Endor Labs Adds Bring Your Own Key Support

The AURI platform now allows users to route AI requests through their own third-party provider accounts for increased security.

Updated on Oct. 28, 2026 in Software

Isometric editorial illustration of a brass key and vault door, representing enterprise-level digital access and security control. — Endor Labs introduced bring your own key support, allowing organizations to manage AI tool security through their established third-party provider accounts. AI Illustration. Upload story photo >

Live Poll

Do you trust specialized third-party security tools more than standard AI model features for data protection?

Endor Labs has introduced bring your own key (BYOK) support for its AI SAST and AI Chat tools. This feature enables customers to manage AI requests directly through their own accounts with providers like OpenAI, Azure OpenAI, Gemini, or Vertex AI.

Why it matters

This update helps organizations in regulated sectors meet specific governance and data-handling requirements. By using existing provider accounts, companies can maintain their established procurement, compliance, and audit frameworks.

The AURI platform enables users to pass provider keys as environment variables to avoid direct storage within the Endor Labs system. Its AI Gateway also incorporates encrypted key storage, provider allowlists, and tenant isolation to secure model requests.

The players

Endor Labs

Endor Labs is a software security firm that specializes in developer-focused application security tools and supply chain risk management.

The details

Customers can route all model requests through their preferred AI provider by configuring an API key. Furthermore, the company's detection agents trace user-controlled data across repositories, files, and functions to accurately identify security vulnerabilities.

October 28, 2026: Endor Labs announced the new BYOK feature.

The Tech Race

Integrating the Bring Your Own Key (BYOK) security model into AI platforms reflects a broader industry movement to exert granular control over cloud-based AI services. This shifts the focus from vendor-managed security to user-governed infrastructure, positioning Endor Labs against competitors attempting to balance rapid AI adoption with enterprise-grade compliance.

Developers and security teams can now utilize their existing enterprise AI accounts while maintaining strict control over their data's path to the model. This capability simplifies audit workflows by bypassing the need to store sensitive API keys within the Endor Labs platform.

The takeaway

Companies can now harmonize their AI-assisted security workflows with their existing compliance and procurement policies. This flexibility allows security teams to leverage high-performance AI models without compromising internal governance standards.