Kong Gateway
The world's most adopted open-source and enterprise API gateway. Kong Gateway handles authentication, rate limiting, traffic control, and observability for any API at any scale — on-premises, in the cloud, or at the edge.
Kong
Kong Inc. is the world's most adopted API management platform, helping enterprises connect, secure, and orchestrate APIs and AI agents at scale across any cloud or architecture.
Application Development & DevOps
The API Platform Built for the AI Era
Kong Inc. is the creator of the world's most widely deployed API gateway and a pioneer in modern API management. Trusted by thousands of organisations globally — including the majority of the Fortune 500 — Kong provides the foundational platform for connecting, securing, and governing APIs, microservices, and AI agents across hybrid and multi-cloud environments.
As AI adoption accelerates, Kong has extended its platform to address the unique challenges of AI infrastructure, enabling enterprises to manage, secure, and observe AI traffic with the same rigour applied to traditional APIs. Aquion brings Kong's enterprise capabilities to IT resellers and organisations across Australia and New Zealand.
Kong's Core Products
Kong AI Gateway
A purpose-built layer for managing AI and LLM traffic across multiple providers. Kong AI Gateway delivers semantic caching, prompt engineering, rate limiting, cost governance, and observability for AI workloads — keeping AI initiatives secure and cost-effective.
Konnect (Kong's SaaS Platform)
Kong Konnect is the unified, cloud-hosted control plane for managing the entire API lifecycle. It provides a centralised developer portal, API analytics, service catalogue, and multi-region gateway management — all delivered as a fully managed SaaS experience.
Kong Mesh
An enterprise-grade service mesh built on Kuma and Envoy, enabling east-west traffic security, mTLS, observability, and policy management across Kubernetes and virtual machine workloads in multi-cloud and hybrid environments.
Kong Insomnia
A powerful API design, testing, and debugging tool for developers. Insomnia supports REST, GraphQL, gRPC, and SOAP — enabling teams to collaborate on API design and testing workflows from a single, intuitive interface.
Kong AI Agent Orchestration
As agentic AI workloads grow in complexity, Kong provides orchestration and governance capabilities for multi-agent systems — enabling enterprises to manage, secure, and monitor AI agents interacting across internal and external services.
Enterprise-Grade API Security and Governance
Security sits at the heart of the Kong platform. Enterprises rely on Kong to enforce authentication and authorisation across every API — supporting OAuth 2.0, OpenID Connect, JWT, mTLS, and API key management out of the box. Advanced rate limiting, IP restriction, bot detection, and secrets management capabilities protect organisations from abuse and data exposure.
Kong's centralised policy engine allows security and platform teams to define and enforce governance rules consistently across thousands of APIs, regardless of where they are deployed. Role-based access control and audit logging support compliance with regulations including APRA CPS 234, ISO 27001, and SOC 2.
Kong by the Numbers
5,000+
Enterprise customers worldwide
75%
Of Fortune 500 use Kong
1T+
API calls processed annually
300+
Available plugins and integrations
Key Enterprise Features
High Performance at Scale
Kong's lightweight, Nginx-based core delivers sub-millisecond latency and horizontal scalability, handling millions of API requests per second without becoming a bottleneck — critical for high-throughput enterprise workloads.
Unified Observability
Native integrations with Prometheus, Grafana, Datadog, Splunk, and OpenTelemetry provide end-to-end visibility across API and service traffic. Kong's analytics dashboards surface latency, error rates, and usage trends in real time.
Hybrid and Multi-Cloud Flexibility
Deploy Kong gateways anywhere — on AWS, Azure, GCP, on-premises data centres, or at the network edge — all managed from a single control plane. Kong decouples your API infrastructure from any single cloud provider.
Developer Portal and API Productisation
Kong Konnect's built-in developer portal allows organisations to publish, document, and monetise APIs internally and externally — accelerating developer onboarding and enabling an API-as-a-product strategy.
Where Kong Delivers Value
API Modernisation
Replace legacy ESBs and monolithic middleware with a lightweight, cloud-native API gateway layer that supports progressive modernisation journeys.
Digital Banking and Open Banking
Secure and expose banking APIs in compliance with the Consumer Data Right (CDR) and open finance mandates, supporting Australia's evolving open banking ecosystem.
Microservices and Kubernetes
Provide ingress control, service-to-service security, and observability across containerised environments running on Kubernetes and hybrid infrastructure.
AI Infrastructure
Govern LLM usage, manage costs across multiple AI providers, and secure AI agent interactions at the infrastructure layer — purpose-built for enterprise AI adoption.
Partner and Ecosystem Integration
Enable secure, governed API exposure to third-party partners, fintechs, and ecosystem participants — with full visibility and policy control from a single platform.
Government and Regulated Industries
Kong's compliance-ready features — including FIPS 140-2 support, audit logging, and data residency controls — make it well suited to financial services, government, healthcare, and telecommunications.
“Kong has become the foundation of our API strategy. The platform's ability to handle massive transaction volumes while giving us the security controls and observability we need has been transformative for our engineering teams.”
Frequently Asked Questions
What is the difference between Kong Gateway (OSS) and Kong Gateway Enterprise?
Kong Gateway open-source provides the core API gateway capabilities available to the community. Kong Gateway Enterprise adds advanced security plugins, RBAC, secrets management, FIPS 140-2 compliance, dedicated support, and the full Konnect management plane — all required for production enterprise deployments.
How does Kong support AI workloads?
Kong AI Gateway provides a dedicated plugin suite for managing LLM and AI API traffic. This includes semantic caching to reduce costs, prompt transformations, multi-provider load balancing across OpenAI, Azure OpenAI, Anthropic, and others, AI rate limiting by token consumption, and full audit logging of AI interactions.
Can Kong be deployed on-premises in Australia?
Yes. Kong Gateway and Kong Mesh can be fully deployed on-premises or within your own private cloud tenancy in Australia, meeting data sovereignty requirements. The Konnect control plane can also be configured to keep data within specific geographic regions.
How does Aquion support customers purchasing Kong?
Aquion provides procurement, licensing, and technical pre-sales support for Kong across Australia and New Zealand. We work with your IT reseller or directly with your organisation to scope the right Kong solution and ensure a smooth path to deployment and ongoing support.
Is Kong suitable for organisations adopting a zero-trust security model?
Absolutely. Kong's mTLS, OIDC, and fine-grained RBAC capabilities align directly with zero-trust principles. Kong Mesh extends these controls to east-west service-to-service traffic, ensuring that no internal API call is implicitly trusted.
Related Vendors
Ready to modernise your API infrastructure with Kong?
Contact Aquion to discuss Kong licensing, deployment options, and how Kong's API and AI gateway platform can accelerate your digital strategy across Australia and New Zealand.