Skip to content

Kong

Application Security

Kong is a category-defining, profitable API infrastructure and security company with $100M+ ARR and five consecutive years as a Gartner Magic Quadrant Leader, making it an incumbent choice for enterprise API security and governance.

Visit Website ↗ + Add to Compare Claim This Company
73/100Incumbent

Innovation Matrix Assessment

Innovation Velocity 6/10

Open-source API gateway pioneer now extending into AI Gateway for LLM traffic -- a solid, iterative evolution of its core platform.

Operational Value 9/10

$100M+ ARR, profitable, and 700+ enterprise customers including GSK, PayPal and NYSE.

Market Momentum 7/10

$175M Series E at a $2B valuation, with five consecutive years as a Gartner Magic Quadrant Leader for API management.

Category Disruption 6/10

Helped establish the API gateway/API security layer as a distinct piece of enterprise infrastructure.

Real-World Efficacy 8/10

Profitability, named enterprise customers, and sustained independent analyst recognition (Gartner MQ Leader) are strong efficacy signals.

Enduring Relevance 8/10

API security is durably critical as API surface area keeps expanding, especially with AI/LLM traffic growth.

Why CISOs Should Care

A CISO responsible for API governance and security across a large services estate would use Kong's gateway and AI Gateway to centrally enforce authentication, rate limiting, and traffic policy across every API and, increasingly, every AI/LLM endpoint.

What Makes It Different

Kong built its dominant position from an open-source API gateway core, giving it broad developer adoption before monetizing enterprise security/governance features -- a bottom-up distribution model many API-security challengers lack.

The Matrix Verdict

73/100 — INCUMBENT

Kong is a category-defining, profitable API infrastructure and security company with $100M+ ARR and five consecutive years as a Gartner Magic Quadrant Leader, making it an incumbent choice for enterprise API security and governance.

Editorial Note: Claims vs. Verified Findings

ARR and customer-count figures are company-reported; employee count is estimated.

Sources

Alternatives to Kong

83 /100

ThreatLocker

CISO Reviewed

Zero Trust endpoint protection platform that blocks unknown applications by default through allowlisting, ringfencing, and storage control.

Meaningful Innovator Application Security
83 /100

Endor Labs

Reachability-based software composition analysis that filters open-source dependency risk down to what code paths are actually exploitable.

Meaningful Innovator Application Security
82 /100

Socket

A software supply chain security platform that combines automated dependency analysis with human verification to catch malicious and…

Meaningful Innovator Application Security
82 /100

JFrog

Public software supply chain security platform (Xray plus Advanced Security) that scans binaries and artifacts end-to-end from the…

Meaningful Innovator Application Security
82 /100

Apiiro

Builds a continuous 'code risk graph' that maps code, developers, and cloud deployment to prioritize AppSec findings by…

Meaningful Innovator Application Security
78 /100

ArmorCode

Tool-agnostic ASPM layer that correlates findings from 300+ existing security tools into one prioritized backlog, without running its…

Meaningful Innovator Application Security