• Explore the unified API Platform
        • BUILD APIs
        • Kong Insomnia
        • API Design
        • API Mocking
        • API Testing & Debugging
        • MCP Client
        • RUN APIs
        • API Gateway
        • Context Mesh
        • AI Gateway
        • Event Gateway
        • Kubernetes Operator
        • Service Mesh
        • Ingress Controller
        • Runtime Management
        • DISCOVER APIs
        • Developer Portal
        • Service Catalog
        • MCP Registry
        • GOVERN APIs
        • Metering & Billing
        • Analytics
        • APIOps & Automation
        • API Observability
        • Why Kong?
      • CLOUD
      • Cloud API Gateways
      • Need a self-hosted or hybrid option?
      • COMPARE
      • Considering AI Gateway alternatives?
      • Kong vs. Postman
      • Kong vs. MuleSoft
      • Kong vs. Apigee
      • Kong vs. IBM
      • GET STARTED
      • Sign Up for Kong Konnect
      • Documentation
  • Agents
      • FOR PLATFORM TEAMS
      • Developer Platform
      • Kubernetes & Microservices
      • Observability
      • Service Mesh Connectivity
      • Kafka Event Streaming
      • FOR EXECUTIVES
      • AI Connectivity
      • Open Banking
      • Legacy Migration
      • Platform Cost Reduction
      • Kafka Cost Optimization
      • API Monetization
      • AI Monetization
      • AI FinOps
      • FOR AI TEAMS
      • AI Cost Control
      • AI Governance
      • AI Integration
      • AI Security
      • Agentic Infrastructure
      • MCP Production
      • MCP Traffic Gateway
      • FOR DEVELOPERS
      • Mobile App API Development
      • GenAI App Development
      • API Gateway for Istio
      • Decentralized Load Balancing
      • BY INDUSTRY
      • Financial Services
      • Healthcare
      • Higher Education
      • Insurance
      • Manufacturing
      • Retail
      • Software & Technology
      • Transportation
      • See all Solutions
      • DOCUMENTATION
      • Kong Konnect
      • Kong Gateway
      • Kong Mesh
      • Kong AI Gateway
      • Kong Insomnia
      • Plugin Hub
      • EXPLORE
      • Blog
      • Learning Center
      • eBooks
      • Reports
      • Demos
      • Customer Stories
      • Videos
      • EVENTS
      • AI + API Summit
      • Webinars
      • User Calls
      • Workshops
      • Meetups
      • See All Events
      • FOR DEVELOPERS
      • Get Started
      • Community
      • Certification
      • Training
      • COMPANY
      • About Us
      • Why Kong?
      • We're Hiring!
      • Press Room
      • Investors
      • Contact Us
      • PARTNER
      • Kong Partner Program
      • SECURITY
      • Trust and Compliance
      • SUPPORT
      • Enterprise Support Portal
      • Professional Services
      • Documentation
      • Press Releases

        Kong Names Bruce Felt as Chief Financial Officer

        Read More
  • Pricing
  • Login
  • Get a Demo
  • Start for Free
Resources
  • eBooks
  • Reports
  • Demos
  • Videos
|
  • Value Calculator
  1. Home
  2. Customer Stories
  3. LSEG's Automated Pipeline for Secure Kong API Gateway Images

LSEG's Automated Pipeline for Secure Kong API Gateway Images

In this session from API Summit 2024, the LSEG Kong SME team shares how they automated Kong API Gateway image creation. The process uses a GitLab pipeline to start with Debian base OS images, apply security hardening, and scan for vulnerabilities using BlackDuck. The result: secure, production-ready images that are published to the internal artifact repository and made available for LSEG project teams to consume.

Company

www.londonstockexchange.com/
Industry
  • Financial Services
Region
  • Europe
Use Case
  • Security
  • Governance
Customer Since2020
Background

Building a strong API foundation at LSEG

The London Stock Exchange Group (LSEG) is a leading global financial markets infrastructure and data provider. To support its internal developer and engineering teams across a range of business units, LSEG adopted Kong to manage and scale its API infrastructure.

A dedicated Kong SME team was formed, led by product owner Kaja and solution architect Sureshankar. Together with three other engineers, the team supports automation, deployment, and customization of Kong across LSEG’s internal environments.



Challenge

When scale meets complexity

In early 2022, LSEG was deploying Kong images manually across customer environments. This process was time-consuming, inconsistent, and lacked visibility and standardization across teams. As adoption of Kong increased within the organization, the need for a streamlined, automated approach to building, securing, and distributing Kong images became critical.

The team also faced growing demands from internal customers for hardened, customizable Kong and Kong Ingress Controller (KIC) images, as well as improved onboarding, documentation, and support for various deployment environments (Azure, AWS, EKS, Anthos, and hybrid setups).



Solution

From manual to automated

To address these challenges, the LSEG Kong SME team developed a fully automated CI/CD pipeline using GitLab to build and publish customized Kong Distributed Images (KDI) and Kong Ingress Controller images.

The team began by downloading enterprise Kong images from Kong HQ and layered them with hardened base OS images (primarily Debian). Vulnerability scanning was integrated using Black Duck to ensure secure image delivery. Each image was tested in a local dev environment to ensure it was production-ready before release.

Images were then published to LSEG’s internal JFrog Artifactory repository and notifications were sent out to internal consumers alerting them to the new versions. A self-service portal—KDI Portal—was launched to serve as a central resource hub, offering onboarding instructions, plugin deployment patterns (such as Helm chart configurations), usage guides, and best practices.

Customers could further tailor their deployments by overriding Dockerfiles or adding their own plugins, with the SME team available for support as needed. The process also accommodated new customer onboarding and version migrations, with continued support offered across environments. LSEG’s team expanded their automation journey by testing and validating Kong Konnect, enabling SSO integration and dev portal access for select internal use cases. By early 2024, additional enhancements were underway to refine Konnect and developer portal capabilities. To track performance and adoption, the team encouraged all users to integrate with Datadog for detailed usage metrics.




Results

A pipeline that delivers

Since the launch of the automated pipeline in 2022, LSEG has dramatically improved the speed, security, and consistency of Kong image delivery. Highlights include:

Accelerated Delivery: Internal customers now receive hardened, validated Kong images automatically, reducing manual effort and deployment time.

Standardized Onboarding: A self-service portal and onboarding process has streamlined adoption across new internal teams.

Improved Security: Vulnerability scanning and image validation have increased confidence in the production readiness of Kong images.

Wider Adoption: Multiple internal customers across Azure, AWS EKS, and Anthos now rely on the Kong SME team’s automation pipeline, with several new customers onboarded in 2024.

Innovation in Progress: Ongoing enhancements to Kong Konnect and Dev Portal functionality are underway, expanding the potential for centralized management and observability.

Through its investment in Kong automation, LSEG has established a scalable, secure, and flexible foundation for API management across its enterprise, supporting diverse use cases and cloud environments with confidence.








Table of Contents

  • Building a strong API foundation at LSEG
  • When scale meets complexity
  • From manual to automated
  • A pipeline that delivers

Start Your Success Story

Get a Demo

More Customer Stories

Seaco implements AI-infused API automation with Kong Konnect Case Study

Container leasing industry leader replaces legacy EDI with real-time API management

Vanguard Standardizes APIOps Through Automated Governance & Developer-First Design Case Study

Global investment advisor builds a Kong-powered APIOps platform, saving $2.4M annually and embedding governance by default

FanDuel Powers a Real-Time, Regulated Revolution with Kong Case Study

One of the world’s largest gaming companies uses Kong to process 7 billion requests weekly, with low latency and while meeting strict regulatory requirements

Verifone Revamps APIOps & Developer Workflows with Kong Case Study

Global payments leader streamlines API governance, accelerates delivery, and explores agentic automation through spec-first design and Model Context Protocol (MCP).

Vipps MobilePay Orchestrates Centralized Decentralization with Kong Case Study

Nordic digital wallet unifies platforms, accelerates scaling, and protects 10B+ monthly API calls with a Kubernetes-native gateway model

Maersk Deploys AI First Responder to Boost Global API Reliability With Kong Case Study

A global logistics leader operating across 130+ countries built Stargate, an AI-driven incident triage engine that cuts time-to-detection and first-response from 20 minutes to seconds

Svenska Spel Scores Big with Futuristic API Platform by Kong Case Study

State-owned Swedish gaming company turns custom-built integrations into standardized, secure, cloud-ready API platform

Get ahead today

While others catch up, you could be leading. Discover how Kong's platform can accelerate your digital transformation and drive innovation at scale.

Get a Demo
Powering the API world

Increase developer productivity, security, and performance at scale with the unified platform for API management, AI gateways, service mesh, and ingress controller.

Sign up for Kong newsletter

    • Platform
    • Kong Konnect
    • Kong Gateway
    • Kong AI Gateway
    • Kong Insomnia
    • Developer Portal
    • Gateway Manager
    • Cloud Gateway
    • Get a Demo
    • Explore More
    • Open Banking API Solutions
    • API Governance Solutions
    • Istio API Gateway Integration
    • Kubernetes API Management
    • API Gateway: Build vs Buy
    • Kong vs Postman
    • Kong vs MuleSoft
    • Kong vs Apigee
    • Documentation
    • Kong Konnect Docs
    • Kong Gateway Docs
    • Kong Mesh Docs
    • Kong AI Gateway
    • Kong Insomnia Docs
    • Kong Plugin Hub
    • Open Source
    • Kong Gateway
    • Kuma
    • Insomnia
    • Kong Community
    • Company
    • About Kong
    • Customers
    • Careers
    • Press
    • Events
    • Contact
    • Pricing
  • Terms
  • Privacy
  • Trust and Compliance
  • © Kong Inc. 2026