Palo Alto Networks Acquires Portkey to Become the IAM Seat for AI Agents
Palo Alto Networks announced the acquisition of Portkey on April 30. Portkey is an AI Gateway processing trillions of tokens per month with semantic routing, automated failovers, and unified access to 3,000+ LLMs. Financial terms were not disclosed. The deal closes in PANW's fiscal Q4 2026.
The strategic logic is governance, not connectivity. Portkey will serve as the AI Gateway for Prisma AIRS β Palo Alto's enterprise AI runtime security product. The framing in the press release is precise: Portkey becomes the central nervous system that monitors, routes, and secures every AI transaction; AI Identity Security applies least-privilege controls to every agent interaction. This is the IAM playbook from human users transposed onto non-human agents.
Same week, Palo Alto also closed Koi (agentic endpoint protection), partnered with Armadin (autonomous external attack swarms inside Unit 42 Frontier AI Defense), and rolled out a unified AI Gateway pitch built on top of last year's Protect AI acquisition. The acquisition cadence reads as a clear thesis bet: enterprise security incumbents who own the existing IAM and SOC seat will absorb the AI agent governance layer, rather than letting upstart agent-security pure-plays own the relationship.
The competition is structural. Microsoft Agent 365 went GA on May 2 with the same pitch from the M365 IAM seat, priced at per user per month. CrowdStrike has its own agent security narrative. The race is to become the agent IAM provider before agent identity standards harden. Whoever owns the runtime control plane that every enterprise agent has to route through wins a seat at every other security conversation.
Press release: https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-to-acquire-portkey-to-secure-the-rise-of-ai-agents
← Back to all articles
The strategic logic is governance, not connectivity. Portkey will serve as the AI Gateway for Prisma AIRS β Palo Alto's enterprise AI runtime security product. The framing in the press release is precise: Portkey becomes the central nervous system that monitors, routes, and secures every AI transaction; AI Identity Security applies least-privilege controls to every agent interaction. This is the IAM playbook from human users transposed onto non-human agents.
Same week, Palo Alto also closed Koi (agentic endpoint protection), partnered with Armadin (autonomous external attack swarms inside Unit 42 Frontier AI Defense), and rolled out a unified AI Gateway pitch built on top of last year's Protect AI acquisition. The acquisition cadence reads as a clear thesis bet: enterprise security incumbents who own the existing IAM and SOC seat will absorb the AI agent governance layer, rather than letting upstart agent-security pure-plays own the relationship.
The competition is structural. Microsoft Agent 365 went GA on May 2 with the same pitch from the M365 IAM seat, priced at per user per month. CrowdStrike has its own agent security narrative. The race is to become the agent IAM provider before agent identity standards harden. Whoever owns the runtime control plane that every enterprise agent has to route through wins a seat at every other security conversation.
Press release: https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-to-acquire-portkey-to-secure-the-rise-of-ai-agents
Comments