AI gateways companies, products & suppliers

A control plane in front of many model APIs for auth, policy and routing entry. Jobs: key management; policy at the edge; unified access to many providers.

What are AI gateways?

A control plane in front of many model APIs for auth, policy and routing entry. Jobs: key management; policy at the edge; unified access to many providers.

What problems does it solve?

Every app talks to model vendors directly with no central policy.

Typical business use cases

  • Key management
  • Policy at the edge
  • Unified access to many providers

Important capabilities

  • Auth
  • Rate limits
  • Provider adapters

What buyers should evaluate

  • Where keys live
  • Prompt logging
  • Fail-open vs fail-closed

Risks and governance considerations

A gateway that logs raw prompts into a weakly controlled store.

Procurement checklist

  • Key vault
  • Log retention
  • Policy defaults

Relevant AI Trustmark assurance

AI Trustmark independent findings appear only when an assessment or certificate exists. Category membership does not imply verification.

Methodology · How verification works

Companies and providers

Claimed suppliers appear first so buyers can start with listings the company has taken ownership of. Payment does not buy this order.

  • Cloudflare

    Cloudflare publishes Cloudflare DLP, Cloudflare Agents SDK MCP Support, and Cloudflare Workers AI as named AI products. Cloudflare is used for Agent integration / MCP and AI agents

  • Gravitee

    Gravitee is the AI Agent Management platform, securing, observing, and governing every AI agent, API, and event interaction at enterprise scale. Gravitee publishes Gravitee AI Gate

  • Helicone

    Routing and monitoring for reliable AI apps - the LLMOps platform behind the fastest-growing AI companies. Helicone publishes Helicone AI Gateway and Helicone Cost Tracking as name

  • Kong

    Kong AI Gateway extends Kong's API gateway to route, secure, and observe LLM/AI traffic for enterprises. Public marketing also emphasises aPI gateway heritage applied to LLMs. It i

  • LiteLLM

    Put your full AI stack behind one key. Track and cap LLM spend, route to the right model, and self-host anywhere — even air-gapped. 140+ providers, 1,892 models, 53K+ GitHub stars.

  • Portkey

    Democratize and productionize Gen AI across your entire org with Portkey. Portkey publishes Portkey AI Gateway and Portkey MCP Gateway as named AI products. Portkey is used for AI

  • Solo.io

    Solo.io publishes Gloo AI Gateway as named AI products. Solo.io is used for AI gateways work. Solo.io is grouped with AI gateways suppliers. Public product pages are published at s

  • TrueFoundry

    TrueFoundry markets an AI gateway and MLOps platform for deploying and governing models and LLM apps in enterprise environments. Public marketing also emphasises aI gateway + MLOps

  • WSO2

    Open, unified platform powering enterprise digital experiences globally. WSO2 publishes WSO2 AI Gateway as named AI products. WSO2 is used for AI gateways work. WSO2 publishes prod

  • Zuplo

    Secure, govern, and observe every API, LLM, and MCP call on one programmable policy engine. See practical implementation details and production tradeoffs. Zuplo publishes Zuplo AI

Products

Claimed products appear first. Ranking packs and payment do not change this list.

Related categories

Relevant procurement and assurance guides

Frequently asked questions

What is AI gateways?

A control plane in front of many model APIs for auth, policy and routing entry. Jobs: key management; policy at the edge; unified access to many providers.

What should not be listed as AI gateways?

Products whose buyer job is model routers as the product, hosting, or cost-optimisation dashboards. Those belong on their own category page so search queries are not split.

Has AI Trustmark independently assessed every AI gateways supplier?

No. A category listing is descriptive. Independent assessment is shown only on company or product pages that carry Trustmark evidence.

What are AI gateways?

A control plane in front of many model APIs for auth, policy and routing entry. Jobs: key management; policy at the edge; unified access to many providers.

What model or provider changes should a buyer insist on being told about?

Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.

How should buyers verify where AI customer data is processed?

Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.

Does a TrustMark on one product cover the rest of the company?

No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.

What incident-handling evidence is useful for AI suppliers?

Buyers should see how AI-specific failures are detected, contained and notified — including unsafe outputs, data leakage and unauthorised agent actions. An incident policy that never mentions models, prompts or tools is incomplete for this class of product.