December 2025 Summaries

In 2025, Kong experienced a transformative year marked by significant advancements in AI connectivity, spurred by widespread enterprise adoption of agentic systems and the introduction of the AI Gateway pattern to tackle fragmented AI infrastructure. This innovation provided a unified layer for managing token budgets, enhancing security, and accelerating workloads, helping organizations navigate the complexities of AI integration. Kong expanded globally, opening new offices and securing $175M in Series E funding, which fueled its growth and elevated its market valuation to $2B. The company released numerous product updates, including enhancements to Kong AI Gateway, MCP Gateway, and the debut of Kong Identity, boosting API management and AI integration capabilities. Kong also acquired OpenMeter to enable real-time usage and flexible pricing for APIs and agents, addressing the economics of AI connectivity as enterprise adoption surged, with 90% of companies embracing AI agents. The year culminated in the API Summit 2025 in New York City, celebrating industry innovators and showcasing Kong's pivotal role in powering the future of intelligent connectivity, further affirmed by its recognition as a Leader in the Gartner Magic Quadrant for API Management.

Kong is evolving from its origins as an API management platform to address the emerging needs of AI connectivity, focusing on the integration and management of AI traffic through a new layer of connectivity designed for hypervolumes. This transition reflects a shift from traditional API calls to a landscape dominated by AI agents and token-based interactions, necessitating infrastructure that supports real-time data processing and governance at unprecedented scales. As the demand for AI connectivity increases, Kong aims to provide secure, efficient, and scalable solutions that facilitate the movement of intelligence across diverse systems, positioning itself as a critical player in the age of AI connectivity by developing the digital "railroads" necessary for businesses to thrive in this new era. The company leverages its experience in building cloud-native applications to anticipate and meet the challenges posed by the rapid expansion of AI technologies, ensuring that enterprises can manage and accelerate their AI-driven operations with the same principles of performance, security, and reliability that have characterized its previous offerings.

Kong's latest innovation, Konnect Metering & Billing, aims to transform AI from a costly endeavor into a profitable business component by integrating metering, billing, and cost governance within the Kong Konnect platform. This tool addresses the challenges enterprises face with AI costs, such as the inability to track or control spending, by providing real-time visibility and usage enforcement at the connectivity layer. It enables companies to monetize AI products effectively by supporting various pricing models, managing API and AI resource consumption, and integrating seamlessly with existing ERP and billing systems. By unifying metering, billing, and governance across AI and APIs, organizations can optimize their financial operations (FinOps) strategies, ensuring AI is treated with the same business rigor as other SaaS offerings, ultimately driving better unit economics and margin accountability.

Kong Gateway 3.13 introduces several enhancements aimed at simplifying API management and improving observability and security, including expanded OpenTelemetry support, cloud-native authentication, and advanced orchestration capabilities through the Datakit plugin. The update consolidates metrics, logs, and traces into a unified OpenTelemetry plugin, reducing maintenance overhead and improving system reliability. Kong Konnect and Cloud Gateways have achieved PCI DSS 4.0 attestation, ensuring compliance with rigorous security standards for industries handling cardholder data. Gateway 3.13 also fully integrates cloud Identity Access Management solutions and supports JSON Web Token authentication with self-managed HashiCorp Vault. New node types in the Datakit Flow editor facilitate sophisticated workflow construction, including XML to JSON translation, catering to hybrid application needs. These features are available on the Kong Konnect SaaS platform and can be downloaded for self-hosted environments, offering improved deployment efficiency and system visibility.

Kong AI Gateway 3.13 introduces significant updates to enhance the robustness and security of AI infrastructure, facilitating the transition from AI experimentation to production-grade agent deployments. The release includes improvements in tool-level access controls, load balancing, and provider support, catering to demands for high availability, low-latency scaling, and resilience in AI systems. New features such as native circuit-breaker support and enhanced semantic load balancing ensure traffic management and prevent failures, while integrations with Lakera.ai guardrails offer enhanced safety and compliance without requiring code changes. The platform now supports multiple new providers, including Anthropic, xAI, Aliyun, and Cerebras, making it a multi-cloud, multi-model solution that accommodates diverse needs in cost, compliance, and performance. With these enhancements, Kong AI Gateway positions itself as a comprehensive solution for managing complex, real-time, and multi-modal AI workflows, ensuring safety, compliance, and efficient operations across diverse environments.

In 2025, Kong Cloud Gateways experienced significant growth and advancements, becoming a crucial platform for managing API and AI traffic. With a focus on modernizing architectures and enhancing security, Kong expanded its capabilities by introducing new deployment models and extending its services to Google Cloud Platform, alongside existing AWS support. This expansion included achieving SOC 2 compliance, enhancing private connectivity options through VPC Peering and Private DNS, and introducing AWS Resource Endpoints for improved network isolation. The introduction of Custom Plugin Streaming facilitated easier management of custom logic, while a major reliability milestone of a 99.99% SLA underscored the platform's operational maturity. Additionally, enhanced real-time dataplane logging improved visibility and troubleshooting for customers. The achievement of PCI DSS 4.0 attestation further positioned Kong as a trusted choice for enterprises in regulated industries, enabling secure and compliant API management. These developments reflect Kong's commitment to supporting the future of digital platforms with high-performance, flexible, and secure API infrastructure.

Kong Konnect, a unified API and AI platform, has been recognized as a winner in the API Management category of Foundry Co.'s InfoWorld Technology of the Year Awards 2025, highlighting its innovative approach to software development, DevOps, cloud, data management, and AI/ML. The platform excels in accelerating deployments, reducing vulnerabilities, and enhancing real-time visibility by unifying APIs, AI services, event streams, and microservices under a single secure control plane, thereby transforming how organizations manage connectivity and governance. As the world of APIs rapidly evolves with the rise of agentic AI, Kong Konnect addresses the complexities of distributed data sources, multiple AI models, and autonomous workflows, providing a robust foundational layer for AI-driven products. This recognition underscores Kong Konnect's role in facilitating efficient onboarding, minimizing operational risks, and enabling the safe scaling of AI-powered services, as noted by InfoWorld Executive Editor Doug Dineley, who emphasizes the platform's practical application of AI for enterprise innovation.

The evolution of intelligent agents and AI prompts is transforming APIs from basic infrastructure into the core of a new ecosystem-led growth model, driven by the demands of the agentic era. Enterprises are now focusing on strategic API governance, enhancing developer experience, and building scalable infrastructures to handle the anticipated surge in agent-driven API traffic. APIs have become crucial to the seamless digital experiences we rely on daily, facilitating interconnected workflows in various applications from ride-sharing to financial record synchronization. As the digital economy shifts from product-led to ecosystem-led growth, APIs are emerging as essential enablers, allowing third-party developers to innovate and expand markets in ways previously unimaginable. This transformation demands a new mindset in API strategy, emphasizing the importance of governance, structured validation, and developer engagement to ensure stability and scalability. As AI adoption grows, the role of APIs will become even more critical, serving as the backbone of intelligent systems that connect and create value, thus heralding the rise of the agentic internet.

In the rapidly evolving messaging and data streaming industries, the acquisition of a platform like Apache Kafka by a competitor can introduce significant challenges such as uncertainty, budgetary risks, and technical difficulties. These changes can affect service reliability, operational stability, and lead to potential vendor lock-in. The Kong unified API platform offers a solution by acting as an abstraction layer, which provides control, flexibility, and stability during such transitions. By decoupling event producers and consumers from the backend infrastructure, Kong allows businesses to maintain operational continuity and reduce migration risks without code modifications. It facilitates a vendor-agnostic architecture, enabling seamless transitions to different infrastructures and preventing disruptions associated with acquisitions. Kong's capabilities include consistent API management, centralized security, and advanced traffic control, which help safeguard event-driven architectures and ensure smooth, zero-downtime migrations. This approach not only addresses immediate post-acquisition challenges but also sets the stage for a resilient multi-cloud data streaming strategy, ensuring long-term flexibility and independence from single-vendor constraints.

Companies are rapidly embracing AI, but this enthusiasm is tempered by significant challenges, such as shadow AI, escalating costs, and security issues. Many organizations are adopting AI agents, yet the lack of centralized governance and unclear accountability lead to operational inefficiencies and security risks, as seen with companies like H&M. The readiness of APIs for AI integration is another hurdle, with missing specifications and inconsistent design posing additional challenges. Companies like Prudential and SeatGeek are addressing these issues by refactoring applications and implementing centralized request validation to control costs and improve security. Effective AI governance also involves bridging communication gaps between technical teams and emphasizing education and change management. Organizations are learning that proactive governance, cost control, and security measures need to be foundational rather than reactive, with centralized systems like the Kong AI Gateway playing a crucial role in managing AI deployment securely and efficiently.

The blog post delves into the Model Context Protocol (MCP) and its integration with Kong's AI Gateway to streamline the interaction between AI agents and enterprise systems. It highlights the role of MCP in managing data flow to prevent information overload in AI systems, allowing for standardized and efficient data processing. The Kong Gateway 3.12 release introduces several MCP capabilities, including the AI MCP Proxy and OAuth2 plugins, to facilitate secure and seamless communication between MCP clients and servers. These plugins enable the conversion of existing Kong Gateway services into MCP tools, providing real-time visibility, reducing vulnerabilities, and supporting advanced agentic patterns such as multi-step workflows and contextual enrichment. The article also discusses the architecture of MCP, detailing its client-server model and the transport mechanisms based on JSON-RPC 2.0, such as Stdio and Streamable HTTP. The integration of security measures like OAuth2 ensures that MCP tool endpoints remain protected, further enhancing the scalability and reliability of AI deployments. The post encourages exploring Kong’s flexible plugin ecosystem and its partnership with AWS to build secure and scalable MCP-enabled architectures.