What happened
Palo Alto Networks announced on 2026-05-29 that it has closed the acquisition of Portkey and is integrating Portkey's AI Gateway into Prisma AIRS 3.0 as the platform's centralized control plane for agentic AI. The Prisma AIRS AI Gateway will provide a unified enforcement point for all agent traffic — covering identity authentication via Idira (formerly CyberArk), agent registry, semantic routing, artifact scanning, automated red teaming, and runtime security. The gateway already processes trillions of tokens per month for Fortune 500 customers and connects to over 3,000 LLMs, MCP servers, and agents.
Why it matters
This M&A completion is the clearest signal yet that the 'agentic AI gateway' is emerging as a distinct product category analogous to API gateways or next-generation firewalls. By acquiring the leading commercial AI gateway and embedding it inside a major security platform with identity (Idira/CyberArk), observability (Chronosphere), and runtime inspection capabilities, Palo Alto Networks is establishing an early structural advantage in the enterprise control-plane layer for AI agents — the same layer where unauthorized data access, lateral movement, and MCP-delivered prompt injection attacks occur.
Applicability
Enterprises with >10 AI agent deployments or MCP server integrations should evaluate centralized gateway architecture before their agentic footprint outgrows ad-hoc governance. CISOs should request an agent inventory and compare Prisma AIRS AI Gateway against emerging alternatives (e.g., Apigee AI, AWS Bedrock controls) before committing to a platform.