As AI technologies continue to revolutionize industries, organizations must balance innovation with responsibility. Kong understands that embracing AI involves not just adopting new tools but also ensuring they're secure, compliant, and sustainable. During a recent visit to Singapore, Kong's Co-Founder and CTO Marco Palladino highlighted the critical need for a robust governance framework to manage the rapid pace of AI innovation responsibly.
AI adoption must be approached strategically, with a focus on mitigating risks related to customer data, security, and compliance. Marco emphasized the importance of creating a centralized AI platform that serves as an internal service for managing AI usage, enforcing security policies, and offering observability across various AI applications. This approach enables organizations to harness the transformative potential of AI while maintaining control over its impact.
Building on this, Marco outlined the continuous challenge of fine-tuning AI models to ensure they remain aligned with security and compliance standards. As AI models evolve, so too must the processes that govern them. This requires a proactive approach to data management — extracting, sanitizing, and refining data in a way that meets both security and compliance requirements. To achieve this, he advocates for a multi-LLM (large language model) strategy, advanced prompt engineering, and robust compliance controls to ensure that AI adoption is both responsible and effective.
*Saju Pillai, Kong’s Senior Vice President of Engineering, joins experts from IMDA, AWS, and Cloud Kinetics at the DeveloperXperience Summit*
This focus on [responsible AI governance](https://konghq.com/blog/learning-center/what-is-ai-governance)responsible AI governance was further echoed by Saju Pillai, Kong’s Senior Vice President of Engineering, who joined a panel discussion in Singapore alongside industry experts from IMDA, AWS, and Cloud Kinetics. Saju highlighted the critical role of GenAI in driving API innovation and how Kong’s solutions can help organizations future-proof their platform strategy. The panel addressed strategies to enhance developer experiences with modern tech stacks and emphasized the need to empower developers to overcome scalability challenges while ensuring security and compliance.
This broader conversation about AI and API innovation ties directly into Kong’s [AI Gateway](https://konghq.com/products/kong-ai-gateway)AI Gateway, which is designed to support organizations as they navigate these complexities. The AI Gateway offers a secure, scalable, and manageable solution for monitoring and controlling AI traffic across enterprise environments. By providing centralized control over AI interactions, AI Gateway ensures that organizations can embrace AI’s potential without compromising governance or security, thereby reinforcing the broader push for innovation and digital transformation.
Kong's commitment to advancing the digital transformation of Singapore was further solidified by being [accredited](https://konghq.com/blog/news/imda-accreditation)accredited by the Infocomm Media Development Authority (IMDA) in 2024. This significant milestone is not just a recognition of Kong’s technical capabilities but also our dedication to innovation and contributing to Singapore’s broader digital economy.
Being accredited by IMDA strengthens Kong’s position as a trusted partner for government agencies and large enterprises, particularly as we seek to expand our footprint across the Asia-Pacific region. By meeting IMDA’s stringent technical, financial, and operational standards, Kong is now positioned to engage more effectively with the public sector.
We anticipate that this accreditation will streamline procurement processes and facilitate faster, more efficient delivery of our solutions to Singaporean customers, enabling us to play a central role in the country’s ongoing digital transformation.
A key initiative in Singapore’s drive to boost digital transformation is the Tech Acceleration Lab (TAL), established by IMDA. TAL provides critical support to local technology firms, helping them navigate the often complex process of securing government projects and scaling their solutions from Proof-of-Concept (PoC) to full deployment.
TAL addresses the unique challenges faced by both technology product companies and government agencies. For tech companies, these challenges include long PoC cycles, limited access to government test environments, and unfamiliarity with government security requirements. On the other hand, government agencies face delays in setting up secure and compliant environments for testing and deploying new technologies.
Kong’s involvement in TAL is a natural extension of our mission to accelerate digital transformation. By providing secure, scalable API management capabilities, Kong enables government agencies to modernize their infrastructure, ensuring that systems can communicate securely across different departments. Through Kong’s platform, government services can be integrated more seamlessly, enhancing the delivery of public services and fostering greater collaboration between agencies.
*Augusto Marietti, CEO, Kong Inc., meets with Edwin Low, Director of Enterprise and Ecosystem Development, IMDA*
As part of Kong’s long-term commitment to Singapore’s digital ecosystem, CEO Augusto Marietti recently met with IMDA’s Director of Enterprise and Ecosystem Development, Edwin Low, to discuss the ongoing partnership and future initiatives within Singapore's digital landscape. The meeting included a review of the joint activities from 2024 and plans for continued collaboration in the coming years.
During the meeting, Augusto shared that Kong had been[ recognized by Gartner®](https://konghq.com/resources/reports/gartner-magic-quadrant-full-lifecycle-api-management) recognized by Gartner® as a Leader in the 2024 Magic Quadrant™ for API Management for the fifth consecutive year. This prestigious recognition was based on Kong’s strong Completeness of Vision and Ability to Execute, with the company positioned furthest along the Completeness of Vision axis. Augusto also highlighted Kong’s recent win at API World 2024, where the company was awarded [Best in API Gateway](https://apiworld.co/the-2024-api-awards/)Best in API Gateway, an honor that underscores its technical innovation and contributions to the global API and software integration industry.
Looking ahead, plans were outlined for how Kong and IMDA can collaborate further to enhance AI safety across the public sector. Kong is set to continue its successful partnership with IMDA through a series of joint activities in 2025, aimed at increasing the company’s visibility across senior leadership and developer communities, while also driving AI adoption and ensuring robust AI governance within government digital infrastructure.
With the momentum from its recent [$175M Series E funding](https://konghq.com/blog/news/kongs-series-e-funding)$175M Series E funding round, which has valued the company at $2B, Kong is poised to continue expanding its global footprint. This funding, combined with Kong’s strong public sector relationships, positions the company to play a significant role in shaping the future of digital transformation — not only in Singapore but across the broader Asia-Pacific region.
Gartner is explicit that AI governance platforms are not Governance, Risk and Compliance (GRC) tools with an AI label. Where traditional GRC platforms function as static repositories for point-in-time risk assessments, AIGPs are built for real-time,
Kong makes every MCP client and server work with Enterprise-Managed Authorization, whether they speak the protocol or not. Standard MCP authorization is user-scoped and interactive: every user authorizes every server, one consent flow at a time. T
Most teams start the same way. A developer creates an API key, calls OpenAI or Anthropic, and ships a prototype. The problems surface when that prototype becomes five production services calling three providers. Hardcoded provider dependencies are
The Langflow CVEs and Dify Vulnerabilities: What Actually Happened Langflow's security problems arrived in waves. CVE-2025-3248 introduced a code injection vulnerability allowing remote code execution through unsanitized user input \10\]. Months la
The architecture is built around two data planes, both managed by Kong. The first is the sync data plane — Kong AI Gateway — which handles all synchronous traffic between your agents and the outside world. Every inbound client request, every outbo
