Enterprise AI gateway for security, governance, and compliance.

Requests from your teams to AI models pass through one controlled point that identifies, limits, checks, and routes them.

AIGateRequest flows

Your app or agent
RequestResponse
AIGate
IdentifyLimitCheckRouteReturnRecord
Crestocode
Model providers
OpenAI
Anthropic
OpenAIAnthropic
01IdentifyEach request carries a virtual key issued to a team or application. Unknown keys are refused.
02LimitAIGate checks daily spend, requests per minute, and tokens per minute for the key, its team, and its organization.
03CheckGuardrails scan the prompt for secrets, personal data, and prompt injection, then block, redact, or flag it.
04RouteAIGate sends the request to a provider using the routing strategy you set. It retries on transient errors and falls back to the next provider when one fails.
05ReturnGuardrails check the response. For streamed responses, the result is recorded when the stream ends.
06RecordCompleted requests, and requests stopped by a limit, get an audit entry with token counts, latency, and a hash of the content instead of the text.

Send your first request

curl https://<host>:8443/v1/chat/completions \
  -H "Authorization: Bearer <your vk_ key>" \
  -H "Content-Type: application/json" \
  -d '{"model": "<your-model>", "messages": [{"role": "user", "content": "Hello"}]}'
Get started

Records for your own reviews

AIGate gives your security and compliance teams request, limit, guardrail, and approval records to support your own reviews. It does not certify compliance.

Plans

CommunityFor teams evaluating AIGate$0Free, self-hosted
  • Virtual keys
  • Budgets and rate limits
  • Guardrails
  • Routing and failover
  • Exact-match response caching
  • MCP tool governance
  • Audit records and exports
  • Admin and User roles
  • Help center
ProFor teams running AIGate in production$20Per user per month, self-hosted*
Everything in Community, plus:
  • OIDC single sign-on
  • Semantic caching
  • Auditor access for reviewers
  • Email support
*A user is a person with a console account. Virtual keys and the applications using them are not counted.
EnterpriseFor organizations with identity, access and contract requirementsCustomTerms set in your agreement
Everything in Pro, plus:
  • SAML single sign-on
  • SCIM provisioning
  • Custom roles
  • Fault injection

Control, accountability, and long-term reliability.