The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
In January 2025, the OAuth 2.0 Security Best Current Practice became RFC 9700 ( RFC 9700 - Best Current Practice for OAuth 2.0 Security ). This technical milestone symbolizes a broader transformation. APIs are no longer just developer tools – they're regulated infrastructure powering everything…
[](/blog/engineering/api-a-rapidly-changing-landscape)
As organizations build more APIs, manual processes and frequent handoffs in the API development workflow can lead to a slower time to market, higher development costs, and poor-quality APIs. They can also result in APIs being poorly documented, causing poor API adoption and lower revenues. APIOps…
[](/blog/engineering/automating-api-delivery-with-apiops-and-kong)
Today’s the day you’ve all been waiting for: Kong Gateway Operator OSS is here. You can read the code and see what a production-grade Kubernetes operator looks like . Authored by multiple Gateway API contributors, Kong Gateway Operator is the de-facto reference for Gateway API implementers on…
[](/blog/product-releases/kong-gateway-operator-oss)
The latest release of decK's APIOps features with the Kong Ingress Controller advances API management and automation in Kubernetes environments. This blog post delves into how this integration streamlines operations, ensuring a more feature-rich API lifecycle management. For teams utilizing the…
[](/blog/engineering/apiops-with-deck-for-kong-ingress-controller-users)
Organizations today are looking to do more with less. The solution for many? Digital transformation. While digital transformation isn’t a new concept, the benefits of boosting efficiency, controlling costs, and delivering better customer experiences are obvious in today’s topsy-turvy economic…
[](/blog/enterprise/transformation-with-api-automation)
We are thrilled to announce that we have reached a significant milestone in our journey to provide the best possible developer experience to our Kong user community. We have added a host of new functionality to decK , our declarative management tool for Kong Gateway . These new functions enhance…
[](/blog/product-releases/deck-1-24)
Jason Cumberland , CPO and co-founder of API and data monetization platform HyperCurrent , contributed to this post. In our last article on how to get started with API monetization , we laid out how to build your API monetization strategy and avoid common pitfalls that occur when trying to get to…
[](/blog/enterprise/api-monetization-best-practices)
The Neosec platform integrates with Kong Gateway Enterprise, an API Management Solution , to provide automated and continuous API discovery, API risk posture alerting and API protection through behavioral analytics and response automation. And it does all that while being out of band, using the…
[](/blog/engineering/neosec)
In the last blog post , we discussed the need for both speed and quality for your API delivery and how APIOps can help achieve both. In this part of our blog post series, we'll walk through what the API lifecycle looks like when following APIOps. We're still following the best practice we've…
[](/blog/enterprise/automating-api-lifecycle-apiops-part-2)Today, Application Programming Interfaces (APIs) and microservices are the de-facto standard for building and connecting modern applications. APIs are no longer just a delivery mechanism but have become the product itself . API lifecycle management refers to the comprehensive, step-by-step process…
[](/blog/enterprise/automating-api-lifecycle-apiops)
If you could clone yourself, you could get your work done a lot faster, right? And that would free up time for you to pursue new projects and advance your career. It's an idea that Kong Vice President of Products Reza Shafii discussed recently as part of Destination: Automation , a free digital…
[](/blog/enterprise/clone-automation-next-job)
Operating APIs and microservices at scale relies on the right processes and company culture. APIOps is the name for this overall approach. If done right, organizations can accelerate digital business with APIOps. It combines modern automation tooling with best practice engineering principles to…
[](/blog/enterprise/accelerate-digital-business-with-apiops-part-1)
Want to learn more about the nuts and bolts of APIOps? Download our eBook, Unlocking the Full Potential of your APIs with APIOps , and learn about the stages of APIOps, get an understanding of the technical assets required, and explore the tooling needed to transform API development and management.…
[](/blog/engineering/automating-developer-pipeline-apiops)
It is a truth universally acknowledged that the culture change side of any technology transformation program is the hardest and slowest part to get right. If you cannot efficiently operationalize a technology investment, that investment is wasted. This is no different in the world of APIs and…
[](/blog/enterprise/what-is-apiops)