UPDATE · 2026-05-29Portkey was acquired by Palo Alto Networks and absorbed into Prisma AIRS. Mid-market pricing tiers are in flux.See the migration path →
Tokenality vs Portkey
Portkey got acquired. You didn't.
Palo Alto Networks bought Portkey on May 29, 2026, and folded it into Prisma AIRS — a security-first bundle priced for the Fortune 500. If you're a mid-market team that liked Portkey's developer ergonomics but doesn't buy through enterprise procurement, your options just shrank. Tokenality is the same wire-level surface, in stealth today, hosted design-partner access starting at $99/mo or $99/mo hosted.
Looking for the current PANW product name? See the Prisma AIRS comparison →
What happened
Portkey → Prisma AIRS. What we know.
Sourced from Palo Alto Networks' May 2026 acquisition announcement, public pricing pages, and the Portkey team's transition notes. Verify with your PANW rep for account-specific impact.
Acquirer
Palo Alto Networks
Deal close
2026-05-29
Deal size
~$700M-class (undisclosed exact)
Product fate
Absorbed into Prisma AIRS
Roadmap
Enterprise-only, per PANW go-to-market
Pricing
In flux — SMB tiers deprioritized
Migration path
Moving from Portkey to Tokenality
Roughly a half-day of guided engineering time for a typical team. Config maps over with a short mapping guide; SDK code stays the same. The differences show up as features you didn't have.
Point your SDK at Tokenality
Same wire-level surface as Portkey — swap the base URL. Anthropic runs native; OpenAI, Google, Azure OpenAI, and Bedrock run through the governed proxy; 1,900+ more via OpenRouter and LiteLLM pass-through. Your existing SDK code works unchanged.
Import your Portkey config
Metadata mapping and route configs port with a short mapping guide; global rate limits carry over as gateway config. The Helicone → Tokenality importer shipped in Sprint ω′; a Portkey export adapter is on the roadmap — until then migration is a guided half-day, not an import button.
Turn on the differences
Spend Tokens, binding-key envelope, PII pre-flight, SOC 2 evidence pack, per-project chargeback CSV — all one env flag away. None of these existed on Portkey; all of them are why the CFO stops asking the same question every month.
Stay on Community, or upgrade when you want
Design-partner access is available during stealth. Hosted from $99/mo at public launch when you want us to run the dashboard. Team at $499/mo when you need SSO. Enterprise at $999+/mo when you need BYOC + SOC 2 pack + dedicated CSM. Real Enterprise deals land $5k-$50k/mo — well under Speakeasy's $30k floor and Prisma AIRS's undisclosed enterprise floor.
What to say in the room
The question comes from a specific seat. The answer should too.
The standard answer is technically true and strategically thin. Here's how the same question lands with a CFO, a CHRO, a PMO, and a CISO.
CFO
"Show me what we spent on AI last month, by project, by team — joinable to our GL."
CHRO
"Who has access to AI, and what happens when someone leaves?"
PMO
"How much did the redesign sprint actually cost us in AI tokens?"
CISO
"How do we keep the bill from running over, even if a key leaks?"
The details
Capability-by-capability, where the postures diverge.
Use this when engineering needs to validate that the wire-level promise actually holds up.
Ownership + roadmap
| Capability | Portkey (Prisma AIRS) | Tokenality |
|---|---|---|
| Current owner | Palo Alto Networks (acquired May 2026) | Tokenality (ServiceVision) — independent, in stealth · Lite edition planned |
| Product roadmap direction | Absorbed into Prisma AIRS enterprise line | Mid-market-first, weekly design-partner reviews, roadmap shared with partners |
| Pricing stability | In flux (SMB tier fate uncertain) | $99 / $499 / $999+ published for post-stealth launch; Lite edition planned free |
| Data residency for existing customers | Migrating to Prisma infrastructure | Hosted on our infra during stealth; BYOC available at Enterprise; self-host option coming with the Lite edition |
Posture
| Capability | Portkey (Prisma AIRS) | Tokenality |
|---|---|---|
| Primary buyer | VP Engineering (historically); now PANW security buyer | CFO — pulls in CIO / CHRO / PMO |
| Frame | AI gateway → security suite bundle | Token Ledger — every token reconciled to person × project × task |
| What changes Monday morning | Same routing; different sales conversation | Four awkward stakeholder questions stop being awkward |
Attribution
| Capability | Portkey (Prisma AIRS) | Tokenality |
|---|---|---|
| Per-request user identity | Metadata field (set by app code, trust-the-caller) | SSO sub claim signed into the token envelope; verified offline |
| Per-request project / task | Custom metadata you write | First-class --task / --memo / --url flags on key issuance; denormalized onto every commit row |
| HRIS-aware revocation | Manual | BambooHR / Workday / Rippling joiners-movers-leavers ingest live; feed-triggered auto-revoke on the near-term roadmap |
Spend control
| Capability | Portkey (Prisma AIRS) | Tokenality |
|---|---|---|
| Hard budget cap | Policy at the gateway | Budget binding signed into the token; gateway fast-fails 402 before any LLM call |
| Real-time burn-down per project | Dashboards | Hard counter — UI + ledger row + 402 response in one trip |
| Chargeback export | Logs export | CSV with GL codes + cost centers, joinable to Workday cost-center mapping |
Audit & compliance
| Capability | Portkey (Prisma AIRS) | Tokenality |
|---|---|---|
| Audit row mutability | Application-level append | Append-only at the SQL role; the app role cannot UPDATE or DELETE |
| PII pre-flight | Guardrail plugin | 12 detectors, fail-closed, runs before the call leaves your network |
| SOC 2 evidence | Custom queries | Two-click evidence pack across SOC 2 + ISO 27001 + ISO 42001 + NIST AI RMF |
OSS + deployment
| Capability | Portkey (Prisma AIRS) | Tokenality |
|---|---|---|
| License | Closed-source (SDK MIT, gateway proprietary) | In stealth · design-partner deploys today; Lite edition self-host planned post-stealth |
| Self-host | Enterprise-only (post-acquisition) | Lite edition planned for post-stealth public launch |
| Governance transparency | Whatever PANW's security team ships | Weekly design-partner reviews · 1,299+ tests · roadmap shared with partners |
Honest take
When Prisma AIRS is still the right answer.
If your team is already a Palo Alto Networks Prisma customer, the AIRS bundle likely comes with your existing contract at little marginal cost. If you have a dedicated CISO org managing AI as a security surface — and they want AI governance to live in the same panel as your CASB, SASE, and DLP — Prisma AIRS is the natural continuation.
Tokenality is a different bet: AI cost and audit governance as a Finance-owned discipline, priced for teams that don't have PANW procurement, in stealth today with an open-source Lite edition planned. Two different rooms. Pick the room where the decision actually gets made at your company.
15-minute self-host, or 30-minute hosted onboarding.
Same wire-level surface as Portkey — your existing SDK code works unchanged. Bring your own LLM keys. In stealth today; Hosted design-partner access from $99/mo when you want us to run it.