# Take the next step in building your API-first business

High-performance proxying of APIs

Drive a GitOps flow of API design and execution with decK, Terraform, and APIs

Deploy and manage gateways natively on Kubernetes with Kong Ingress Controller and Kong Operator

Mock API responses directly on the API gateway

Declaratively configure the execution order of plugins

Organize services and gateways into isolated groups by team or environment

Keep data planes serving traffic and provisioning during a control plane outage

Apply tiered rate limits and policies to groups of consumers

Publish APIs and onboard internal and external developers with self-service access

Governed inventory for every API and AI interface

Visually manage gateways, services, routes, plugins, and consumers

Keep a detailed record of configuration changes for security, compliance, and debugging

Send webhooks or log on gateway changes, such as new admins or rate limits exceeded

Manage the collection and sampling of tracing information

Send metrics and traces to tools like Prometheus, Datadog, StatsD, and Zipkin

Real-time visibility into API traffic and gateway performance

Track trends and make decisions from historical traffic data

Lower the cost and effort of running the control plane

Let Kong run, scale, and upgrade your gateway nodes

Lower the cost and effort of maintaining a database

Contractual availability for the hosted platform

Kong upgrades the control plane and Kong-managed gateways for you

Manage ACME certificates, basic rate limiting, and caching. Add or remove headers, JSON data, or query strings

Support for REST/HTTP, gRPC, GraphQL, WebSockets, TCP/UDP, SOAP, and Kafka

Convert GraphQL queries to REST requests. Rate limit and cache GraphQL queries

Transform requests into Kafka messages and send Kong logs to Kafka

Advanced JSON transformations of requests or responses, with chaining

Enterprise-grade rate limiting with sliding window controls

Gradually shift traffic to a new version, or route requests by header

Full OAuth 2.0, OpenID Connect, mutual TLS, JWT signing, SAML, JWE decryption, and full LDAP

Control gateway configurations based on a user's role

Manage admin access through your identity provider

Control access to APIs with complex, programmable, enterprise-wide rules

Block SQL injection and other injection patterns, plus oversized or malicious JSON and XML payloads

Store keys, certificates, and passwords in tools like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager

Run Kong Gateway in a FIPS 140-3 compliant mode (FIPS 140-2 also available)

Secure, govern, and observe LLM, MCP, and agent-to-agent (A2A) traffic

Expose, secure, and govern Kafka event streams like APIs

Turn business events, like Kafka topic activity or inbound HTTP requests, into HTTP calls to apps, SaaS tools, and AI agents, with one event fanning out to multiple destinations

Secure and observe service-to-service traffic

Issue and validate tokens and manage one identity (principal) per app, service, or agent across API, event, and AI traffic

Meter API and AI token usage, enforce quotas, and automate invoicing

24/7 x 365 technical support SLAs

Accelerate time to value with dedicated Technical Account Managers and Field Engineers

Get help moving from open source or another platform to Kong