The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
We're excited to announce the expansion of Kong Identity to include centralized principals, which is a single source of truth for every entity (machine, agent, processes, etc) that needs to be authenticated across API gateways, event gateways, and developer portal applications. For platform teams…
The MCP demo impressed the room. Then someone asked how 5,000 employees would connect to 40 MCP servers, and the answer was: one OAuth consent screen at a time. Per user. Per server. No central policy, no unified audit trail, and nothing stopping a personal account from getting wired into a work…
Digital agreements are at the heart of many critical business processes. As companies modernize their technology stacks and adopt API-driven architectures, integrating agreement workflows directly into applications has become increasingly important. By combining the capabilities of Kong Konnect…
Enterprise security teams have clear requirements: no static credentials, no exceptions. Every service-to-service connection, whether it's Kong talking to databases, caches, or vaults, should authenticate using the same IAM-based identity model that governs the rest of their cloud infrastructure.…
AI APIs don't get enough credit for how much weight they're actually carrying. These AI APIs aren't merely technical connectors. They're, in fact, cost drivers and potential revenue engines. And when something goes sideways, they're ground zero. In production, they behave nothing like the…
For enterprise teams evaluating API testing tools like Insomnia and Postman, understanding the real cost is critical. Postman’s recent changes and Insomnia’s alternative approach tell different stories. Let’s dive in. TL;DR: Free collaboration with Postman — a myth On March 1st, 2026, Postman…
Event-driven architectures (EDAs) have pretty quickly transformed from a niche engineering pattern to the all-pervasive central nervous system of the modern enterprise. With Apache Kafka at the helm, enterprises are rapidly shifting gears from synchronous REST APIs to asynchronous event streams to…
Bringing APIs and events together has always been a challenge. REST APIs give developers a familiar interface, while event brokers like Solace Broker excel at fan-out, filtering, and scalable, reliable event delivery. The tricky part? Bridging these two worlds without building a lot of custom glue.…
API endpoints process requests that power our digital world—from social feeds updating in real-time to enterprise systems syncing global inventories across continents. APIs comprise over 57% of Internet traffic, yet API endpoints often remain misunderstood. This leads to design inconsistencies,…
Discover expanded OpenTelemetry support, full cloud-native authentication, powerful Datakit orchestrations, and PCI DSS 4.0 attestation for Kong Konnect and Cloud Gateways. As API ecosystems grow more complex, maintaining visibility and security shouldn't be a hurdle. Kong Gateway 3.13 simplifies…
2025 was a breakout year for Kong Cloud Gateways. As organizations continue to modernize architectures, adopt AI-driven workloads, and operate in increasingly regulated environments, the need for secure, high-performance, and flexible API infrastructure has never been greater. This year, Kong Cloud…
APIs empower every enterprise function, starting from seamless customer experiences to efficient internal operations. As a matter of fact, APIs are the foundational technology that fuels the advancements in AI, MCP, agentic, and autonomous systems. They're the critical connective tissue that allows…
In this post, Kong Champion Sachin Ghumbre shares his journey of transforming a complex GenAI application from a state of operational challenges to streamlined control. Discover how Kong AI Gateway provided the enterprise-grade governance needed to secure, optimize, and scale his GenAI solution,…
While more and more organizations are seeking to standardize and consolidate their API and AI infrastructure efforts in a unified platform , the reality is that many — especially large — organizations already have disparate API deployments across disparate API gateways. One common API gateway that…
The Challenge : API calls make up a massive 71% of all web traffic, yet many organizations still rely on traditional security tools designed for monolithic architectures. The Risk : Organizations face an average of 421 APIs to manage, with machine learning discovering 30.7% more API endpoints than…