Platform teams don't build great infrastructure by writing glue code. They build it by configuring great primitives. But as API footprints grow in scale and complexity, the gap between what a platform needs and what it takes to run it keeps widening: more workarounds, more bespoke scripts, more…
Your security scanner has been yelling at you. Your compliance team has been forwarding the reports. Your platform engineers have been patching OS-level vulnerabilities in Kong's base image that never touched Kong itself. These are the common challenges faced by enterprise customers, especially…
We're excited to announce the expansion of Kong Identity to include centralized principals, which is a single source of truth for every entity (machine, agent, processes, etc) that needs to be authenticated across API gateways, event gateways, and developer portal applications. For platform teams…
Running Apache Kafka on Amazon Managed Streaming for Apache Kafka (MSK) gives you a managed broker with no ZooKeeper to operate, automated patching, and multi-AZ replication handled by the service. What it doesn't give you is a safe, governed way to expose Kafka access beyond your VPC boundary.…
Gartner recently published its inaugural Magic Quadrant for AI Governance Platforms (AIGP) — a signal that the AI governance category has graduated from analyst speculation to something enterprises are actively buying. Thirteen vendors were formally evaluated. The market is projected to grow from…
Our launch announcement made the business case for prepaid credits: collect fiat-specific payment before consumption, protect your margins from token-cost spikes and collections risk, and give customers a flexible wallet with different overage options. This post is the technical follow-up, written…
Shadow AI detection is the practice of finding and governing unsanctioned AI tools, models, and API integrations that employees deploy without security approval. It has become urgent because these tools route live enterprise data to external models in real time, and traditional security stacks…
The MCP demo impressed the room. Then someone asked how 5,000 employees would connect to 40 MCP servers, and the answer was: one OAuth consent screen at a time. Per user. Per server. No central policy, no unified audit trail, and nothing stopping a personal account from getting wired into a work…
As of July 2026, Kong Gateway Enterprise 3.11 will enter its End Of Life (EOL) phase and will no longer be fully supported by Kong. Following this, Kong Gateway Enterprise 3.11 will enter a 12-month sunset support period, focused on helping customers upgrade to a current version of Kong Gateway…
Enterprise AI adoption is accelerating. In PwC's April 2025 survey of 308 US business executives, 88% said they plan to increase AI-related budgets in the next 12 months [1]. But scaling AI from pilot to production exposes a structural problem most teams discover too late: direct LLM API…
In late June 2026, two of the most widely used AI agent platforms were compromised within the same week. Langflow disclosed a critical unauthenticated remote code execution flaw. Dify, powering over one million applications, revealed four vulnerabilities that exposed private conversations and…
LLM provider switching went from a theoretical concern to an operational emergency in June 2026, when Anthropic disabled Claude Fable 5 and Mythos 5 following a US government directive [3][6]. The shutdown was swift, with access suspended just days after the models launched. Enterprises that had…
Kong Insomnia 13 delivers native Kong Konnect Gateway integration that lets developers query live gateway configuration directly from their terminal, so what they test is always what's deployed, with no manual spec imports and no stale collections. To get started for free, click here . You invested…
AI moves fast: new models, new pricing, new capabilities, sometimes all at once. Prepaid credits let customers buy value upfront and spend it across whatever you're offering today or launch next, without needing to reprice, remigrate, or renegotiate every time something changes. Prepaid credits are…
Vendor lock-in is one of the most underestimated risks in enterprise technology. It starts with convenience and ends with dependency. And as organizations accelerate AI adoption, the problem is getting worse. What used to be a cloud infrastructure concern now extends to LLM providers, agentic…