The explosion of AI-native applications is upon us. With each new week, massive innovations are being made in how AI-centric applications are being built. There are a variety of tools developers need to consider, be it supplying live contextual data via the Model Context Protocol (MCP) or…
[](/blog/product-releases/securing-observing-governing-mcp-servers-with-ai-gateway)
In the SaaS world, providers must offer tenant isolations for their customers and their data. This is a key requirement when offering services at scale. At Kong, we've invested a lot of time to provide a scalable and seamless approach for developers to avoid introducing breaches in our systems. In…
[](/blog/engineering/ensuring-tenant-scoping-row-level-security)
Too many organizations manually manage their API gateways and policy enforcement today. As humans, we make mistakes. You’ve got one team manually configuring Kong or another gateway on AWS, another fiddling with policies in Azure, and someone else applying governance rules by hand in GCP. That’s a…
[](/blog/engineering/terraform-your-way-to-the-cloud)
APIs are the lifeblood of disruption . . . when leveraged correctly. The best, most disruptive businesses are able to harness API growth as a strategic opportunity. But how? With an API platform that drives innovation, faster delivery, and top-tier customer experiences alongside a top-notch…
[](/blog/product-releases/new-enhancements-to-konnect)
As cybersecurity takes the main stage, organizations face a significant challenge: how do you strike a balance between maintaining a high level of security and ensuring employees have enough data access to perform their jobs properly? Role-based access control (RBAC) is a solution that can support…
[](/blog/learning-center/what-is-rbac)
When was the last time your AI assistant confused a memo from the CEO with 'Game of Thrones' plot lines? Have you ever asked a chatbot a question, only to receive an answer that was not only wrong but hilariously outdated? Imagine asking about the latest iPhone model and getting a response…
[](/blog/learning-center/what-is-rag-retrieval-augmented-generation)
If you take a step back and think about today’s software development landscape, you could argue that documentation is just as important as the code itself. That’s because traditional documentation workflows — where documentation is manually updated, stored separately from code, and thus often falls…
[](/blog/learning-center/what-is-docs-as-code)
Observability has become critical to ensuring the effective monitoring of application and system performance and health. It focuses on understanding a system’s internal state by analyzing the data it produces in the context of real-time events and actions across the infrastructure. Unlike…
[](/blog/engineering/opentelemetry-observability-kong-konnect-dynatrace)
Kong is ranked number 1 on the G2 Momentum Grids for API Management and API Development for Spring 2025. And users seem to agree with the glowing assessment: Kong is currently the highest-rated tool based on user satisfaction in the categories of API Management and API Development on G2. We think…
[](/blog/news/g2-leader-top-api-management-tools)
Software development has always evolved with new paradigms to meet the growing demands of modern systems. One of the most significant shifts has been the adoption of microservices. Emerging in the early 2010s, this architectural pattern moved away from monolithic applications in favor of smaller,…
[](/blog/engineering/tracing-logging-metrics-unifying-observability-with-opentelemetry)
Recent leaks have once again brought API and data security concerns into the spotlight. Specifically, the leaks pointed at the following as major areas to consider when thinking through your API and data security strategies: When considering the above, it’s critical to think about best practices…
[](/blog/enterprise/insomnia-security)
A RESTful API is a type of application programming interface that follows the guidelines of Representational State Transfer (REST). Its goal is to present data models and functions in a clear and standard format. RESTful APIs use common web technologies. This helps them work smoothly across…
[](/blog/learning-center/what-is-restful-api)
Understanding and monitoring the performance and health of applications and systems is critical. This is where observability comes into play. Observability is about gaining a comprehensive understanding of a system's internal state by analyzing the data it generates within the context of real-time…
[](/blog/engineering/observability-and-advanced-analytics-dynatrace)
Today, we’re excited to unveil Kong AI Gateway 3.10! This release introduces new functionality to enhance AI governance, reduce LLM hallucinations, and accelerate developer productivity when working with AI. Read on to learn more. Kong AI Gateway 3.10 ships with a new AI RAG Injector plugin that…
[](/blog/product-releases/ai-gateway-3-10)
AI is quickly transforming the way businesses operate, turning what was once futuristic into everyday reality. However, we're still in the early innings of AI, and there are still several key limitations with AI that organizations should remain aware of to ensure that AI is being leveraged in a…
[](/blog/enterprise/automated-rag-hallucination-proof-llms)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.