Everything between a person and a model.
All 79 features of the Janus Edge gateway. Open any of them to see what it does, why you'd want it and how it works.
Unmarked features are free in every edition. Business and Enterprise need that license. Multiple editions means the feature is free, and a higher edition adds more, such as blocking what the free edition detects.
The headline features
The 21 capabilities most teams choose Janus for.
Identity and access
People and applications sign in with identities you already manage, and nobody reaches a model until you grant it.
Single sign-on with OIDC
Sign in with Okta, Entra ID, Authentik, Keycloak or AD FS, with accounts and groups kept in step with your directory.
Details →Multiple identity providers Business
Run several OIDC providers side by side, such as a contractor tenant next to your corporate one.
Details →LDAP and Active Directory sign-in Business
Sign in against LDAP or Active Directory and use directory groups for grants, with no OIDC provider needed.
Details →SCIM 2.0 provisioning Business
Your identity provider pushes people and groups to Janus, and leavers lose access, keys and sessions at once.
Details →Local accounts with two-factor
Built-in accounts with two-factor for labs, small teams and a break-glass administrator.
Details →Administrator groups and roles
Administrator rights can follow a directory group, so removing someone from the group removes their admin access.
Details →Explicit model grants
Signing in grants nothing. You decide which person, group, team or service may use each model.
Details →Self-service personal API tokens
People create their own keys in seconds, and every call is still tied to a named person.
Details →Service tokens for applications
Pipelines, agents and internal apps get their own named credential instead of borrowing a person's key.
Details →Request policy rules
Block an unapproved tool or an untrusted network before the request reaches a provider or costs anything.
Details →Janus Chat
A chat app for everyone in the organization, built into the gateway, so every message gets the same grants, limits, checks and metering as API traffic.
Janus Chat
A chat app in the browser for every model a person is granted, where each message is checked, limited and metered like any API call.
Details →Web search, page reading and research in Chat
Models search the web, read pages, run code and write cited research reports, using the provider's own tools or Janus's search for self-hosted models.
Details →Files, images, video and music in Chat
Attach documents, images, sound and video, and ask any chat model for a picture, a video, a song or a file to download.
Details →Chat administration Multiple editions
Decide which models Chat offers and how the picker is grouped, set instructions for every chat, configure tools, and choose who may use Chat.
FreeModels, tools, instructions and defaults for everyone+ BusinessLimit Chat to chosen groups, teams and people Details →Models, providers and routing
One OpenAI-compatible API and one curated catalog in front of every hosted and self-hosted model, with stable names, fallback and load balancing.
One OpenAI-compatible API
Any OpenAI SDK or tool works with Janus by changing the base URL and the key.
Details →Hosted and self-hosted providers
Cloud APIs and your own GPU servers behind one endpoint: OpenAI, Anthropic, Bedrock, Vertex, Gemini, vLLM, Ollama and more.
Details →Provider presets
Nineteen presets fill in the right base URL, so connecting a provider takes a key and a click.
Details →Protocol translation
Claude and Bedrock models are served through the OpenAI API, including tools, caching and streaming.
Details →Curated model catalog
Users choose from an approved catalog with prices, context windows and health, and new models stay hidden until reviewed.
Details →Model discovery and live health
Janus finds each provider's models and shows Healthy, Degraded or Down based on probes and real traffic.
Details →Managed model aliases Multiple editions
Publish a stable name like chat-default, then repoint it to a better or cheaper model without touching a single app.
FreeAliases: publish, grant and repoint+ BusinessAutomatic fallback and load-balanced pools Details →Automatic fallback Business
When a model or its provider goes down, an alias moves to its fallback and tells you why.
Details →Load-balanced model pools Business
Spread one model across several GPU servers by live queue length, and keep each conversation on the server that holds its cache.
Details →Auto-routing
Callers ask for one router name, and a classifier sends each request to the model you chose for that kind of work.
Details →Router instructions
Routers, routes and the default can add their own text to the system prompt of every request they serve, so each route gets a different kind of answer.
Details →Route evaluation with a judge
Check whether a route is as good as the default: a judge model compares sampled answers blind, twice with the order swapped.
Details →Decision models
Classifier models that answer typed questions with probabilities, used inside Janus and served to people and apps.
Details →Personal subscriptions
People bring the ChatGPT, Copilot, Grok or Mistral plan they already pay for, and it becomes metered and policy-checked.
Details →Model speed and activity
Model cards show real tokens per second and jobs per day, so people pick fast models and you spot overloaded ones.
Details →Runtime upstream timeouts
Raise or lower upstream timeouts from the admin console without a redeploy.
Details →Thinking settings fitted per provider
One reasoning effort, temperature and tool set from a chat client works on every provider instead of failing with a 400.
Details →Metering, cost and limits
Every request is metered against versioned rate cards, attributed to a person, team or application, and held to the limits you set.
Metering that matches the invoice
Every request is metered by input, output and cache tokens at the provider's real prices, with no prompts stored.
Details →Versioned rate cards
Up to five prices per model with full history, so past requests keep the price that applied when they ran.
Details →Quotas and budgets
Cap tokens, spend or requests per person, team or service, with warnings before anyone hits the limit.
Details →Per-person rate limits
Requests-per-minute limits that hold across every replica protect a shared upstream from one heavy user or a looping integration.
Details →Local-only mode
For gateways that only front your own GPUs, hide every price and keep metering tokens and speed.
Details →Project, cost-center and app attribution
Tag requests with a project, cost center or app name, so finance can split spend beyond the user.
Details →Teams
Teams give usage a home, give departments their own grants and budgets, and let team leads run their own roster.
Teams with their own grants and quotas
Departments get their own grants, budgets and usage, and every request keeps the team it was charged to.
Details →Team roles and join requests Multiple editions
Team leaders and moderators approve join requests and manage the roster without being administrators.
FreeLeaders, moderators and join requests+ BusinessMembership from directory groups (SCIM or LDAP) Details →Team workspace for leads
Team leads see members, spend, models and each person's share without asking IT for a report.
Details →Bulk team import from CSV
Create dozens of teams from one CSV, with a preview that checks every row before anything is written.
Details →Dashboards and reports
Everyone sees their own usage, leads see their team, and administrators get request logs, alerts and a full reporting workspace.
Dashboards for everyone
Personal, team, organization and admin dashboards for requests, tokens, spend, cache and throughput.
Details →Request log with CSV export
Find the exact request behind a failure or a cost spike with filters, a detail view and CSV export.
Details →Reporting workspace Multiple editions
Eleven report templates and a builder, with exports to PDF, Excel, CSV and JSON.
FreeTemplates, builder, saved reports and every export format+ BusinessScheduled reports Details →Usage insights
See what kinds of work people use AI for, from category labels on sampled requests, without storing prompts.
Details →Classifier benchmark
Measure what your classifier choices add to each request before you change a policy.
Details →Scheduled reports Business
Saved reports run daily, weekly or monthly on their own and notify the owner when they're ready.
Details →Model family and hosting labels
Label models by family, provider and hosting, so reports can show how much runs on your own hardware.
Details →Notifications and alerting Multiple editions
Quota warnings and provider outages reach the right person in the app, by webhook or by email.
FreeIn-app and webhook alerts+ BusinessEmail delivery Details →Built-in docs and connection recipes
Built-in docs, an error catalog and copy-ready snippets get people from a key to a first request.
Details →Security gateway
Checks run on the traffic itself, inside the gateway, before anything sensitive leaves your network or reaches your users.
Security policies and bindings Multiple editions
Bundle checks into policies and bind them to everyone, a group, a model, a provider or a service token.
FreePolicies and bindings in observe mode+ BusinessRedact and block modes Details →Secret detection and redaction Multiple editions
Twenty-seven detectors catch API keys, cloud credentials and passwords, then redact them or block the request.
FreeDetect and report all 27 secret types+ BusinessRedact the secret or block the request Details →PII detection Multiple editions
Card numbers, IBANs, Social Security numbers, emails and phone numbers are recognized in the gateway itself.
FreeDetect and report personal data+ BusinessRedact or block Details →Codename and term lists Multiple editions
Lists of codenames and client names that still match when someone writes Pr0j3ct or adds spaces.
FreeTerm lists that detect and report+ BusinessRedact or block Details →Prompt-injection detection Multiple editions
Run Prompt Guard 2 or a decision model to flag or block jailbreak and injection attempts.
FreeClassify and report attempts+ BusinessBlock flagged requests Details →Child Safety
Rules that follow each child to every model they can use: age ranges, a tutor that never gives the answer, kind replies when they feel low, and a note to you when it matters.
Details →Content safety checks Multiple editions
A decision model checks conversations against the categories you choose, the built-in Safety set or your own, each with its own minimum confidence.
FreeJudge and record by category+ BusinessBlock requests by category Details →Parental controls
Parental controls in Janus are now Child Safety: rules attached to each child that cover every model, replacing the Family router and Parental controls policy templates.
Details →Decision models as security guards Multiple editions
One decision model can back prompt-injection and content-safety checks, as an alternative to Prompt Guard and Llama Guard.
FreeJudge and record with a decision model+ BusinessBlock flagged requests Details →Parallel classifier checks
Model-backed checks run at the same time, so a request waits for its slowest guard rather than all of them in turn.
Details →Streamed answers checked in flight Multiple editions
Streamed answers are checked a few words ahead, so a secret can be removed before it reaches the screen.
FreeScan streamed answers and report+ BusinessRedact in flight or cut the stream Details →Request shape limits Multiple editions
Cap messages, body size, images and tools per request before any classifier runs.
FreeMeasure and report oversized requests+ BusinessBlock them Details →Mandatory policy floor and explain
A mandatory baseline no team can loosen, and an explainer that shows which checks apply to anyone.
Details →Audit log Multiple editions
An append-only record of every grant, price, policy, role and license change, with before and after values.
FreeFull audit log in the console+ BusinessCSV export for your SIEM Details →Troubleshooting captures Business
When something breaks, capture full requests for a limited time and scope, then purge them.
Details →Deployment and operations
A single binary that runs on one Linux server, in Docker or on Kubernetes, licensed offline with a signed key.
A single binary
The gateway and its admin console ship as one signed binary, container image (also as an offline file) and Helm chart.
Details →Linux server installer
One command installs Janus as a service with HTTPS, so one VM can run a production gateway.
Details →Docker, Compose and Helm
Run the container, the Compose stack with Prometheus and Grafana, or the Helm chart.
Details →SQLite or PostgreSQL
Start with built-in SQLite and move to PostgreSQL for production, with no Redis or other services.
Details →File storage
Chat files, generated images and troubleshooting captures go to the database or any S3-compatible bucket, encrypted by Janus before they are stored.
Details →High availability Business
Run several stateless replicas against one PostgreSQL database, so the gateway is never a single point of failure.
Details →Built for large networks
Metering stays exact under load, and console pages stay fast after millions of requests.
Details →Performance mode Business
Batch usage writes to meter several times more requests per second on each replica.
Details →Observability
Prometheus metrics, JSON logs, OpenTelemetry traces and health probes for the monitoring you already run.
Details →Corporate network friendly
Custom CA bundles, HTTPS proxies and trusted forwarders, so Janus works behind corporate network gear.
Details →Air-gap ready Multiple editions
Every edition installs and verifies its license with no network access, for sites that can't call home.
FreeOffline install, offline license check, JANUS_OFFLINE+ EnterprisePerpetual keys, purchase by PO, air-gap support under an SLA Details →Signed license keys and seats
A license is a signed key you paste in, and an expired key never stops traffic that's already configured.
Details →License sync and update checks
Optional license renewal and update checks, both off by default and fully off in offline mode.
Details →Source available
Read and audit every line of the component that sees all of your AI traffic.
Details →See it on your own network.
The Community edition is free for up to 25 people, and a first request usually goes through in about ten minutes.