Kong
A San Francisco API infrastructure company, a five-time Gartner Magic Quadrant Leader, extending its API gateway into an AI Gateway for LLM traffic governance.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Kong, founded in 2009 and headquartered in San Francisco, built a dominant position in API infrastructure from an open-source API gateway core, earning broad developer adoption before monetizing enterprise security and governance features on top — a bottom-up distribution model many newer API-security challengers lack. Its gateway and AI Gateway products let a CISO centrally enforce authentication, rate limiting, and traffic policy across every API and, increasingly, every AI/LLM endpoint in a large services estate.
Kong raised $175 million in its Series E at a $2 billion valuation, and the company now reports more than $100 million in annual recurring revenue alongside five consecutive years as a Gartner Magic Quadrant Leader for API management — independent, repeated analyst validation that puts Kong in an incumbent position for enterprise API security and governance.
Innovation Matrix Assessment
Open-source API gateway pioneer now extending into AI Gateway for LLM traffic -- a solid, iterative evolution of its core platform.
$100M+ ARR, profitable, and 700+ enterprise customers including GSK, PayPal and NYSE.
$175M Series E at a $2B valuation, with five consecutive years as a Gartner Magic Quadrant Leader for API management.
Helped establish the API gateway/API security layer as a distinct piece of enterprise infrastructure.
Profitability, named enterprise customers, and sustained independent analyst recognition (Gartner MQ Leader) are strong efficacy signals.
API security is durably critical as API surface area keeps expanding, especially with AI/LLM traffic growth.
Why CISOs Should Care
A CISO responsible for API governance and security across a large services estate would use Kong's gateway and AI Gateway to centrally enforce authentication, rate limiting, and traffic policy across every API and, increasingly, every AI/LLM endpoint.
What Makes It Different
Kong built its dominant position from an open-source API gateway core, giving it broad developer adoption before monetizing enterprise security/governance features -- a bottom-up distribution model many API-security challengers lack.
The Matrix Verdict
73/100 — INCUMBENT
Kong is a category-defining, profitable API infrastructure and security company with $100M+ ARR and five consecutive years as a Gartner Magic Quadrant Leader, making it an incumbent choice for enterprise API security and governance.
Editorial Note: Claims vs. Verified Findings
ARR and customer-count figures are company-reported; employee count is estimated.
Sources
Alternatives to Kong
Endor Labs
Reachability-based software composition analysis that filters open-source dependency risk down to what code paths are actually exploitable.
JFrog
Public software supply chain security platform (Xray plus Advanced Security) that scans binaries and artifacts end-to-end from the…
Apiiro
Builds a continuous 'code risk graph' that maps code, developers, and cloud deployment to prioritize AppSec findings by…
Socket
A software supply chain security platform that combines automated dependency analysis with human verification to catch malicious and…
ThreatLocker
CISO ReviewedZero Trust endpoint protection platform that blocks unknown applications by default through allowlisting, ringfencing, and storage control.
ArmorCode
Tool-agnostic ASPM layer that correlates findings from 300+ existing security tools into one prioritized backlog, without running its…