The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
The Stakes Keep Rising The security implications are severe. OWASP's 2025 Top 10 for LLM Applications ranks prompt injection as the number one critical vulnerability. Attackers manipulate LLM inputs to override instructions, extract sensitive data, or trigger unintended behaviors. Traditional…
[](/blog/engineering/5-best-practices-securing-microservices-scale)
The Anatomy of Architectural Complexity Modern architectures now juggle three distinct traffic patterns. Each brings unique demands. Traditional approaches treat them separately. This separation creates unnecessary complexity. North-South API Traffic External APIs are your digital front door.…
[](/blog/enterprise/microservices-to-ai-traffic-kong-as-the-unified-control-plane)
The widespread adoption of Kafka and event streaming platforms is evident across several enterprises, where they serve as the backbone of critical operations, ranging from financial transactions to AI inference pipelines. However, in the domains of security and identity, most teams continue to face…
[](/blog/product-releases/kong-event-gateway-1-1)
Running Kong in front of your Solace Broker adds real benefits: Imagine an order service that accepts REST requests and publishes them as events. 1. API Consumer calls Kong with a standard POST request: 2. Kong Gateway applies authentication, validates the payload, adds a correlation ID, rate…
[](/blog/engineering/smarter-event-driven-apis-kong-solace)
When teams resort to VPC peering or PrivateLink to expose Kafka, they're not solving the problem — they're managing it, one network topology decision at a time. Every new external consumer adds complexity: a new peering connection, new firewall rules, new IP space to coordinate, new potential for…
[](/blog/enterprise/kafka-external-access)
Agents are ultimately decision makers. They make those decisions by combining intelligence with context, ultimately meaning they are only ever as useful as the context they can access. An agent that can't check inventory levels, look up customer history, or verify pricing isn't autonomous — it's…
[](/blog/product-releases/introducing-kong-context-mesh)
This is the pitch to the board and the C-suite. It must be brutally concise, focused entirely on your business outcomes, not the technology. If the first page doesn't articulate value, the strategy dies. It immediately frames the initiative in terms of shareholder value and competitive advantage.…
[](/blog/enterprise/enterprise-api-strategy-legacy-modernization)
Why are Microservices Security Risks? Traditional security was simple. One perimeter. Few entry points. Clear boundaries. Microservices shattered this model. Now organizations manage hundreds of independent services. The average number of API calls to an enterprise site has risen to an…
[](/blog/engineering/10-ways-microservices-create-new-security-challenges)
Ever wonder how Netflix streams to millions of users without crashing? Or how Amazon powers billions of transactions daily? The secret sauce behind these scalable, resilient behemoths is microservices architecture. If you're a developer or architect wading into the complex world of distributed…
[](/blog/learning-center/what-are-microservices)
In the rapidly evolving world of microservices and cloud-native applications , service mesh has emerged as a critical tool for managing complex, distributed systems. As organizations increasingly adopt microservices architectures, they face new challenges in service-to-service communication,…
[](/blog/engineering/implementing-a-service-mesh)
The service mesh architecture pattern has become a de facto standard for microservices-based projects. In fact, from the mesh standpoint, not just microservices but all components of an application should be under its control, including databases, event processing services, etc. It's critical to…
[](/blog/engineering/service-mesh-reference-architecture-openshift-istio-kong)A virtual machine (VM) is a fully-fledged, standalone operating environment running on a physical computer. Unlike the host computer it's running on, a VM is not a physical machine, thus the designation of "virtual". It does, however, have all the components of a physical computer system (CPU, RAM,…
[](/blog/learning-center/virtual-machines)Kubernetes, or K8s as it's known for short, and container orchestration are changing the landscape of software development and deployment. But what exactly does Kubernetes do? In this comprehensive guide, we'll explain the basics, discuss the benefits that Kubernetes can offer you, and explore its…
[](/blog/learning-center/what-is-kubernetes)
Kubernetes has become the gold standard for container orchestration. However, running stateful applications on Kubernetes can be challenging . This is where Kubernetes operators come in. Kubernetes operators resolve common issues like automating management of complex applications such as databases,…
[](/blog/learning-center/what-is-a-kubernetes-operator)A microservices architecture addresses challenges by breaking the application down into smaller components or services. This approach has gained significant traction in recent years, evolving from a novel concept to a mainstream architectural pattern. Less than 10 years after the term was first…
[](/blog/learning-center/monolith-vs-microservices)
In the ever-evolving landscape of modern applications and cloud native architectures, the need for efficient, scalable, and secure communication between services is paramount. Enter the service mesh — a versatile platform designed to address various challenges in securing, connecting, and observing…
[](/blog/engineering/7-signs-you-need-a-service-mesh)