
Security Bank Invests in API-First Innovation with Kong
Leading Philippine bank modernizes API infrastructure to support open banking

Background
Innovation pays for this trusted financial institution
Security Bank is a prominent financial institution in the Philippines that serves a broad customer base across retail, commercial, corporate, and institutional clients. With 74 years in the finance and banking industry, Security Bank is focused on delivering innovative banking services while maintaining the highest standards of data security and customer satisfaction. Security Bank has established itself as a trusted partner for both individual and business customers seeking reliable and secure banking solutions through a comprehensive approach to banking that prioritizes stakeholder needs, ethical operations, and community engagement.
Security Bank is focusing on sustainable digital growth to expand and enhance the banking experience for its customers. As part of their broader transformation, the bank is investing in API-driven platforms, particularly for their small and medium enterprise (SME) and corporate offerings, to achieve agility, scalability, and control across their services.
“In looking toward more open banking initiatives, we’re focusing on modernizing our services, improving API security, and facilitating the integration of new digital banking features,” said Juan Mestas, Group Technology Head.
Reduction in API-related incidents
Balancing innovation speed with security needs
Security Bank reached a pivotal moment when its leadership recognized the company’s need to modernize its infrastructure to support stronger API security, centralized governance, and scalable delivery. At the time, the bank was relying on an outdated Enterprise Service Bus (ESB) system, which masqueraded as an API gateway, ultimately requiring too many tools to manage effectively.
“We weren’t using a real gateway at that time, and we were stuck without a centralized control point to enforce policy or streamline workflows,” said Aloysius Mendoza, Head of Platform Engineering.
These technical challenges began bleeding into Security Bank’s strategic goals for expansion. With over 50 local banks competing in the Philippine market, the team knew that they had to deliver faster, more reliable digital services using secure APIs to remain competitive. Their existing tools had proven too heavyweight, complex, and costly to maintain, and they were slowing them down.
Preparing to launch their first customer-facing APIs, Security Bank needed a solution that would allow them to segment workloads, improve governance, and scale efficiently, without overwhelming complexity or cost.
We needed agility and control for our broader ambition of becoming a cloud-first, innovation-driven organization. That’s how we arrived at Kong.
A lightweight, scalable platform for ultimate control
After a thorough evaluation process, which included expert insights and research, Security Bank chose Kong for its API management platform. The team was searching for a fit-for-purpose solution that was lightweight, cloud-ready, and immediately scalable.
“Kong checked every box for us,” Mendoza said. " It provided a lightweight, efficient solution—delivering the agility and ultimate control essential for our rapid development and deployment needs."
Kong’s modular architecture and strong centralized governance capabilities made it stand out from the crowd. Using Kong Konnect, Security Bank implemented a centralized control plane that simplified API operations and fully replaced a fragmented system that had been previously managed by ten different teams.
Developer experience was a key priority for Security Bank, and the integration of Kong Insomnia — Kong’s collaborative API development platform — streamlined developer workflows and standardized the API lifecycle from testing to deployment. Plus, Kong's enterprise-grade plugins allowed them to improve security and observability from day one.
“Now we’ve got one control plane, one governance model, and one developer toolkit—it’s streamlined everything,” Mestas said.
. . . Kong has made it easier to maintain performance while scaling our services.
Faster time to market and fewer API-related incidents
Within the first year of using Kong, Security Bank saw a 25% reduction in API-related incidents — a direct result of moving to a centralized enforcement model. This allowed the team to shift focus from troubleshooting to innovating on new customer-facing features and services.
By simplifying development processes and integrating Kong into their CI/CD workflows, the bank has also achieved faster development and iteration cycles. They have made significant progress toward their goals of improving TTM by 25% each year.
You can’t hit your customer satisfaction targets if your features are delayed. Kong has helped us eliminate those pain points.
Governance and reliability you can bank on
Security Bank aimed to achieve 99.99% availability, a critical metric in the banking sector, and Kong has transformed the way the bank develops and governs its APIs.
Using Insomnia, developers now work within a unified framework that covers testing, implementation, and deployment. This milestone reduced the burden on developer teams for a noticeable improvement in service reliability, coinciding with the bank’s broader strategy to shift more workloads to the cloud. In their second year, as more services moved to the cloud, the team saw measurable improvements in system uptime. “As we move to the cloud, Kong has made it easier to maintain performance while scaling our services,” Mendoza said.
A partnership to deliver superior customer experiences
As Security Bank continues to improve its API strategy, its teams see Kong as a foundational partner. They are exploring more advanced use cases, including threat detection, event-driven architecture, and plug-and-play service models, to power modular banking experiences.
“Ultimately, we want to be known for delivering secure, seamless, and customer-centric banking experiences,” Mestas said. “Kong is helping us get there faster with the right balance of control and innovation.”