Kong

konghq.com
DevOps
Weekend Project

The API Platform Powering the API World

How to Replace Kong

Overview

Kong is an API platform that enables enterprises to build, run, discover, govern, and monetize APIs and AI connectivity at scale. It provides a unified platform for managing API gateways, AI gateways, LLM interfaces, event streaming, and real-time data connectivity across hybrid and multi-cloud environments.

Features

59 features across 20 categories

AI Connectivity(3)

AI GatewayAIPremium

Unified, secure, reliable, cost-effective multi-LLM interface for AI agents and MCP servers to interact with LLMs across the enterprise

AI Gateway Paid PluginsAIPremium

Advanced AI plugins including AWS Guardrails, Azure Content Safety, Prompt Compressor, RAG Injector, Rate Limiting, Sanitizer, Semantic Cache, and Semantic Prompt Guard

MCP GatewayAIPremium

Design, compose, and run intelligent MCP integration patterns that leverage secure APIs and real-time data as lean, cost-effective tools

API Discovery(2)

Developer PortalPremium

Productize APIs, MCP servers, LLM APIs, and event data as self-service, reusable assets for developers and agents

Service CatalogPremium

Global service catalog for internal teams to discover and manage governed services

Also in: Swagger

API Governance(5)

Consumer GroupsPremium

Define any number of plugin tiers such as rate limiting and apply them to subsets of consumers

Federated API ManagementPremium

Easily organize services and data planes via control planes for isolation based on environment or teams

Plugin OrderingPremium

Declaratively configure the execution order of plugins based on organizational needs

Request ValidationPremium

Validate requests using Kong's schema validator or JSON Schema Draft 4-compliant validator

WorkspacesPremium

Provide isolation and organization of API services and configurations for different teams

API Testing(1)

InsomniaAI

Build an AI trust layer with developer-friendly API and MCP design, testing, and debugging capabilities

Automation(1)

Gateway Event HooksPremium

Auto-logout or send web hooks on gateway changes, such as new admins added or rate limits exceeded

Also in: monday.com, Notion, Airtable

Core Gateway(1)

API Gateway

High-performance API gateway supporting REST, HTTP, gRPC, GraphQL, WebSockets, Kafka, and UDP protocols

Data Processing(1)

Data Transformation

Simple and advanced data transformations including adding/removing headers, JSON manipulation, and query string modifications

Deployment(5)

Dedicated Cloud GatewayPremium

Dedicated cloud gateway control planes deployable across AWS, GCP, and Azure regions

Hybrid GatewayPremium

Hybrid API gateway control planes for on-premises and cloud-hosted deployments

Kubernetes Ingress Controller

Configure Kong Gateway the same way as Kubernetes with Kubernetes native deployment patterns

Multi-Cloud Deployment

Deploy Kong Gateway across cloud, on-prem, and hybrid environments including AWS, GCP, and Azure

Serverless GatewayPremium

Serverless API gateway control planes for scalable deployments

Also in: Kubernetes Dashboard, Hugging Face, Bitwarden

DevOps(3)

CI/CD Integration

Automate the entire API lifecycle as part of CI/CD, GitOps, and Infrastructure as Code strategies

Declarative Configuration

Manage Kong Gateway updates via declarative configuration and CI/CD pipelines

Git Sync

Synchronize API and gateway configurations with Git repositories for version control

Development Tools(1)

API Design & Testing

Design, test, and debug APIs with developer-friendly tools for building the AI fuel that powers applications

Event Streaming(2)

Event GatewayPremium

Expose, secure, and productize event data to fuel AI-powered applications with live data and real-time signals

Kafka IntegrationPremium

Transform requests into Kafka messages and send Kong logs to Kafka

Extensibility(2)

Plugin Development Kit

Build custom plugins to support unique use cases and extend Kong Gateway functionality

Plugin System

Highly extensible plugin system with out-of-the-box security, authentication, transformation, and analytics plugins

Management(2)

Admin GUIPremium

Visually manage runtimes, plugins, APIs, and consumers through a web interface

Kong ManagerPremium

Self-managed control plane manager for administrative tasks and configuration

Monetization(1)

Metering & BillingPremium

Monetize agents, APIs, LLMs, MCP servers, event data, and more with managed metering and billing

Monitoring & Analytics(3)

API AnalyticsPremium

Real-time visibility into all APIs and gateway performance with advanced analytics and request tracking

ObservabilityPremium

Stand-up cross platform observability, compliance guardrails, cost governance, and control mechanisms for every point of AI connectivity

OpenTelemetry SupportPremium

Manage the collection and sampling of tracing information for observability

Protocol Support(2)

GraphQL SupportPremium

Convert GraphQL queries to REST requests and rate limit and cache GraphQL queries

Multi-Protocol SupportPremium

Support for wide range of protocols including REST, gRPC, GraphQL, WebSockets, UDP, SOAP and Kafka

Reliability(1)

Data Plane ResiliencePremium

In case of control plane failure, new data plane nodes can boot by reading config files from S3-compatible storage

Security & Compliance(16)

ACME Certificate Management

Manage ACME certificates for secure API connectivity

Advanced AuthenticationPremium

Full OAuth 2.0, OpenID Connect, Vault, Mutual TLS, JWT Signing/Resigning, SAML2.0, JWE Decrypt, and full LDAP support

Advanced Authorization (OPA)Premium

Control access to APIs with complex, programmable, enterprise-wide rules using Open Policy Agent

API Security Shift Left

Shift API security left and right through automated API security checkpoints in CI/CD pipeline

Audit LoggingPremium

Maintain detailed cluster config records for enhanced security, compliance, debugging, and risk management

Basic Authentication

Common API authentication methods including Basic Auth, HMAC, JWT Key Auth, limited OAuth 2.0, and limited LDAP

Bot Detection & CORS Controls

Basic authorization controls for bot detection, CORS management, and access control lists

Domain Capture and ControlPremium

Domain capture and lock with invite control for organizational security

End-to-End Encryption

E2EE encryption for secure data transmission in API calls

FIPS 140-2 CompliancePremium

Configure Kong Gateway core in a FIPS 140-2 compliant mode for regulated environments

Native Vault IntegrationPremium

Native integrations with vault solutions including AWS, GCP, Hashicorp, and Azure

Role-Based Access Control (RBAC)Premium

Control gateway configurations and API access based on user roles in the organization

SCIM IntegrationPremium

System for Cross-domain Identity Management integration for user provisioning

Secret Management IntegrationPremium

OOTB integration with 3rd party secret management tools like Hashicorp Vault, AWS Secret Manager, GCP Secrets Manager

Software Bill of MaterialsPremium

Visibility into the inventory of all software components (proprietary and open source), licenses, and dependencies

SSO (SAML/OIDC)Premium

Single Sign-On support with SAML and OIDC protocols for enterprise identity management

Testing(3)

Gateway MockingPremium

Mock API responses directly on the API gateway for testing and development

Inso CLI

Command-line interface for CI/CD automation and API testing

Mock Server Requests

Mock API server requests for testing and development purposes

Traffic Management(4)

Advanced Rate LimitingPremium

Advanced rate limiting with sliding window controls for enterprise deployments

Caching

Lightweight caching capabilities for improved API performance

Rate LimitingPremium

Enterprise-grade rate limiting with sliding window controls and configurable limits

Routing EnginePremium

New routing engine to configure Routes using Expressions for handling complex routing requests

Pricing

Kong Konnect Free Trial

Free for 30 days
  • Self-guided tour of Kong Konnect platform
  • No gateway limits
  • Analytics retained for 30 days
  • No credit card required

Kong Konnect Plus

Charged per Gateway per month, bill monthly
  • Up to 5 Serverless Gateways
  • Up to 2 Hybrid Gateways
  • Up to 2 Dedicated Cloud Gateways
  • Support for REST APIs, HTTP APIs, LLMs, Kafka, WebSockets, gRPC, GraphQL
  • Up to 2 Developer Portals
  • Up to 20 published APIs in Developer Portal
  • Service Catalog support for 2 services
  • Up to 10 premium services during early access
  • Advanced analytics for 1M API requests/month
  • 10M requests/month stored
  • RBAC
  • Email support with 2-business-day SLA
  • Kong Academy training

Kong Konnect Enterprise

Popular
Custom pricing billed annually
  • Everything in Plus, plus:
  • No Gateway limits
  • Unlimited Hybrid Gateways
  • Unlimited Dedicated Cloud Gateways
  • Fully self-hosted API Gateways
  • Unlimited Developer Portals
  • Unlimited published APIs
  • Enhanced Service Catalog governance
  • Unlimited Services in Service Catalog
  • No premium service limits
  • Enterprise-grade API platform security
  • Audit Logs
  • SSO
  • Dedicated customer-specific training
  • Dedicated Proof of Concept with Kong team
  • Dedicated Customer Success Managers
  • Dedicated Technical Account Managers
  • Professional services and migration support
  • Higher SLAs

Insomnia Essentials

$0 per user/month
  • Unlimited Git Sync projects for up to 3 users
  • Unlimited Cloud/Local projects for all users
  • Access to Inso CLI for CI/CD automation
  • Unlimited collection runs
  • Unlimited environments
  • 1,000 mock server requests per month
  • End-to-end encryption (E2EE)
  • Unlimited access to plugins or build your own
  • Optional add-ons available

Insomnia Pro

$12 per user/month (save 15% with annual billing)
  • Everything in Essentials, plus:
  • Unlimited users
  • All users have access to Git Sync projects
  • Unlimited organizations
  • Role-based access control (RBAC)
  • 10,000 mock server requests per month
  • Optional add-ons available

Insomnia Enterprise

$45 per user/month (self-serve up to 50 users)
  • Everything in Pro, plus:
  • SSO (SAML/OIDC) and SCIM
  • Mandate where projects are stored (local, git, or cloud)
  • Domain capture/lock and invite control
  • Enterprise support
  • Access to SOC2 compliance and latest security testing results
  • Native vault integrations including AWS, GCP, Hashicorp, and Azure
  • Unlimited mock server requests
  • Custom payment options
  • Optional add-ons available
  • Kong professional services to help get started quickly

Cost Calculator

Keep Paying Kong

Monthly$12/mo
Yearly$144/yr
5-Year Total$720

Build It Yourself

Est. Build Time~4 hrs
Hosting$20/mo
DifficultyVery Easy

Total Cost Comparison

1 Year
SaaS
$144
DIY
$240
3 Years
SaaS
$432
DIY
$720
5 Years
SaaS
$720
DIY
$1.2k

DIY hosting estimate based on Vercel + Supabase free/pro tiers (~$20/mo). Build time estimated from 59 features at very easy complexity.

Build vs Buy

Should you build a Kong alternative or buy the subscription? Estimate based on 59 features.

Buy Kong

Better Value
Monthly cost$120/mo
3-year total$4,320
Time to deployDays

Build Your Own

Development cost$36,000
Maintenance$540/mo
3-year total$55,440
Dev time~3 months

Buying Kong saves ~$51,120 over 3 years vs building.

Estimates based on 59 features and a BuildScore of 5/5. Actual costs vary.

Integrations

8 known integrations

AWSAWS Secret ManagerAzureGCPGCP Secrets ManagerHashicorp VaultKubernetesOpenTelemetry