The fastest open-source AI gateway for LLMs, MCP and agents
Private AI inference and confidential GPU computing infrastructure
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
US
Pricing model
Freemium
Paid
Pricing
Bifrost OSS is free forever. Bifrost Enterprise has custom pricing; contact sales for a quote.
Confidential Inference: DeepSeek V4.1 Flash $0.30 input and $1.20 output per 1M tokens; Kimi K3 $3.00 input and $15.00 output per 1M tokens; GLM 5.3 $1.40 input and $4.40 output per 1M tokens; Qwen3.8 27B $0.30 input and $1.80 output per 1M tokens. Confidential VMs: B300 at $7.50 per GPU-hour, B200
Key features
Drop-in replacement for any AI SDK with support for OpenAI, Anthropic, and LiteLLM
Model catalog providing access to 1000+ AI models from 8+ providers
Automatic provider failover for 99.99% uptime
Budget management and rate limiting across virtual keys and teams
Built-in OpenTelemetry observability
MCP gateway for centralized tool connections and governance
Real-time guardrails for blocking unsafe model outputs
Virtual key management with independent budgets and access control
Semantic caching to reduce costs and latency
Enterprise clustering with high availability and zero-downtime deployments
OpenAI-compatible endpoint for private LLM inference
Hardware-encrypted VMs on Intel TDX, AMD SEV-SNP and NVIDIA GPUs
Client attestation verification before sending requests
Support for multiple open-weight models including DeepSeek, Kimi, GLM, Qwen
Confidential Kubernetes for data center scale deployments
Confidential training and fine-tuning on licensed stack
Root access over SSH to confidential VMs
Encrypted GPU communications with NVLink encryption on B200 and B300
Confidential agents runtime support
Prompt caching with cached input billing
What makes it different
50x faster than LiteLLM with P99 latency of 20 microseconds at 5k requests per second
Zero-touch in-VPC deployments ensure no data leaves your infrastructure
Free and open source with Apache 2.0 license
Works seamlessly with all major LLM frameworks including OpenAI, Anthropic, LangChain, and LiteLLM
Enterprise-grade governance with SSO, RBAC, and audit logs included in Enterprise tier
Prompts and model weights verified by clients with cryptographic attestation before any data is sent
Operator-blind inference: data remains unreadable to the company and hosting provider
Flexible deployment: choice of hosted cloud, rented VMs, or licensed stack on own infrastructure
Open-weight models only, no closed-source frontier models
Full cryptographic verification stack including open-source tools
Bifrost
Confidential AI