nRouter vs Portkey

Managed provider keys and credit billing.

Portkey operates on a bring-your-own-key model inside Prisma AIRS. nRouter manages provider keys and credit billing with a 0% platform fee.

Side-by-side comparison.

Every capability row is sourced and verified as of October 2026.

CapabilitynRouterPortkey
Models live todayCatalog models accessible with a single virtual key
371+ models (managed)11
BYOK provider accounts2
Platform feeMarkup added on top of provider cost
0 %7
Usage-based1
Model token pricing markupPer-token markup on provider list price
0 % markup (list price)7
Direct provider pass-through (BYOK)2
Provider key managementWho holds the provider credentials
Fully managed (no BYOK)7
BYOK required2
OpenAI-compatible API
Included
Included
Built-in guardrailsPreflight PII blocking and post-call PII redaction, prompt-injection detection, content filter ($0 held and $0 spent on blocked requests)
Included7
Plan-dependent3
Role-based team managementDual-axis RBAC: Owner, Org Admin, Team Admin, Member, Viewer
Dual-axis (5 roles), pay as you go7
Advanced RBAC on Enterprise4
SSO / SAML
Pay as you go7
Enterprise plan4
Audit logs
Pay as you go7
Enterprise plan4
Built-in credit billingStripe-backed credit ledger with reserve + settle
Included
Not available5
Per-team & per-key budgetsHard spend caps enforced in the request path
Hard caps, pay as you go7
Not verified here10
Observability suiteLogs, latency percentiles, alerts
Built-in, pay as you go7
Available, plan-dependent8
Prompt managementVersioned templates + A/B variants
Templates + versioning7
Prompt library / playground8
All features on pay as you goEvery core product capability included without tier paywalls
Included7
Not available4
Contractual uptime SLA
99.9 %7
Enterprise plan6
Cortex: stateless, zero-DB, zero-egress, mTLS 1.3 sidecarStateless mTLS sidecar with zero database access and zero external egress
Included7
Not available9
FinOps FOCUS 1.4 tokenomicsStandardized cost attribution and 3-way billing reconciliation
Included7
Not available9

This comparison was last reviewed in October 2026. Competitor features and pricing were checked against public documentation and pricing pages. nRouter is the publisher of this comparison. Pricing and features may change. Competitor rows reflect each vendor's publicly documented plans and docs as last checked in October 2026; each cell links the specific source. Where a competitor's pricing or plan structure is not public, the cell describes the structure rather than quoting a figure — we never invent competitor pricing. Found something out of date? Email sales@nrouter.ai and we'll correct it.

  1. Portkey publishes a usage-based / per-request gateway price with paid plans layered above a free tier. The fee structure is documented; specific figures are not quoted here because they vary by plan. Portkey was acquired by Palo Alto Networks (completed May 2026) and now operates as the AI gateway inside the Prisma AIRS platform; the tiers referenced here are its published self-serve plans. Portkey pricing tiers · Portkey pricing page · verified October 2026
  2. Portkey operates on a bring-your-own-key model: you provision, rotate, and audit each provider credential. Virtual keys abstract usage but the underlying provider accounts remain yours. Portkey (all plans) · Portkey docs — virtual keys · verified October 2026
  3. Portkey documents guardrails as a product capability; availability of specific guardrail checks and the volume allowance vary by plan tier. Treat the cell as "available, plan-dependent" rather than "free". Portkey Pro / Enterprise · Portkey docs — guardrails · verified October 2026
  4. Portkey documents SSO/SAML, advanced RBAC, and audit logging as Enterprise-plan capabilities rather than features available on the free or entry paid plan. Portkey Enterprise · Portkey pricing — Enterprise plan · verified October 2026
  5. Portkey provides usage analytics and cost observability. It does not ship a built-in customer billing / credit ledger — teams wire up billing themselves. Portkey (all plans) · Portkey docs · verified October 2026
  6. Portkey publishes uptime targets for its paid/enterprise plans. A contractual SLA percentage is associated with higher tiers rather than the free plan. Portkey Enterprise · Portkey site · verified October 2026
  7. nRouter charges a 0% platform fee on credit purchases with no minimum fee ($5 minimum first purchase, $20 minimum repeat manual top-up). Features a stateless, zero-DB, zero-egress, mTLS 1.3 Cortex sidecar, FOCUS 1.4 tokenomics, exact provider list prices (0% markup), and built-in guardrails at $0 on blocked requests. Every product feature is included with pay as you go. nRouter pricing · nRouter pricing page · verified October 2026
  8. Portkey documents request logs, analytics, and a prompt library / playground with retention and feature depth varying by plan tier. Portkey (plan-dependent) · Portkey documentation · verified October 2026
  9. Portkey operates as a cloud AI gateway and observability platform and does not ship a stateless, zero-DB, zero-egress, mTLS 1.3 sidecar or FinOps FOCUS 1.4 standardized billing reconciliation. Portkey architecture · Portkey documentation · verified October 2026
  10. This comparison has not verified that Portkey enforces hard per-team or per-key spend caps in the request path. Its virtual-key documentation covers usage and rate limits; check Portkey’s current docs for budgets. Portkey (all plans) · Portkey docs — virtual keys · verified October 2026
  11. nRouter serves its live model catalog behind one API key. The count comes from nRouter’s live model catalog, not a hardcoded total. nRouter model catalog · nRouter /models · verified October 2026

Where nRouter differs.

Pricing, credentials, and request-path controls included with pay as you go.

Managed provider keys without BYOK.

Call every live catalog model with one nRouter API key instead of provisioning separate provider keys.

  • nRouter holds and rotates upstream provider credentials for you.
  • Portkey requires bring-your-own-key (BYOK) provider accounts.
  • Choose BYOK when your organization must own provider contracts directly.

Atomic credit ledger in the request path.

nRouter pairs a Stripe-backed credit ledger with preflight guardrails and hard spend caps.

  • Guardrail preflight: checks run first; a blocked call holds and spends $0.
  • Reserve: credits are reserved atomically only after guardrails pass.
  • Settle: the exact provider list price settles per key, team, and org.
How the credit model works

Enterprise governance on pay as you go.

SSO/SAML, audit logs, 5-role RBAC, and FOCUS 1.4 tokenomics ship included with pay as you go.

  • Every product feature included at 0% platform fee ($5 minimum first purchase, $20 minimum repeat manual top-up).
  • Portkey documents SSO/SAML, advanced RBAC, and audit logs on Enterprise.
  • Portkey operates inside Palo Alto Networks Prisma AIRS (May 2026).

Platform fee on credits.

Pay as you go charges a 0% platform fee and 0% token markup at exact provider list prices.

0%

platform fee

Minimum first purchase.

Load credits ($5 minimum first purchase, $20 minimum repeat manual top-up) with no monthly subscription commitment and no feature gating.

$5

minimum first purchase

Contractual uptime SLA.

Included on pay as you go; Portkey associates contractual SLAs with Enterprise plans.

99.9%

contractual uptime SLA target

FAQs

Is nRouter cheaper than Portkey?

It depends on your operating model and workload. nRouter sells one plan, pay as you go, with a 0% platform fee and exact provider list prices ($5 minimum first purchase, $20 minimum repeat manual top-up). A credit purchase charges exactly the credits bought ($5 of credits costs $5.00, $100 costs $100.00) with no platform fee on top. Portkey pricing and feature availability should be checked against its current public or enterprise quote; see the dated sourced footnotes rather than assuming one platform is universally cheaper.

Can I switch from Portkey to nRouter?

Yes. Both nRouter and Portkey use the OpenAI-compatible API format. Change your base URL to http://localhost:4111/v1 and swap your API key. You can also drop Portkey's virtual-key headers.

Does nRouter have observability like Portkey?

Yes, and it is genuine common ground. nRouter includes request logging, cost tracking per model/team/key, latency percentiles, error-rate monitoring, and CSV export of request logs. Prompt and response text are never stored. The difference is nRouter does not tier observability. It is included with pay as you go.

What does nRouter have that Portkey does not?

A stateless zero-DB ML sidecar for preflight inspection, FinOps FOCUS 1.4 tokenomics for standardized billing reconciliation, built-in guardrails that hold and spend $0 on blocked requests, a Stripe-backed credit billing system with atomic reserve-and-settle, and a fully-managed (no BYOK) provider-key model. nRouter also includes SSO/SAML and audit logs with pay as you go, where Portkey documents them on its Enterprise plan.

Is Portkey still independent after the Palo Alto Networks acquisition?

Palo Alto Networks completed its acquisition of Portkey in May 2026, and Portkey now operates as the AI gateway inside the Prisma AIRS platform (see the sourced footnote above). That is a good fit if you are standardizing on Prisma AIRS. nRouter is independent and stays that way: you buy the gateway directly from its builder, every feature is included with pay as you go, and there is no security-suite bundle to adopt to get budgets, guardrails, SSO, or audit logs.

Are all nRouter features really included on every tier?

Every product feature — guardrails, prompt management, A/B tests, evals, observability, RBAC, SSO/SAML, audit logs, per-team budgets, and priority support — is included with pay as you go. nRouter sells one plan with a 0% platform fee, exact provider list prices ($5 minimum first purchase, $20 minimum repeat manual top-up), and standard limits of 200 RPM, 200k TPM, and 5 concurrent requests. Nothing is gated behind a subscription.

Is nRouter a Portkey alternative?

Yes. nRouter is a Portkey alternative for teams that want managed provider access, cross-provider routing, pre-call guardrails, hard budgets, credit accounting, and centralized request cost attribution. Portkey may be a better fit when BYOK and its existing integrations are central requirements.

Does nRouter support OpenAI-compatible requests?

Yes. nRouter supports OpenAI-compatible requests through http://localhost:4111/v1, so migration can start by replacing the endpoint and key before remapping routing, guardrails, budgets, and fallbacks.

Does nRouter require BYOK?

No. nRouter’s managed operating model provides managed provider access. BYOK remains a valid model for teams that need to own provider accounts, contracts, and rotation responsibilities directly.

Does nRouter provide LLM observability?

Yes. nRouter provides request, latency, usage, provider outcome, and cost attribution surfaces, with observability controls available across plans according to the current product documentation.

Does nRouter support hard budgets?

Yes. Organization, team, and key budget controls can be enforced before provider dispatch, with reservations and settlement used to keep spend within policy.

Does Portkey provide managed provider keys?

Portkey’s public materials describe gateway, virtual-key, provider integration, and BYOK workflows. Confirm the current credential ownership and plan behavior for your exact deployment before procurement.

Which gateway is better for enterprise teams?

The answer depends on ownership and control requirements. nRouter fits teams seeking managed provider operations and request-path spend enforcement; Portkey fits teams seeking a gateway and observability layer around their own provider accounts and integrations.

How current is this comparison?

Every Portkey row links the specific public page it is drawn from and a last-verified month (currently October 2026). Where Portkey's pricing or plan structure is not public, the cell describes the structure instead of quoting a figure. We never invent competitor pricing.