AI Defense Matrix Catalog

OrcaRouter

Visit official site

Overview

Product details compiled from public sources, each with a citation.

Vendor
Continuum AI2agent · Details at Cyber Company Profiles
Description
OpenAI-compatible AI gateway that routes prompts across many model providers through one endpoint, with fallback chains and a risk-scored firewall gating agent tool and MCP calls.1agent
Deployment
SaaS, Self-hosted2agent
Status
Active2agent

Matrix Coverage

Where this product defends, by asset class and NIST CSF function. The Coverage column shows whether each asset is Primary, Secondary, or Adjacent to what the product does. The table omits empty rows and columns.

Asset class ProtectDetect Coverage
AI Traffic Primary 3

Framework Relevance

These frameworks include controls relevant to the asset classes OrcaRouter defends. This is an editorial inference from the AI Defense Matrix asset-level crossmap, not a statement that Continuum AI implements these controls or is certified against them.

Expand Collapse
Framework Asset class Relevant controls
NIST IR 8596 AI Traffic AI data flows; APIs; inference endpoints (traffic side); model registries and dataset sources
CSA AI Controls Matrix AI Traffic Infrastructure Security; Interoperability and Portability
ISO 42001 AI Traffic A.8 Information for interested parties; A.9 Use of AI systems; A.10 Third-party and customer relationships
Google SAIF AI Traffic Harden and monitor infrastructure; network-level access and egress controls
SANS Critical AI Security Guidelines AI Traffic Conventional Security Controls (authenticate and control access to inference APIs; API key management); Model I/O Handling (rate limiting; egress output filtering); Monitoring (interaction and API-usage logging)
MITRE ATLAS AI Traffic AML.T0057 LLM Data Leakage; AML.T0024 Exfiltration via AI Inference API (network-side observation)
OWASP AI Exchange AI Traffic Runtime threats: data leakage via AI egress; network-level access control gaps
OWASP LLM Top 10 AI Traffic LLM10 Unbounded Consumption (cost and rate control); shadow AI egress and output handling
OWASP Agentic Security Top 10 AI Traffic ASI07 Insecure Inter-Agent Communication; ASI02 Tool Misuse and Exploitation (egress and tool-invocation scope); ASI04 Agentic Supply Chain Vulnerabilities (MCP and tool-registry trust)

Provenance

Last sourced 2026-07-05.

Expand Collapse

Sources

  1. Welcome to OrcaRouter
    Vendor source accessed 2026-09-22
    • “Fallback chains via extra_body.models, named routers, and orcarouter/auto for cheapest-live-model selection.”
  2. OrcaRouter AI gateway
    Vendor source accessed 2026-07-05
  3. OrcaRouter Agent Firewall
    Vendor source accessed 2026-09-22
    • “Every tool call and MCP invocation is risk-scored and graded ALLOW, REVIEW or BLOCK before it executes.”

Changelog

  1. Refreshed source links and quotes against the current vendor pages.

  2. Added to the catalog from the OrcaRouter documentation.

Found an error? Corrections are welcome. Suggest an edit.