Enterprise AI DLP Firewall · UAE PDPL Compliance · Engineering FinOps

Govern every AI call your engineers make. Leak nothing. Overspend nothing.

OryxGate is the security and FinOps control plane between your teams and their AI tools. It redacts secrets and PII, enforces team budgets, logs an audit trail and adds a prompt-caching layer, on your own AWS Bedrock, Anthropic and OpenAI accounts or on our Managed Enterprise Cloud.

10+
secret & PII detectors
µ$
spend precision
0
prompts stored
UAE · EU
routing regions

Four controls your CISO and CFO both asked for

Deploy once, and every coding assistant, agent and internal app inherits the same policies.

AI DLP firewall

Secrets and PII never reach a model

Inline redaction of API keys (sk-…, AKIA…, ghp_…), private keys, card numbers, phone numbers, Emirates ID and UAE IBANs before any prompt leaves your perimeter. Per-organization and per-key policies that support UAE PDPL and GDPR data-minimisation programmes.

Engineering FinOps

Granular spend governance

Hard daily and monthly USD budgets per developer, team or CI pipeline, enforced atomically before each request. Spend by day, model and key, with micro-dollar precision and alerts at 80% and 100%.

Audit logging

A complete, metadata-only audit trail

Every request recorded with key, model, route, region, tokens, cost, latency and redaction count. Prompt and completion content is never stored. Admin actions and financial entries are append-only.

Prompt caching layer

Pay less for the same tokens

Automatic prompt-cache breakpoints for OpenAI-format clients routed to Claude, plus cache-hit and savings analytics per team, so you see exactly what caching saves you.

Regional routing

Pin each key to AWS me-central-1 (UAE) or eu-central-1 (Frankfurt); strict mode never leaves the region.

Bring your own keys

Connect your own AWS Bedrock, Anthropic or OpenAI accounts. Keys are encrypted with AES-256-GCM.

Drop-in compatible

Native Anthropic Messages API for Claude Code; OpenAI Chat Completions and Responses for Cursor and SDKs.

Resilient routing

Failover across your configured accounts and regions with circuit breakers, full SSE streaming.

Header hygiene

Client IPs and network identity headers are stripped before any provider call.

USD & AED billing

Card payments via Stripe or B2B tax invoices with UAE bank details. AED at the 3.6725 peg.

Data residency, stated precisely

Compliance teams need facts, not slogans. Each API key chooses an AWS entry region, and every response tells you which route served it (x-oryxgate-route) and how it was billed (x-oryxgate-billing).

  • UAE · me-central-1. Requests enter AWS in the UAE. Today AWS serves Claude in this region via its global inference endpoint, so model processing may occur in other AWS regions.
  • EU · eu-central-1. Requests enter AWS in Frankfurt, with EU geographic routing where AWS offers it for the model.
  • Strict residency. The key never fails over to another region or provider.
  • Your own accounts. With BYOK, inference runs in your AWS, Anthropic or OpenAI account under your contract with that provider.
Request path
  1. 1 Authenticate key · check team budget
  2. 2 Redact secrets & PII · strip client identity headers
  3. 3 Route to your account (BYOK) or Managed Cloud, in the key's region
  4. 4 Stream back · record audit metadata, cost and cache savings

Plans

Start on your own provider accounts, or let us run the inference pipeline for you. All security and FinOps features are included in both.

Bring your own keys

FinOps & Security Platform

$99/ month per organization
  • ✓ Connect your AWS Bedrock, Anthropic and OpenAI accounts
  • ✓ Full secret & PII redaction (DLP)
  • ✓ Unlimited API keys with team budgets & alerts
  • ✓ Spend, cache-savings and latency analytics
  • ✓ Audit trail and regional routing controls
  • ✓ Your provider bills you directly for inference
Start with BYOK
Fully managed

Managed Enterprise Cloud

Usage-based

Prepaid compute credits at provider list rates + 20% platform fee

  • ✓ Everything in FinOps & Security Platform
  • ✓ Dedicated managed inference pipeline on AWS (UAE & EU regions)
  • ✓ No AWS or provider account setup required
  • ✓ Pay by corporate card or B2B bank transfer (USD / AED)
  • ✓ Optional fallback for BYOK customers
Talk to sales
Managed Cloud compute credit rates (incl. 20% platform fee, excl. VAT)
ModelInput / MTokOutput / MTokCached input / MTok
Claude Fable 5.1
claude-fable-5-1
$12.00$60.00$0.30
Claude Fable 5
claude-fable-5
$12.00$60.00$1.20
Claude Opus 5.5
claude-opus-5-5
$4.80$24.00$0.24
Claude Opus 5
claude-opus-5
$6.00$30.00$0.60
Claude Opus 4.8
claude-opus-4-8
$6.00$30.00$0.60
Claude Opus 4.7
claude-opus-4-7
$6.00$30.00$0.60
Claude Sonnet 5.5
claude-sonnet-5-5
$2.40$12.00$0.24
Claude Sonnet 5
claude-sonnet-5
$2.40$12.00$0.24
Claude Sonnet 4.6
claude-sonnet-4-6
$3.60$18.00$0.36
Claude Haiku 5.5
claude-haiku-5-5
$0.12$0.60$0.012
Claude Haiku 4.5
claude-haiku-4-5
$1.20$6.00$0.12
GPT-4o
gpt-4o · OpenAI shuts gpt-4o down on 2027-01-14 (replacement: gpt-6-luna)
$3.00$12.00$1.50
GPT-4o mini
gpt-4o-mini · OpenAI shuts gpt-4o-mini down on 2027-01-14 (replacement: gpt-6-luna)
$0.18$0.72$0.09
GPT-6 Luna
gpt-6-luna
$0.12$0.60$0.012
GPT-6.1 Sol
gpt-6.1-sol
$2.40$12.00$0.12

Two lines to put your tools under policy

Works with Claude Code, Cursor, the Anthropic and OpenAI SDKs, LangChain and anything that speaks those APIs.

# Claude Code
export ANTHROPIC_BASE_URL=https://api.oryxgate.ai
export ANTHROPIC_AUTH_TOKEN=og_live_…
# OpenAI SDK / Cursor
OPENAI_BASE_URL=https://api.oryxgate.ai/v1
OPENAI_API_KEY=og_live_…

Put guardrails on AI spend and data in an afternoon

Create an organization, connect your provider keys and issue team keys with budgets.

Get startedTalk to sales
OryxGate — Enterprise AI DLP Firewall, UAE PDPL Compliance & Engineering FinOps Platform