Palo Alto Networks Acquires Portkey to Secure AI Agents

Palo Alto Networks announced its intent to acquire Portkey, a startup that offers an AI gateway acting as a centralized control plane for managing and securing autonomous agents, according to a PR Newswire release. The companies did not disclose the financial terms of the transaction, Inc42 reports. The deal is expected to close in Palo Alto Networks' fourth quarter of fiscal 2026, subject to customary approvals, reporting by Inc42 and CRN states. Per the PR Newswire announcement, Portkey is already processing trillions of tokens per month and provides low-latency routing and inspection capabilities for agent-to-agent communications. The original RSS description states Portkey raised $15 million in a Series A round led by Elevation Capital.

"As autonomous agents join the enterprise workforce, they also become a new, unmanaged attack surface. By integrating Portkey into Prisma AIRS, organizations will be able to confidently deploy and govern AI agents. With Portkey, we are providing enterprises with visibility into all their agentic traffic, and enabling them to control and protect against agentic threats," said Lee Klarich, Chief Product & Technology Officer of Palo Alto Networks, in the PR Newswire announcement.

AI gateway technology functions as a centralized control plane that handles routing, identity, policy enforcement, and observability for agentic workloads. Companies deploying autonomous agents typically require low-latency token handling, runtime inspection, and identity-based least-privilege controls to reduce risk across internal and external systems. Industry reporting highlights Portkey's emphasis on runtime prevention and identity security as capabilities that map onto those operational requirements.

Reporting by CRN and other outlets frames this deal as part of a broader consolidation in AI security, coming after several recent M&A moves in the same vendor cohort. Industry coverage links the transaction to Palo Alto Networks' effort to expand Prisma AIRS by adding a dedicated AI Gateway control plane, and to prior acquisitions cited in CRN coverage.

• •Integration cadence and packaging: observers will track how Portkey capabilities are folded into Prisma AIRS and whether the portal becomes a distinct module or a bundled control plane.
• •Technical interoperability: monitor announcements or documentation for supported agent frameworks, latency SLAs, and telemetry standards for agent-to-agent exchanges.
• •Governance and identity controls: watch for published policy models, identity primitives, and enforcement points that define runtime least-privilege for agents.

Editorial analysis: organizations evaluating agentic deployments should view this acquisition as another signal that network- and identity-oriented vendors are moving to own control planes for AI traffic. Firms designing agent architectures will need to consider how gateway-level routing, token handling, and identity assertions change runtime threat models and observability requirements.