Portkey vs TrueFoundry (2026): AI Gateways Compared — and Where Kosmoy Fits
Portkey and TrueFoundry both sell an enterprise AI gateway, but one is a managed control plane and the other a Kubernetes-native platform that also serves and fine-tunes models. Here is how they differ, and where each stops being a gateway question.
Portkey and TrueFoundry both put an enterprise-grade gateway in front of many model providers, and both were recognized as the AI-gateway category hardened in 2026. They differ in scope. Portkey is a managed control plane — gateway plus deep observability, a guardrails library and a prompt studio — with an open-source gateway core (MIT), now owned by Palo Alto Networks. TrueFoundry is a Kubernetes-native platform that pairs an LLM/MCP/Agent gateway with model serving, fine-tuning and GPU orchestration, deployable SaaS, in-VPC or fully air-gapped.
This page compares the two on the capability axes that matter, with every claim cited to each vendor's own documentation. It then does something a straight head-to-head cannot: it asks what happens when the requirement grows past the gateway — inventory, compliance evidence, agent containment — which is where a full AI management platform like Kosmoy enters the frame.
Who each product is for
Portkey
Portkey speaks to platform teams that want the gateway problem solved without operating it: a managed control plane with request logging (21+ metrics), budgets per key and workspace, a guardrails library, prompt management and a model catalog, spanning SaaS, hybrid and air-gapped deployments. Its open-source gateway core (MIT, ~12.4k stars) makes adoption easy; the platform monetizes the operational layer.
Since May 2026 it belongs to Palo Alto Networks, folded into Prisma AIRS — enterprise security distribution, with a quieter public roadmap since (the docs changelog stops at April 2026).
TrueFoundry
TrueFoundry speaks to platform-engineering and ML-infrastructure teams at regulated enterprises that run Kubernetes and want one self-hosted control plane for LLMs, MCP tools and agents plus model serving on their own GPUs. It combines an LLM/MCP/Agent gateway with vLLM/TGI/Triton serving, fine-tuning and fractional GPUs, and ships a documented air-gapped install targeting defense and regulated finance.
It was named a Representative Vendor in the Gartner Market Guide for AI Gateways (February 2026), launched an Agent Gateway in June 2026, and acquired MLOps vendor Seldon AI the same month. The core platform is proprietary.
Portkey vs TrueFoundry vs Kosmoy — the capability radar
Three shapes on the same ten axes. Portkey (orange) and TrueFoundry (violet) both peak on Gateway & Policy Control and score well on observability; TrueFoundry reaches further on agent containment and (off-radar here) model serving, Portkey on model breadth and prompt tooling. Both cluster low on the compliance and inventory axes — the gateway category's signature. Kosmoy (blue) trades some raw gateway breadth for reach across inventory, compliance and agent containment. Read it as area: the two gateways compete on one spoke; the suite covers the web.
- Portkey
- TrueFoundry
- Kosmoy
| Capability (0–10) | Portkey | TrueFoundry | Kosmoy |
|---|---|---|---|
| AI Inventory & Discovery | 5 | 6 | 9 |
| Security & Shadow AI | 4 | 5 | 8 |
| Observability & FinOps | 9 | 8 | 7 |
| Gateway & Policy Control | 9 | 9 | 8 |
| Guardrails & Runtime Safety | 8 | 7 | 8 |
| Agent Containment | 4 | 6 | 9 |
| Compliance & Audit | 5 | 5 | 9 |
| Testing, Evals & Red-teaming | 3 | 4 | 4 |
| Agent Building | 2 | 4 | 6 |
| Deployment Sovereignty | 9 | 9 | 10 |
Bold marks the highest score on each row. 10 is reserved for categorical architectural facts; specialists are expected to outscore platforms on their own spoke.
Where Portkey wins
Observability and prompt tooling. Full request/response logging, 21+ analytics metrics, FinOps/executive dashboards (Portkey observability) and a versioned Prompt Engineering Studio give Portkey a deep, integrated operational surface.
Model breadth and low operational overhead. One API to 250+ LLMs / 1,600+ models across 45+ providers, delivered as managed SaaS with an MIT open-source core — no Kubernetes cluster to run to get started, where TrueFoundry is Kubernetes-native.
Turnkey guardrails. 20+ deterministic checks plus LLM-based checks with synchronous blocking (HTTP 446) and streaming output guardrails, integrated in the platform.
Where TrueFoundry wins
A full ML platform, not just a gateway. TrueFoundry adds vLLM/TGI/Triton model serving with autoscaling and canary deploys, fine-tuning jobs and fractional GPUs (MIG/time-slicing) on Kubernetes — deepened by the June 2026 Seldon AI acquisition. Portkey has no serving or fine-tuning layer.
Stronger agent containment and resilience. Per-agent identity with token/cost quotas, cost-velocity circuit breakers and instant tool revocation, plus TrueFailover (January 2026) for degradation-aware multi-model/multi-region failover.
Self-hosted depth and independence. A documented Kubernetes-native air-gapped install with no outbound dependencies for defense and regulated finance, Gartner AI-Gateways recognition, and an independent, actively shipping roadmap — where Portkey's is now inside Palo Alto Networks.
Where Kosmoy fits
The specialist owns its spoke; the platform holds the frontier
Both Portkey and TrueFoundry answer “how do we route, serve and govern AI traffic?” Neither answers “what AI are we running across the organization, is it compliant against a named framework, and what happens when an agent misbehaves?” TrueFoundry extends the gateway toward ML infrastructure; Kosmoy extends it toward governance. Those are different frontiers.
Kosmoy includes the gateway both products are — one OpenAI-compatible policy point with guardrails, RBAC, budgets and logging — but wraps it in the three layers a gateway leaves out: a risk-tiered inventory of every model, MCP server and agent (including a master agent registry that pulls from Foundry, Bedrock, Vertex, Salesforce and ServiceNow); EU AI Act, ISO 42001 (aligned) and NIST AI RMF evidence built from registry state plus gateway logs; and kernel-enforced Action Capsule containment for agents that act.
So the honest framing is not “Kosmoy beats Portkey and TrueFoundry at being a gateway” — they are capable gateways, and TrueFoundry adds real ML-platform depth Kosmoy does not. It is that a gateway is one spoke. If the requirement is the governance web — inventory, gateway, compliance and containment in one self-hosted platform — that is a suite decision, not a gateway or ML-platform decision.
| Capability | Capability | Portkey | TrueFoundry | Kosmoy |
|---|---|---|---|---|
| OpenAI-compatible multi-provider gateway | ✓ | ✓ | ✓ | |
| Guardrails in the request path | ✓ | ✓ | ✓ | |
| Request observability / FinOps | ✓ | ✓ | ✓ | |
| Model serving / fine-tuning / GPU orchestration | — | ✓ | — | |
| MCP / agent-to-agent traffic governance | MCP + Agent Gateway | MCP + Agent Gateway | Inventory-level | |
| Org-wide AI inventory (beyond the gateway) | — | — | ✓ | |
| Master agent registry (Foundry/Bedrock/Vertex/…) | — | — | ✓ | |
| EU AI Act / ISO 42001 / NIST evidence | — | — | ✓ | |
| Kernel-enforced agent containment | Partial — scoped tokens | Partial — quotas + circuit breakers | ✓ | |
| Self-hosted / air-gapped | Enterprise tier (incl. air-gapped) | ✓ | ✓ | |
| Open-source core | Gateway only (MIT) | — | — | |
| Pricing model | Free tier; Pro; enterprise quote | Free tier; Pro; enterprise quote | Enterprise subscription |
Last verified July 16, 2026 against each vendor's public documentation.
Which should you choose?
For a team whose problem genuinely is model traffic — and, for TrueFoundry, model serving — pick on the axis that matters: Portkey for a managed control plane with observability and prompt depth, TrueFoundry for a Kubernetes-native platform that serves and fine-tunes as well as routes. Both offer self-hosted paths and OpenAI-compatible endpoints, so a later move is largely a configuration exercise.
For an enterprise that has to prove control over all of its AI — not just route and serve it — the choice is not between these two platforms but between infrastructure breadth and governance breadth. Kosmoy can sit in front of either: some teams keep TrueFoundry for serving and GPUs while Kosmoy holds the inventory, compliance evidence and containment for what reaches production.
Questions buyers ask
Is Portkey or TrueFoundry better?
Neither is universally better. Portkey is a managed control plane with deep observability, a prompt studio and broad model coverage, ideal for teams that want low operational overhead. TrueFoundry is a Kubernetes-native platform that pairs the gateway with model serving, fine-tuning and GPU orchestration, ideal for platform/ML teams that want one self-hosted stack. TrueFoundry is a Gartner Representative Vendor for AI Gateways; Portkey is now owned by Palo Alto Networks.
What is the difference between Portkey and TrueFoundry?
Portkey is a gateway and LLM-ops control plane: routing, observability, guardrails and prompt management, delivered as managed SaaS with an open-source gateway core. TrueFoundry is a broader Kubernetes-native AI platform: the same gateway functions plus model serving (vLLM/TGI/Triton), fine-tuning and fractional GPUs, deployable in-VPC or air-gapped. Portkey is lighter to adopt; TrueFoundry covers more of the ML lifecycle.
Does Portkey or TrueFoundry include model serving and fine-tuning?
TrueFoundry does; Portkey does not. TrueFoundry serves models with vLLM/TGI/Triton, runs fine-tuning jobs and orchestrates fractional GPUs on Kubernetes, capabilities it deepened with the June 2026 Seldon AI acquisition. Portkey is a gateway and control plane and relies on external providers for inference. If model serving on your own GPUs is a requirement, that favors TrueFoundry.
Do Portkey or TrueFoundry handle EU AI Act compliance?
Not as products. Portkey holds SOC 2, ISO 27001, GDPR and HIPAA certifications, and TrueFoundry holds SOC 2 Type 2 and HIPAA, but neither documents EU AI Act, ISO 42001 or NIST AI RMF evidence generation or AI risk classification as of July 15, 2026. That evidence layer is a governance-platform capability — Kosmoy generates it from its registries and gateway logs.
Where does Kosmoy fit against Portkey and TrueFoundry?
Kosmoy includes the same OpenAI-compatible gateway both provide, but it is one layer of a full AI management platform: organization-wide inventory, compliance evidence, and kernel-enforced agent containment sit alongside it. If your requirement is routing (Portkey) or routing plus serving (TrueFoundry), those are the lighter answers; if it is proving control over all your AI in your own infrastructure, that is a suite decision.
Sources
Every factual claim about another vendor on this page traces to that vendor's own published material or a named third-party source below.
- Portkey open-source gateway repository — accessed July 15, 2026
- TrueFoundry air-gapped deployment docs — accessed July 15, 2026
- TrueFoundry Gartner AI Gateways recognition (Businesswire) — accessed July 15, 2026
- Kosmoy AI Gateway — accessed July 15, 2026
- Portkey docs — what is Portkey — accessed July 15, 2026
- Portkey docs — plan & feature comparison (SaaS / hybrid / air-gapped) — accessed July 15, 2026
- Portkey docs — observability — accessed July 15, 2026
- Portkey docs — guardrails — accessed July 15, 2026
- Portkey docs — MCP gateway — accessed July 15, 2026
- Portkey pricing — accessed July 15, 2026
- Palo Alto Networks press release — Portkey acquisition completed (May 29, 2026) — accessed July 15, 2026
- TrueFoundry AI Gateway product page — accessed July 15, 2026
- TrueFoundry guardrails overview — accessed July 15, 2026
- Agent Gateway launch press release (Businesswire, June 2, 2026) — accessed July 15, 2026
- TrueFailover launch (VentureBeat, January 2026) — accessed July 15, 2026
- Seldon AI acquisition (SiliconANGLE, June 25, 2026) — accessed July 15, 2026
- aitori repository (v0.1.0, June 25, 2026, Apache-2.0) — accessed July 15, 2026
- Enterprise MCP access control blog — accessed July 15, 2026
Related comparisons
Portkey Alternatives (2026): 7 AI Gateways Compared
TrueFoundry Alternatives (2026): 6 Platforms Compared
Kosmoy vs Portkey: AI Gateway and Governance Compared (2026)
Kosmoy vs TrueFoundry: Self-Hosted AI Platforms Compared (2026)
Best AI Gateways in 2026: 10 Platforms Compared
Best AI Control Layers in 2026: 8 Compared
One suite instead of two point tools
Kosmoy puts an inventory, a policy gateway, compliance evidence and a containment sandbox around every AI your teams run — in your own Kubernetes.
Or email sales@kosmoy.com.