Kosmoy across ten axes, scored 0 to 10. AI Inventory & Discovery: Portkey 5, TrueFoundry 6, Kosmoy 9; Security & Shadow AI: Portkey 4, TrueFoundry 5, Kosmoy 8; Observability & FinOps: Portkey 9, TrueFoundry 8, Kosmoy 7; Gateway & Policy Control: Portkey 9, TrueFoundry 9, Kosmoy 8; Guardrails & Runtime Safety: Portkey 8, TrueFoundry 7, Kosmoy 8; Agent Containment: Portkey 4, TrueFoundry 6, Kosmoy 9; Compliance & Audit: Portkey 5, TrueFoundry 5, Kosmoy 9; Testing, Evals & Red-teaming: Portkey 3, TrueFoundry 4, Kosmoy 4; Agent Building: Portkey 2, TrueFoundry 4, Kosmoy 6; Deployment Sovereignty: Portkey 9, TrueFoundry 9, Kosmoy 10.246810AI Inventory &DiscoverySecurity &Shadow AIObservability &FinOpsGateway &Policy ControlGuardrails &Runtime SafetyAgentContainmentCompliance &AuditTesting, Evals &Red-teamingAgent BuildingDeploymentSovereignty
Capability scores, axis by axis
Capability (0–10)PortkeyTrueFoundryKosmoy
AI Inventory & Discovery569
Security & Shadow AI458
Observability & FinOps987
Gateway & Policy Control998
Guardrails & Runtime Safety878
Agent Containment469
Compliance & Audit559
Testing, Evals & Red-teaming344
Agent Building246
Deployment Sovereignty9910

Bold marks the highest score on each row. 10 is reserved for categorical architectural facts; specialists are expected to outscore platforms on their own spoke.


Where Portkey wins

Observability and prompt tooling. Full request/response logging, 21+ analytics metrics, FinOps/executive dashboards (Portkey observability) and a versioned Prompt Engineering Studio give Portkey a deep, integrated operational surface.

Model breadth and low operational overhead. One API to 250+ LLMs / 1,600+ models across 45+ providers, delivered as managed SaaS with an MIT open-source core — no Kubernetes cluster to run to get started, where TrueFoundry is Kubernetes-native.

Turnkey guardrails. 20+ deterministic checks plus LLM-based checks with synchronous blocking (HTTP 446) and streaming output guardrails, integrated in the platform.

Where TrueFoundry wins

A full ML platform, not just a gateway. TrueFoundry adds vLLM/TGI/Triton model serving with autoscaling and canary deploys, fine-tuning jobs and fractional GPUs (MIG/time-slicing) on Kubernetes — deepened by the June 2026 Seldon AI acquisition. Portkey has no serving or fine-tuning layer.

Stronger agent containment and resilience. Per-agent identity with token/cost quotas, cost-velocity circuit breakers and instant tool revocation, plus TrueFailover (January 2026) for degradation-aware multi-model/multi-region failover.

Self-hosted depth and independence. A documented Kubernetes-native air-gapped install with no outbound dependencies for defense and regulated finance, Gartner AI-Gateways recognition, and an independent, actively shipping roadmap — where Portkey's is now inside Palo Alto Networks.


Where Kosmoy fits

The specialist owns its spoke; the platform holds the frontier

Both Portkey and TrueFoundry answer “how do we route, serve and govern AI traffic?” Neither answers “what AI are we running across the organization, is it compliant against a named framework, and what happens when an agent misbehaves?” TrueFoundry extends the gateway toward ML infrastructure; Kosmoy extends it toward governance. Those are different frontiers.

Kosmoy includes the gateway both products are — one OpenAI-compatible policy point with guardrails, RBAC, budgets and logging — but wraps it in the three layers a gateway leaves out: a risk-tiered inventory of every model, MCP server and agent (including a master agent registry that pulls from Foundry, Bedrock, Vertex, Salesforce and ServiceNow); EU AI Act, ISO 42001 (aligned) and NIST AI RMF evidence built from registry state plus gateway logs; and kernel-enforced Action Capsule containment for agents that act.

So the honest framing is not “Kosmoy beats Portkey and TrueFoundry at being a gateway” — they are capable gateways, and TrueFoundry adds real ML-platform depth Kosmoy does not. It is that a gateway is one spoke. If the requirement is the governance web — inventory, gateway, compliance and containment in one self-hosted platform — that is a suite decision, not a gateway or ML-platform decision.

CapabilityCapabilityPortkeyTrueFoundryKosmoy
OpenAI-compatible multi-provider gateway
Guardrails in the request path
Request observability / FinOps
Model serving / fine-tuning / GPU orchestration
MCP / agent-to-agent traffic governanceMCP + Agent GatewayMCP + Agent GatewayInventory-level
Org-wide AI inventory (beyond the gateway)
Master agent registry (Foundry/Bedrock/Vertex/…)
EU AI Act / ISO 42001 / NIST evidence
Kernel-enforced agent containmentPartial — scoped tokensPartial — quotas + circuit breakers
Self-hosted / air-gappedEnterprise tier (incl. air-gapped)
Open-source coreGateway only (MIT)
Pricing modelFree tier; Pro; enterprise quoteFree tier; Pro; enterprise quoteEnterprise subscription

Last verified July 16, 2026 against each vendor's public documentation.


Which should you choose?

For a team whose problem genuinely is model traffic — and, for TrueFoundry, model serving — pick on the axis that matters: Portkey for a managed control plane with observability and prompt depth, TrueFoundry for a Kubernetes-native platform that serves and fine-tunes as well as routes. Both offer self-hosted paths and OpenAI-compatible endpoints, so a later move is largely a configuration exercise.

For an enterprise that has to prove control over all of its AI — not just route and serve it — the choice is not between these two platforms but between infrastructure breadth and governance breadth. Kosmoy can sit in front of either: some teams keep TrueFoundry for serving and GPUs while Kosmoy holds the inventory, compliance evidence and containment for what reaches production.


Questions buyers ask

Is Portkey or TrueFoundry better?

Neither is universally better. Portkey is a managed control plane with deep observability, a prompt studio and broad model coverage, ideal for teams that want low operational overhead. TrueFoundry is a Kubernetes-native platform that pairs the gateway with model serving, fine-tuning and GPU orchestration, ideal for platform/ML teams that want one self-hosted stack. TrueFoundry is a Gartner Representative Vendor for AI Gateways; Portkey is now owned by Palo Alto Networks.

What is the difference between Portkey and TrueFoundry?

Portkey is a gateway and LLM-ops control plane: routing, observability, guardrails and prompt management, delivered as managed SaaS with an open-source gateway core. TrueFoundry is a broader Kubernetes-native AI platform: the same gateway functions plus model serving (vLLM/TGI/Triton), fine-tuning and fractional GPUs, deployable in-VPC or air-gapped. Portkey is lighter to adopt; TrueFoundry covers more of the ML lifecycle.

Does Portkey or TrueFoundry include model serving and fine-tuning?

TrueFoundry does; Portkey does not. TrueFoundry serves models with vLLM/TGI/Triton, runs fine-tuning jobs and orchestrates fractional GPUs on Kubernetes, capabilities it deepened with the June 2026 Seldon AI acquisition. Portkey is a gateway and control plane and relies on external providers for inference. If model serving on your own GPUs is a requirement, that favors TrueFoundry.

Do Portkey or TrueFoundry handle EU AI Act compliance?

Not as products. Portkey holds SOC 2, ISO 27001, GDPR and HIPAA certifications, and TrueFoundry holds SOC 2 Type 2 and HIPAA, but neither documents EU AI Act, ISO 42001 or NIST AI RMF evidence generation or AI risk classification as of July 15, 2026. That evidence layer is a governance-platform capability — Kosmoy generates it from its registries and gateway logs.

Where does Kosmoy fit against Portkey and TrueFoundry?

Kosmoy includes the same OpenAI-compatible gateway both provide, but it is one layer of a full AI management platform: organization-wide inventory, compliance evidence, and kernel-enforced agent containment sit alongside it. If your requirement is routing (Portkey) or routing plus serving (TrueFoundry), those are the lighter answers; if it is proving control over all your AI in your own infrastructure, that is a suite decision.


Sources

Every factual claim about another vendor on this page traces to that vendor's own published material or a named third-party source below.

  1. Portkey open-source gateway repository — accessed July 15, 2026
  2. TrueFoundry air-gapped deployment docs — accessed July 15, 2026
  3. TrueFoundry Gartner AI Gateways recognition (Businesswire) — accessed July 15, 2026
  4. Kosmoy AI Gateway — accessed July 15, 2026
  5. Portkey docs — what is Portkey — accessed July 15, 2026
  6. Portkey docs — plan & feature comparison (SaaS / hybrid / air-gapped) — accessed July 15, 2026
  7. Portkey docs — observability — accessed July 15, 2026
  8. Portkey docs — guardrails — accessed July 15, 2026
  9. Portkey docs — MCP gateway — accessed July 15, 2026
  10. Portkey pricing — accessed July 15, 2026
  11. Palo Alto Networks press release — Portkey acquisition completed (May 29, 2026) — accessed July 15, 2026
  12. TrueFoundry AI Gateway product page — accessed July 15, 2026
  13. TrueFoundry guardrails overview — accessed July 15, 2026
  14. Agent Gateway launch press release (Businesswire, June 2, 2026) — accessed July 15, 2026
  15. TrueFailover launch (VentureBeat, January 2026) — accessed July 15, 2026
  16. Seldon AI acquisition (SiliconANGLE, June 25, 2026) — accessed July 15, 2026
  17. aitori repository (v0.1.0, June 25, 2026, Apache-2.0) — accessed July 15, 2026
  18. Enterprise MCP access control blog — accessed July 15, 2026

One suite instead of two point tools

Kosmoy puts an inventory, a policy gateway, compliance evidence and a containment sandbox around every AI your teams run — in your own Kubernetes.

Or email sales@kosmoy.com.