Talk tech with tips and tutorials from builders at Kong and the Kong Community.
"To prioritize the safety and security of the ecosystem, Kubernetes SIG Network and the Security Response Committee are announcing the upcoming retirement of Ingress NGINX . Best-effort maintenance will continue until March 2026. Afterward, there will be no further releases, no bugfixes, and no…
[](/blog/engineering/nginx-depreciation-migrating-with-kong)
The numbers tell a compelling story. While 65% of organizations that use APIs are currently generating revenue from them, a significant gap exists between API adoption and AI readiness. 83.2% of respondents have adopted some level of an API-first approach. Yet only 25% operate as fully API-first…
[](/blog/engineering/api-a-rapidly-changing-landscape)
While building a GenAI-powered agent for one of our company websites, I integrated components like LLM APIs, embedding models, and a RAG (Retrieval-Augmented Generation) pipeline. The application was deployed using a Flask API backend and secured with API keys. However, post-deployment, several…
[](/blog/engineering/how-kong-ai-gateway-streamlined-my-genai-application)
Why are Microservices Security Risks? Traditional security was simple. One perimeter. Few entry points. Clear boundaries. Microservices shattered this model. Now organizations manage hundreds of independent services. The average number of API calls to an enterprise site has risen to an…
[](/blog/engineering/10-ways-microservices-create-new-security-challenges)
Control Plane Groups in Kong Konnect provide a structured way to manage multiple control planes within a single organization. Think of it as a federated approach: different teams can deploy and manage their own APIs while still adhering to overarching policies set by a central governance team.…
[](/blog/engineering/kong-konnect-control-plane-groups)
Meet Emily. She’s an API product manager at ACME, Inc., an ecommerce company that runs on dozens of APIs. One morning, her team lead asks a simple question: “Who’s our top API consumer, and which of your APIs are causing the most issues right now?” For Emily, that’s not a simple question at all.…
[](/blog/engineering/api-analytics-for-product-managers)
Together, these three technologies enable healthcare organizations to connect systems with confidence, manage identities responsibly, and share data securely. Healthcare data is highly sensitive and strictly governed by regulations like HIPAA. The combination of Kong and Okta provides a robust,…
[](/blog/engineering/health-platform-kong-smart-on-fhir-okta)
Key Takeaways Get started with Insomnia for free today and start testing with the tools trusted by thousands of developers worldwide. API testing is the process of validating that your application programming interfaces (APIs) work as intended, seamlessly connecting software components. Think of…
[](/blog/engineering/api-testing-understanding-the-basics)
It's natural to consider the necessity of guardrails for your sophisticated AI implementations. The truth is, much like any powerful technology, AI requires a set of protective measures to ensure its reliability and integrity. These guardrails aren't just a good idea; they are fundamental for…
[](/blog/engineering/ai-guardrails)
Kong Insomnia is your all-in-one platform for designing, testing, debugging, and shipping APIs at speed. Built for developers who need power without bloat, Insomnia helps you move fast whether you’re working solo, scaling a startup, or collaborating across enterprise teams. With real-time…
[](/blog/engineering/why-kong-insomnia-is-developers-preferred-api-client)
The OWASP Top 10 for LLM Applications 2025 represents a significant evolution in AI security guidance, reflecting the rapid maturation of enterprise AI deployments over the past year. The key updates include expanded focus on agentic AI systems with "excessive autonomy" risks, new attention to…
[](/blog/engineering/owasp-top-10-ai-and-llm-guide)
In the last two parts of this series, we discussed How to Strengthen a ReAct AI Agent with Kong AI Gateway and How to Build a Single-LLM AI Agent with Kong AI Gateway and LangGraph . In this third and final part, we're going to evolve the AI Agent with multiple LLMs and Semantic…
[](/blog/engineering/build-a-multi-llm-ai-agent-with-kong-ai-gateway-and-langgraph)
In my previous post, we discussed how we can implement a basic AI Agent with Kong AI Gateway. In part two of this series, we're going to review LangGraph fundamentals, rewrite the AI Agent and explore how Kong AI Gateway can be used to protect an LLM infrastructure as well as external functions.…
[](/blog/engineering/build-single-llm-ai-agent-with-kong-ai-gateway-langgraph)
This is part one of a series exploring how Kong AI Gateway can be used in an AI Agent development with LangGraph. The series comprises three parts: Basic ReAct AI Agent with Kong AI Gateway Single LLM ReAct AI Agent with Kong AI Gateway and LangGraph Multi-LLM ReAct AI Agent and LangGraph Server…
[](/blog/engineering/how-to-strengthen-a-basic-react-ai-agent)
What Is RAG, and Why Should You Use It? RAG (Retrieval-Augmented Generation) is not a new concept in AI, and unsurprisingly, when talking to companies, everyone seems to have their own interpretation of how to implement it. So, let’s start with a refresher. RAG (short for Retrieval-Augmented Gener…
[](/blog/engineering/build-your-own-internal-rag-agent)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.