Read up on what’s new and what's next in Kong’s latest product releases.
TL;DR: Kong Insomnia 13.4 is all about giving you more visibility than ever before. Whether it's your git changes, your secrets, or how your users are using Insomnia, you’re able to see more than ever before and make better decisions than ever. We’ve gotten great feedback on the native git support…
Bots make up more than a third of internet traffic, and API endpoints attract more of it than web pages do. Scanners hunting for .env files, credential-stuffing scripts, LLM training crawlers, and the long tail of low-effort probes all hit your gateway before they ever reach a service. Every one of…
As of October 2026, Kong Gateway Enterprise 3.12 will enter its End Of Life (EOL) phase and will no longer be fully supported by Kong. Following this, Kong Gateway Enterprise 3.12 will enter a 12-month sunset support period, focused on helping customers upgrade to a current version of Kong Gateway…
AI infrastructure is changing fast. Enterprises are no longer building around a small set of models exposed through relatively consistent interfaces. New model architectures are emerging (Here’s looking at you Jev!). Providers are introducing new APIs and capabilities. Enterprises are running…
Trace complete AI sessions across models, tools, agents, and infrastructure — and understand where performance, cost, and failures accumulate. Traditional observability was built around requests. A request comes in. A service processes it. A response goes out. You trace what happened in between.…
AI models, agents, and MCP servers are showing up across every team, cloud, and gateway in the enterprise, with no central place platform teams can trust to know what exists. We're announcing the evolution of Kong Catalog (formerly Service Catalog), extending the discovery, documentation,…
New AI cost management capabilities help organizations price, attribute, plan, control, and optimize AI spend across models, applications, teams, and agents. AI is getting easier to build with. Paying for it is getting harder to manage. As organizations move from AI experiments to production…
AI agents are only as useful as the tools and information they can access. MCP has made connecting agents to those resources easier than ever. But as agents gain access to more of the enterprise, a new challenge emerges: how do you expand what an agent can access without overwhelming the model with…
Kong Identity can now securely broker downstream credentials for AI agents, giving them access to the systems they need without putting those credentials in the agents themselves. AI agents are getting access to more of the enterprise. An engineering agent might need GitHub and Jira. A support…
Give AI agents a governed way to discover and consume the models, MCP servers, agents, tools, resources, and skills they need — without manually wiring every connection. AI agents are becoming more capable. And as they do, they need access to more of the enterprise. A coding agent might need a…
Kong Webhook Engine turns business events into triggers for applications and AI agents — connecting what happens in the business to what happens next. Most AI agent interactions today start with an explicit request. A user sends a prompt. An application invokes an agent. A workflow calls one. The…
Today we're announcing Kong Operator 2.3. Building on 2.2's expansion into supporting Event Gateway and Dev Portal, this release significantly broadens our feature set. While 2.2 introduced foundational event-driven capabilities, 2.3 brings Kong AI Gateway fully into the Kubernetes-native fold,…
Introducing Portal MCP Server — a governed, per-portal MCP server (plus OAuth 2.0 connections) that lets agents discover and read Dev Portal content without scraping HTML, while respecting existing access controls. The post also recaps three related capabilities that already shipped: agent-ready…
TL;DR: At Insomnia, we believe your tools should support you (and your agents!), not force you into certain ways of working. Over the last few months, we’ve been hard at work streamlining our interface so that it’s easier than ever for you to get started, stay organized, and work however you want…
Two kinds of problems only show up once an API is already live. Something breaks, and a team needs visibility into one specific node right now — not after a redeploy. Or the right behavior for a request depends on who's calling it: a consumer's plan, a token claim, metered usage, or boolean feature…
Regulated industries don't get to choose their cryptography standards; governments and auditors choose for them. If you sell software to a U.S. federal agency, a bank, a healthcare payer, or almost any organization operating under FedRAMP, HIPAA, or PCI DSS oversight, the cryptographic modules in…