Companies are rapidly adopting AI, but it's not all roses. The excitement comes with significant risks, such as shadow AI, runaway costs, and security nightmares. This post explores the real challenges organizations face in AI governance today and highlights how forward-thinking companies are…
[](/blog/enterprise/ai-governance-wake-up-call)
"Too much information running through my brain." When The Police sang this opening line on their 1981 album Ghost in the Machine , they weren't thinking about artificial intelligence, but the sentiment perfectly captures the state of modern AI. The song warns of an overload of data that parallels…
[](/blog/engineering/ai-gateway-mcp-gateway-mcp-server-breakdown)
The EU AI Act is here, and for many enterprises, it represents a massive coordination challenge. As the world’s first comprehensive AI law, it mandates strict governance on transparency, risk management, and data quality. For platform engineers and architects, the immediate question is operational:…
[](/blog/enterprise/eu-ai-act-compliance)
The integration of next-generation AI workloads — from large language models (LLMs) to speech-to-text and text-to-speech — demands a powerful, secure, and scalable infrastructure. This is especially true for building advanced AI voice agents, which rely on seamless, natural, and highly efficient…
[](/blog/engineering/ai-voice-agents-kong-ai-gateway-cerebras)
Traditional API Gateways: Excellent for routing, auth, and microservice traffic; poor at AI workloads. Limitations: Can't track tokens, manage streaming responses, enforce content-level security, or use semantic caching. AI Gateways Purpose-built for LLMs with: Architecture Recommendation: Layered…
[](/blog/learning-center/api-gateway-vs--ai-gateway)
Everyone's telling you to innovate faster with AI. Move quicker. Ship more features. Deploy more agents. But before we sprint headlong into the AI revolution, we need to have a proper dollars-and-cents conversation that most companies are avoiding. Disclaimer: Statistics cited in this post were…
[](/blog/enterprise/hidden-ai-fragmentation-tax)
In January 2025, the OAuth 2.0 Security Best Current Practice became RFC 9700 ( RFC 9700 - Best Current Practice for OAuth 2.0 Security ). This technical milestone symbolizes a broader transformation. APIs are no longer just developer tools – they're regulated infrastructure powering everything…
[](/blog/engineering/api-a-rapidly-changing-landscape)
That’s a wrap on API Summit 2025 ! At our eighth annual event, the brightest minds in the worlds of APIs and AI gathered in New York City to define the next chapter of digital innovation. We're entering an era where APIs are not just connecting services but connecting intelligence. APIs are the…
[](/blog/news/api-summit-2025-recap)
One of Kong Gateway’s superpowers is deck , our first-party declarative configuration tool. Tens of thousands of developers all around the world have embraced a text-driven, version-controlled configuration workflow for the world’s most used API Gateway . The deck CLI is an incredible tool, but it…
[](/blog/product-releases/kongctl)
Today, we're open-sourcing Volcano SDK, a TypeScript SDK for building AI agents that combines LLM reasoning with real-world actions through MCP tools. Why Volcano SDK? One reason: because 9 lines of code are faster to write and easier to manage than 100+ . Without Volcano SDK? You'd need 100+ lines…
[](/blog/product-releases/volcano)
Picture this: you’ve spent months building a slick API that developers love, and it’s already humming behind the scenes in production. But every time someone calls your endpoint, what happens? You get an invisible hit across multiple cost centers, including expensive LLMs, without a clear line of…
[](/blog/product-releases/konnect-metering-and-billing)
The first time you push an API to production, you’re excited it’s finally live. You’re relieved that you can move on to your next big project. You’re also nervous. You’ve tested as much as you thought you should, but somewhere in the back of your mind is a whisper of, “What if I missed…
[](/blog/product-releases/trust-what-youre-shipping-with-insomnia-v12)
To unlock Kubernetes’ full potential, many enterprises are relying on three key building blocks available in Kong Konnect today: Together, these components extend Kubernetes from being just a container orchestration platform. They lay the foundation for Kubernetes to support the exposure,…
[](/blog/product-releases/kubernetes-experience-in-konnect)
Modern enterprises are embracing multi-cloud strategies to avoid vendor lock-in, optimize costs, and ensure resilience. Yet managing API infrastructure (which also happens to be AI infrastructure) across multiple cloud providers while maintaining performance and simplicity remains a significant…
[](/blog/product-releases/fully-managed-redis-instances)
Ever feel like you're fighting an uphill battle with your API strategy? You're building APIs faster than ever, but somehow everything feels harder. Wasn’t API-first supposed to make all this easier? Well, you're not alone. And now industry analysts are noting it as well. New Gartner research on…
[](/blog/enterprise/you-might-be-doing-api-first-wrong)Secure your AI infrastructure with prompt guards, PII sanitization, and centralized governance. Control LLM costs with token-based rate limiting and semantic routing across providers.