One LLM gateway for every AI call.

People in the web app, agents on a schedule and other systems on API keys all reach the AI models through SecondGate, an LLM gateway you run yourself: Claude, GPT, Gemini or models you host, on your own provider accounts. The same checks, budgets and record apply to every call.

Book a demo See a call get masked

People, agents and apps share one AI gateway.

One path for every call, whoever makes it: a person, an agent or another system on an API key. That is what makes the agent rules enforceable: an agent cannot go round the gateway.

Your infrastructureYour own provider accounts, and every chat, file and agent run in your own database. We do not host or resell models.

Before a call leaves, the gateway checks it.

The agent's model has to be on the list its team approved. SecondGuard, the guardrails inside the gateway, applies your rules: it can replace personal data and secrets with placeholders before the request leaves and restore them in the answer.

SecondGuard · @finance-analystvia SecondGate
SENT TO THE PROVIDER

Approve invoice 4471 from Meridian Legal, paid by card [CARD_1], contact [EMAIL_1], amount $12,300.

RETURNED TO THE PERSON

Approve invoice 4471 from Meridian Legal, paid by card •••• 4455, contact [email protected], amount $12,300.

Budgets for teams, people and API keys.

Budgets go from organization to team to person, and API keys have budgets of their own. Agent traffic is charged like everything else, and alerts go out when spend passes a threshold you set.

Budgets · API keysthis month
Organization $3,912.40 / $12,000
crm-sync team: Sales $212.80 / $400
support-bot team: Support $96.10 / $150
release-ci team: Engineering $18.40 / $100

Already paying per seat for an assistant?

Keep it if it works for your people. Here is what a seat does and does not buy.

"We already have ChatGPT Enterprise."

Then your people have a chat app with agents in it. What the seat does not include is the layer underneath: which models, whose keys, what leaves the building, who pays.

"We already buy Claude Enterprise."

Keep it. SecondStack is not bought instead of Claude; it puts Claude on the same keys, budgets and audit trail as everything else you use, on your own Anthropic account.

"We have Microsoft 365 Copilot."

It covers Microsoft 365. Calls to other models and from your own apps need their own controls.

Current list prices of the models the gateway works with: Model prices 

Questions about the LLM gateway.

Which models can we reach through SecondGate?
The providers where you already have accounts, including Anthropic, OpenAI, Google and self‑hosted models, through your own keys. Which models a team, a person or an agent may use is a list you set in ControlTower, the admin console. Because every call goes through one gateway, moving traffic to another provider is a setting, not a project. We do not host or resell models.
How is the gateway priced?
By consumption, not per seat. Model usage is billed by your providers on your own accounts, and budgets by organization, team, person, key and agent keep the total predictable. Ask us for the current terms.
Agents Personal, project and named agents: how they start, what they may use, how you hire one. ControlTower The admin console: owners, budgets, a record of every run, and the pause button.

See one call go through the gateway.

Bring a system that already calls a model. We route one of its calls through SecondGate on the demo call and show which budget pays, which masking rule applies and what the record keeps.

For platform engineering 
Book a demo