Gateways produce logs. Scrutari produces evidence.
If you are evaluating AI gateways, this is the honest comparison. The deepest difference is category: a gateway's audit trail is logs you have to believe, while Scrutari signs every record at the boundary so an auditor can verify it offline without trusting us or the provider. Routing, failover, caching, and budgets are table stakes: every product on this page has them, ours included. The rest of what matters to a regulated buyer is where it runs, who owns the vendor, and what gets locked behind an enterprise contract. Facts below were checked against each vendor's published pages on September 2, 2026.
| Scrutari | LiteLLM | Cloudflare AI Gateway | Portkey / Prisma AIRS | |
|---|---|---|---|---|
| Runs in your building | Yes: SaaS, single-tenant, or on-prem | Yes: self-host the OSS proxy | No: runs on Cloudflare's network | OSS gateway yes; commercial product is platform-attached |
| Independent vendor | Yes | Yes | Part of the Cloudflare platform | No: acquired by Palo Alto Networks (2026) |
| Tamper-evident audit | Signed per-request records, anchored history, open-source offline verifier | Request + admin logs (database rows) | Analytics and logs; Logpush export | Observability and logs |
| Enterprise gating | Flat price; audit and governance features not enterprise-gated | SSO, SCIM, RBAC, audit logs, air-gap gated to custom-priced Enterprise | Core free; guardrails and log export metered/paid | Security-suite sales motion via Palo Alto |
| PHI / sensitive-data redaction | 8 HIPAA-mapped detectors at the boundary; audit, redact, or refuse modes | Via Presidio guardrail configuration | DLP scanning included | 50+ guardrails |
| Post-quantum TLS | Hybrid X25519 + ML-KEM-768 on every hop, including on-prem | No | On Cloudflare's network by default | No |
| Price to start governed | Free Starter; Growth flat monthly | OSS free; Enterprise custom annual | Core free; usage-billed add-ons | Through Palo Alto sales |
When they are the right call
LiteLLM if you want open source and have platform engineers to run and secure it. Cloudflare if you are already all-in on their network and SaaS-only fits your data posture. Portkey arrives bundled if you buy Palo Alto's AI security platform. All three are good products.
When Scrutari is
When the audit itself is a deliverable: healthcare, finance, and public-sector teams that must prove what their AI did, to an auditor, a payer, or a court, on infrastructure they control, from an independent vendor, at a price that does not require a procurement cycle. Free · no card required.
Why not just use what Azure or AWS gives me?
It is the first question every platform team asks, and it deserves a straight answer. Hyperscaler controls like AWS Bedrock Guardrails, Google Model Armor, and Azure's content safety are real, and worth turning on. But they are controls inside the vendor being audited, scoped to that vendor's platform. When a reviewer asks for proof, they produce the vendor's own logs about the vendor's own models. Scrutari sits outside any one provider: one signed, offline-verifiable record across OpenAI, Anthropic, Gemini, and Bedrock, from an independent vendor. The provider never grades its own homework, and your evidence does not change when your model mix does.