API gateway, management layer, analytics, developer portal, security policies for financial data, multi-region deployment, and compliance features for financial regulations including PSD2 and Open Banking.
Systems for developing, managing, securing, and monitoring APIs that connect banking systems internally and with external partners.
More API Management
More IT and Infrastructure ...
|
OAuth 2.0 Support Ability to use OAuth 2.0 protocol for secure authorization. |
Kong Enterprise documentation confirms OAuth 2.0 support for securing APIs. | |
|
API Key Management Supports creation, issuance, and life-cycle management of API keys. |
API key management, creation, and rotation features are native in Kong Enterprise. | |
|
IP Whitelisting/Blacklisting Enable or restrict API access based on user IP addresses. |
Kong provides plugins for IP whitelisting and blacklisting API requests. | |
|
Rate Limiting Limits the number of requests a client can make to avoid abuse. |
Rate limiting is a core plugin and standard feature in Kong. | |
|
Throttling Ability to control bandwidth and request frequency. |
Throttling supported as part of traffic control and rate limiting plugins. | |
|
Data Encryption Supports encryption of data in transit and at rest (e.g., TLS, HTTPS). |
Kong supports TLS/HTTPS and encrypts data in transit and at rest. | |
|
JWT (JSON Web Token) Validation Capability to validate JWTs for API access management. |
JWT validation is provided via official Kong JWT plugin. | |
|
Audit Trails Tracks and stores all API access and activity logs for compliance and debugging. |
Audit logs and trails are part of Kong Enterprise for compliance and debugging. | |
|
DDoS Protection Protection mechanisms against Distributed Denial of Service attacks. |
Cloud native DDoS prevention and integrations supported in multi-region deployments. | |
|
Mutual TLS (mTLS) Supports mutual TLS authentication to secure API connections. |
Mutual TLS authentication (mTLS) is supported and documented for enterprise deployments. | |
|
Access Control Lists (ACLs) Ability to define detailed access permissions for API consumers. |
Access Control Lists (ACLs) provided as a Kong plugin. | |
|
Security Patch Management Automated updates for emerging threats and vulnerabilities. |
Kong regularly updates its security plugins and supports external patch management integrations. | |
|
Regulatory Compliance Certifications Supports and maintains compliance (e.g., PCI DSS, PSD2, GDPR) for financial data and operations. |
Regulatory compliance, including PCI DSS, PSD2, and GDPR, featured in product marketing and documentation. |
|
Request Routing Routes incoming API requests to appropriate backend services. |
Request routing is a fundamental capability of the Kong API Gateway. | |
|
API Aggregation Combines multiple API calls into a single request/response. |
API aggregation is enabled through plugins and custom configuration. | |
|
Caching Caches API responses to reduce backend load and latency. |
Caching for APIs is available using Kong's proxy caching plugin. | |
|
Load Balancing Distributes incoming API traffic among multiple backends. |
Load balancing is a core gateway function and documented as supported. | |
|
Protocol Transformation Converts between different protocols (e.g., REST, SOAP, gRPC). |
Supports transformation between REST, gRPC and supports plugins for protocol conversion. | |
|
Content-Based Routing Routes requests based on content type or header values. |
Content-based routing implemented via plugins and routing rules. | |
|
URL Rewriting Ability to rewrite request URLs on the fly for routing efficiency. |
URL rewriting is supported in routing configuration and plugins. | |
|
Failover Support Automatic rerouting of traffic in case of backend failure. |
Failover support provided by Kong via health checks and load balancer settings. | |
|
Timeout Configuration Customizable timeouts for upstream requests. |
Timeout configuration available via route and service configuration. | |
|
API Mocking Ability to simulate API responses during development and testing. |
API mocking is available via Kong Insomnia for development/testing. | |
|
Advanced Traffic Shaping Customizable traffic shaping rules for granular control. |
Traffic shaping is possible with advanced routing and rate limiting plugins. |
|
Interactive API Documentation Auto-generated documentation with try-it-out features (e.g., Swagger, OpenAPI). |
Kong's Dev Portal provides auto-generated interactive API documentation (OpenAPI/Swagger). | |
|
API Sandbox Environment Safe, limited test environment for developer experimentation. |
API sandbox environments are a feature for developers in Kong Enterprise. | |
|
Self-Service Portal Portal for onboarding, documentation access, and API key management. |
Self-service onboarding, API keys, and documentation are offered via the Kong Dev Portal. | |
|
SDK Generation Automated creation of SDKs in multiple languages for developers. |
SDK generation and code scaffolding is supported through API documentation tooling. | |
|
Code Samples Includes quick-start code samples for faster developer onboarding. |
Code samples available in documentation and developer portal. | |
|
Comprehensive Error Codes Clear and consistent error messages with codes and explanations. |
Comprehensive error codes and explanations are documented for API responses. | |
|
Change Log Communication Automated notifications on API updates and version changes. |
Change logs and update notifications provided via developer portal and email alerts. | |
|
API Subscription Management Supports subscription plans for API access levels. |
API subscription management is supported for plans/tiers in the dev portal. | |
|
End-to-End Testing Tools Supports thorough testing across API endpoints. |
End-to-end API testing supported, notably through Kong Insomnia. | |
|
API Usage Analytics for Developers Provides developers with real-time metrics for their API usage. |
Developer analytics and real-time metrics are integrated into the portal. | |
|
Support Ticketing Integration Integrated support system for technical queries and issues. |
Kong supports support ticketing integration with enterprise plans. |
|
Real-Time Traffic Monitoring Provides live data on API usage metrics and performance. |
Real-time traffic monitoring and dashboards are built-in and can integrate with external tools. | |
|
Request Latency Tracking Measures and reports time taken to process API requests. |
No information available | |
|
Error Rate Monitoring Tracks percentage of API requests resulting in errors. |
No information available | |
|
Health Checks Automated and on-demand status checks for API endpoints. |
Automated and on-demand health checks are configurable in routing. | |
|
Custom Dashboards User-configurable dashboards for monitoring APIs. |
Users can create custom dashboards for usage and performance in Kong Manager. | |
|
Historical Data Retention Duration for retaining historical API usage and performance data. |
No information available | |
|
Integration with External Monitoring Tools Supports integration with platforms like Splunk, Grafana, Datadog. |
Integration with Grafana, Datadog, and more is documented and supported. | |
|
Alert Notification System Sends alerts for threshold breaches and downtime. |
Alerting systems for thresholds and downtime are included in Enterprise edition. | |
|
Log Export and Archival Export logs for long-term storage and regulatory compliance. |
Log export, integrations, and archival for compliance are available. | |
|
Anomaly Detection Automatic detection of unusual API behavior. |
Anomaly detection can be integrated and built on top of analytics data. | |
|
SLAs and Uptime Reporting Service Level Agreement and uptime tracking for each API. |
Uptime SLAs and reporting are offered in multi-region deployments for enterprises. |
|
Support for Multiple API Protocols REST, SOAP, WebSockets, gRPC compatibility. |
Kong supports REST, gRPC, WebSockets, and other protocols. | |
|
Enterprise Service Bus Integration Compatible with ESB solutions for orchestration and mediation. |
ESB integration possible; connectors and documentation for orchestration. | |
|
Legacy System Connectors Connects easily with mainframes and legacy banking systems. |
Legacy system integration documented for large enterprises and banks. | |
|
Third-party Integration Marketplace Pre-built integrations with common fintech and regtech services. |
Marketplace of third-party integrations at konghq.com and official plugins present. | |
|
Event Streaming Support Supports event-driven architectures (e.g., Kafka, MQ). |
Event streaming (Kafka, MQ) supported via open source and commercial plugins. | |
|
API Orchestration Capability Orchestrates multiple APIs and business processes. |
API process orchestration described in documentation. | |
|
Standard Data Format Support Understands and processes JSON, XML, CSV, and more. |
Standard formats such as JSON, XML, CSV are supported in API traffic. | |
|
Multi-Cloud Support Deployable on different cloud platforms and hybrid architectures. |
Multi-cloud and hybrid deployments are key selling points for Kong Enterprise. | |
|
Service Discovery Integration Integrates with service registries (e.g., Consul). |
Service discovery integration available with Consul and others. | |
|
API Versioning Manages and routes multiple versions of APIs seamlessly. |
API versioning support is documented. | |
|
BPM/Workflow Engine Integration Interoperates with business process management tools. |
BPM/workflow integration supported via APIs and connectors. |
|
Horizontal Scalability Ability to add nodes and balance load automatically. |
Kong inherently supports horizontal scaling in cloud deployments. | |
|
High Availability Architecture Redundant components and failover to maximize uptime. |
High-availability architecture (HA) deployments are officially supported. | |
|
Throughput Capacity Total number of API requests handled per second. |
No information available | |
|
Load Testing Tools Includes tools for stress and performance testing APIs. |
Load testing tools are available and there is guidance for use with Kong. | |
|
Auto-Scaling Policies Automatic scaling based on real-time demand. |
Auto-scaling is supported in Kubernetes/cloud deployments. | |
|
Geo-Distributed Deployments Supports deployments across multiple geographic locations. |
Can deploy Kong nodes in multiple regions/geographies as documented. | |
|
Low Latency Processing Optimized to minimize request/response latency. |
Low-latency event processing emphasized in marketing and benchmarks. | |
|
Concurrent Connection Limits Maximum number of simultaneous client connections supported. |
No information available | |
|
Session Persistence Ability to maintain session/state across distributed systems. |
Session persistence available via plugins and Kong's distributed architecture. | |
|
Fast Failover and Recovery Quickly re-routes traffic on failure for uninterrupted service. |
Failover and recovery capabilities documented and implemented in HA designs. |
|
API Design Tools User-friendly tools for designing APIs (specifications, linting, etc). |
Kong Insomnia provides API design tools for specification, linting, and collaboration. | |
|
Automated Deployment Pipelines CI/CD pipelines for consistent API release processes. |
Automated deployment pipelines and integrations with CI/CD are documented in enterprise features. | |
|
Version Control Tracks changes and rollbacks for API definitions and implementations. |
Version control of APIs supported via integrations and design portal. | |
|
Lifecycle Stages Tracking Defines and manages API states: development, testing, production, deprecated. |
API lifecycle states are tracked in the platform (dev/test/prod). | |
|
Deprecation and Sunset Policy Enforcement Controlled migration paths and communication for deprecated APIs. |
API deprecation and sunset policies are configurable. | |
|
Change Management Logging Monitors changes and notifies stakeholders. |
Change management and logging are available for auditing and compliance. | |
|
Automated Testing Integration Integrates with automated test frameworks. |
Automated testing frameworks integration available via Kong Insomnia and third-party tools. | |
|
Approval Workflows Multi-step approval for API publishing or promotion. |
Approval workflows can be implemented via integrations and policy settings. | |
|
Rollback Mechanism Quickly revert to previous stable versions. |
Rollback mechanisms for API definitions/versions and deployments are documented. |
|
Audit Logging Comprehensive, immutable records of every API activity. |
Audit logging is a compliance and operational feature in Kong Enterprise. | |
|
Privacy Controls Strict controls for personal and sensitive data processing. |
Privacy controls are configurable for sensitive data. | |
|
GDPR Compliance Supports mechanisms for data rights and protection under GDPR. |
GDPR compliance and features are highlighted for EU/financial deployments. | |
|
PCI DSS Support Meets requirements for processing and storing payment card data. |
PCI DSS support is explicitly stated for financial data in marketing materials. | |
|
PSD2/Open Banking Readiness Supports open banking standards and frameworks. |
PSD2/Open Banking readiness is a differentiator for Kong in financial services. | |
|
Consent Management Tracks and enforces customer consent for data sharing. |
Consent management features supported for open banking and other regulatory use cases. | |
|
Data Residency Controls Enforces policies on where data can be physically stored. |
Data residency controls configurable per deployment location and policy. | |
|
Retention & Deletion Policies Automates retention and deletion per regulatory timelines. |
Retention and deletion policies are supported for data lifecycle and compliance. | |
|
Automated Compliance Reporting Generates reports to demonstrate compliance. |
Automated compliance reporting documented for audit and regulatory needs. |
|
Role-Based Access Control (RBAC) Granular user permissions based on assigned roles. |
RBAC is a core feature for user and admin access. | |
|
Single Sign-On (SSO) Integration with enterprise authentication solutions. |
SSO and third-party enterprise authentication integrations available. | |
|
Multi-Factor Authentication (MFA) Enforces strong two-factor user verification. |
Multi-factor authentication (MFA) integrations are supported. | |
|
User Provisioning Automation Automated creation, update, and deactivation of user accounts. |
User provisioning can be automated via APIs and integrators. | |
|
Delegated Administration Allows specific user groups to manage access. |
Delegated administration available through role and group configuration. | |
|
Session Management Controls and monitors user session durations and activity. |
Session management and monitoring are built into Kong Enterprise. | |
|
Access Review and Recertification Periodic verification of user access rights. |
Periodic access reviews can be configured via integrations and policy automation. | |
|
External User Federation Allows federated login for third-party or partner users. |
External user federation is available for partners and external users (SAML, OIDC, etc). | |
|
Entitlement Management Assign and manage granular entitlements to users. |
Entitlement management enabled through RBAC and API management features. |
|
Zero-Downtime Upgrades Ability to patch or upgrade system components without impacting users. |
Zero-downtime upgrades supported for HA deployments. | |
|
Automated Backups Schedules and manages regular backups. |
Automated backups are supported by infrastructure and deployment scripts. | |
|
Disaster Recovery Support Failover and restore processes for high system resilience. |
Disaster recovery processes supported in enterprise documentation. | |
|
Rollback Capabilities Quick reversion to previous system states after failed changes. |
Rollback capabilities for platform and config management supported. | |
|
Remote Management API API for managing infrastructure remotely. |
Remote management APIs are available for administration and orchestration. | |
|
Automated Configuration Management Tools for managing configuration drifts and automating changes. |
Configuration management, drift detection, and automation available via CLI, REST API, and integrations. | |
|
Self-Healing Mechanisms Automated corrective actions for detected failures. |
Self-healing mechanisms are possible via Kubernetes and orchestration integration. | |
|
Maintenance Window Scheduling Automated notifications and controls for system maintenance. |
Maintenance window scheduling and notifications supported through integrations. |
|
Usage-Based Billing Support Cost tracking for internal/external API use, supporting chargebacks. |
Usage-based billing integrations supported for API monetization. | |
|
Quota Management Enables the enforcement of usage quotas for users/applications. |
API and usage quota management available as native feature. | |
|
Cost Analytics and Forecasting Provides insights and trends in API-related expenses. |
Cost analytics and trend reporting covered in enterprise analytics suite. | |
|
Budget Alerting Sends notifications if API usage approaches or exceeds budget. |
Budget alerting possible via monitoring and webhook notifiers. | |
|
Resource Optimization Recommendations Suggests ways to optimize API and infrastructure usage. |
Optimization recommendations available via partner integrations and analytics. | |
|
Granular Cost Allocation Assigns costs to departments, projects, or teams. |
Granular cost allocation supported via usage tracking and reporting. | |
|
License Management Tracks feature/component licensing and compliance with agreements. |
License management integrations available for software usage tracking. | |
|
Pay-as-you-go Support Ability to implement flexible pricing models based on real usage. |
Pay-as-you-go and flexible billing support is documented for cloud and on-prem. |
Software for creating, publishing, maintaining, and monitoring APIs that connect different systems within the brokerage and with external partners and clients.
More API Management Platforms
More IT and Infrastructure ...
|
Graphical API Designer Visual tools for designing APIs using drag-and-drop or similar graphical interfaces. |
Not as far as we are aware.* Kong Enterprise does not have a native graphical drag-and-drop API designer; API design is managed via YAML/JSON and declarative configuration. | |
|
OpenAPI/Swagger Support Ability to design and import/export API specifications using OpenAPI (Swagger) standards. |
Kong supports OpenAPI/Swagger standard for API import/export and documentation (see Kong Gateway and Kong Dev Portal documentation). | |
|
Version Control for APIs Management of multiple API versions with rollbacks and comparisons. |
Not as far as we are aware.* Version control for API specs is not provided natively in Kong; must be handled externally (e.g., via Git integration by user). | |
|
Mock Server Generation Automatically generates mock endpoints for testing and development. |
Kong supports mocking via plugins and integration with external tools, allowing generation of mock endpoints. | |
|
Code Generation Automatically generates server and client code in various programming languages. |
Not as far as we are aware.* Kong does not provide direct code generation (server/client stubs) for multiple languages from API definition. | |
|
API Modeling (Data Types, Schemas) Defines and manages reusable data models and schemas. |
Not as far as we are aware.* Data modeling (schemas, reusable types) is not native in Kong; usually handled in API design tools outside Kong. | |
|
SDK Generation Provides software development kits (SDKs) for multiple languages based on the API definition. |
Not as far as we are aware.* SDK generation is not a native Kong feature. | |
|
Sample Data Injection Ability to inject sample data for demonstration and testing purposes. |
No information available | |
|
Dynamic Documentation Generates interactive and up-to-date documentation from the API definition. |
Kong Dev Portal provides dynamic documentation sourced from OpenAPI/Swagger. | |
|
REST & SOAP Support Enables design and management of both RESTful and SOAP APIs for legacy integration. |
Both REST and SOAP (via plugins/proxy) are supported for legacy integration. | |
|
GraphQL API Creation Provides tooling for designing and exposing GraphQL-based APIs. |
GraphQL APIs can be proxied and managed via plugins such as the Kong GraphQL plugin. | |
|
Schema Validation Offers schema validation at design-time to prevent errors in API structures. |
Not as far as we are aware.* Schema validation is not natively enforced by Kong (can be handled with plugins or upstreams). |
|
One-Click Deployment Simple and fast deployment process for making APIs live. |
Kong provides declarative and automated deployment to production environments. | |
|
Multi-Environment Support Supports publishing APIs across multiple environments (Dev, Test, Prod). |
Supports dev, test, and production environment separation through workspace and environment variables. | |
|
Environment Isolation Ensures API deployments are isolated across environments. |
Workspace and RBAC features ensure environment isolation. | |
|
Zero-Downtime Deployment Enables publishing API updates with no service interruption. |
Zero-downtime deployment achieved via blue/green deployment, canary release, and native Kong features. | |
|
Canary Releases Supports incremental release strategies for APIs (e.g., canary testing). |
Kong supports canary releases for APIs via route-based traffic-splitting. | |
|
Automated Rollback Automated rollback procedures in case of deployment failures. |
Kong's deployment tools enable automated rollback on failure. | |
|
API Gateway Integration Seamless integration with industry-standard API gateways (e.g., Apigee, Kong). |
Native support and deep integration with API gateways is the core of Kong Enterprise. | |
|
Cloud and On-Premise Deployment Supports both cloud-native and on-premise API deployment options. |
Kong can be deployed both as cloud (SaaS) and on premises (self-managed). | |
|
Custom Domain Support Allows publishing APIs on custom domains with SSL. |
Supports proxying and managing APIs at custom domains, including SSL termination. | |
|
Multi-Region Support Ability to publish APIs across multiple geographic regions for latency optimization. |
Multi-region deployment is supported; Kong powers global-scale infrastructures. | |
|
Auto-Scaling Automatic scaling of API instances based on demand. |
Auto-scaling is available via Kubernetes/Helm and cloud deployments. |
|
OAuth 2.0 Support Implements OAuth 2.0 protocol for secure delegated access. |
Full OAuth 2.0 support is available via standard plugins. | |
|
API Key Management Control generation, rotation, and lifecycle of API keys. |
API Key management is standard with Kong plugins. | |
|
Mutual TLS (mTLS) Enforces two-way SSL/TLS authentication between client and server. |
Mutual TLS (mTLS) is natively supported in the gateway. | |
|
IP Whitelisting/Blacklisting Restricts API access based on source IP address. |
IP filtering via whitelisting/blacklisting is available by configuration in Kong. | |
|
Rate Limiting Prevents API abuse through rate limiting and throttling. |
Rate limiting and throttling are core features in Kong plugins. | |
|
Quota Management Sets call quotas per client or partner for fair usage. |
Quota management per consumer/API is natively supported. | |
|
Single Sign-On (SSO) Supports integration with corporate SSO for authentication. |
Kong supports SSO, including LDAP, Okta, SAML, OIDC, for administrative portals. | |
|
JWT (JSON Web Token) Support Supports authentication with JSON Web Tokens. |
JWT authentication is available via official plugin. | |
|
Encryption of Data in Transit Ensures all data sent via API is encrypted in transit. |
Data in transit is always encrypted via HTTPS/TLS with Kong. | |
|
RBAC (Role-Based Access Control) Enforces granular access controls based on user/role. |
Role-based access control (RBAC) is a core feature for Kong admin and API access policies. | |
|
Audit Logging Records security-relevant API access and changes for audits. |
Kong supports extensive audit logging for APIs and platform operations. | |
|
Integration with Security Appliances Connects API traffic with firewalls, SIEM, and DLP solutions. |
Integration possible with SIEM, firewalls, and DLP via plugins and logs integration. |
|
Real-Time Monitoring Live tracking of API usage, latency, and errors. |
Kong Enterprise offers real-time API monitoring and analytics. | |
|
Alerting and Notifications Automated alerts for outages, anomalies, or limit breaches. |
Alerting and anomaly detection available in Kong's analytics suite or via external tool integration. | |
|
Detailed Logging Comprehensive logs for every API call, event, and error. |
Detailed logging is part of Kong Gateway (access logs, error logs, custom plugins). | |
|
Performance Dashboards Dashboards with key metrics and trends (latency, throughput, error rate). |
Analytics dashboard provides visibility into error rates, throughput, latency, trends. | |
|
Custom Metrics Ability to define and track custom business or technical metrics. |
Kong can provide custom business/technical metrics via its analytics dashboards and plugins. | |
|
Integration with Monitoring Tools Compatibility with Prometheus, Datadog, New Relic, etc. |
Integration with monitoring and APM tools such as Datadog, Prometheus, New Relic. | |
|
End-to-End Tracing Distributed tracing of API calls across microservices. |
No information available | |
|
User and Partner Analytics Insights into which clients and partners are using which APIs and how. |
User and partner analytics are included in Enterprise analytics. | |
|
Geo-Analytics Breakdown of API usage by geographic region. |
No information available | |
|
Error Analytics Breakdown and root cause analysis of API errors and failures. |
Error analytics included in analytics suite. | |
|
API Call Latency Measures the average time taken per API call. |
No information available | |
|
Uptime SLA Measurement Calculates actual API uptime to ensure SLAs are met. |
No information available |
|
Self-Service API Registration Developers can sign up and request access to APIs without manual onboarding. |
Developer portal supports self registration and API key management workflows. | |
|
Interactive API Explorer Allows users to test API endpoints with live requests directly in the web portal. |
Live API explorer is embedded in the Kong Dev Portal. | |
|
Auto-Generated Documentation Always up-to-date API docs generated from the source specification. |
Auto-generated documentation synced with OpenAPI/Swagger input. | |
|
Code Snippets and Examples Ready-to-use sample code in multiple languages. |
Static and dynamic code examples and snippets are downloadable from the developer portal. | |
|
API Onboarding Workflows Guides developers or partners through API setup and provisioning. |
API onboarding workflows (signup, request, approve, provision) built into Dev Portal. | |
|
API Status Pages Communicates live status and known issues for APIs. |
API status and notifications available via Kong Portal. | |
|
Support Integration (Chat, Tickets) Easy access to developer support and ticketing from the portal. |
Support integration (ticketing systems, links to support) provided through the portal. | |
|
Rate Limit and Quota Visibility Clear display of current usage, limits, and quota resets. |
Rate limits, quota status and reset timers shown to developers via portal. | |
|
API Key Management by Developers Developers can create and manage their own API keys. |
Developers can self-manage API keys from the portal. | |
|
Community Forums/FAQs Facilitates collaboration via forums or Q&A for developers. |
FAQ and discussion board features are present in the developer community section. |
|
Connector Marketplace Library of pre-built connectors/integrations to common brokerage platforms. |
No information available | |
|
Webhooks Support Supports real-time outbound notifications to third-party services. |
Webhooks for outbound event notifications are available via plugins. | |
|
Event-Driven Architecture Support for asynchronous, event-based workflows (e.g., message queues). |
Event-driven patterns (async, webhooks, queues) are supported via plugin ecosystem. | |
|
Custom Plugin/Extension Framework Enables custom extensions and hooks for bespoke integration needs. |
Custom plugins/extensions are a major feature of Kong, with open API for plugin dev. | |
|
Data Mapping and Transformation On-the-fly mapping and transformation between data formats (JSON, XML, FIX, CSV, etc.). |
Data mapping and transformation handled with plugins (request/response transformation plugins). | |
|
Batch Processing Support API platform supports high-volume batch file processing. |
Batch processing via plugin-architecture or extension points. | |
|
Synchronous and Asynchronous Messaging Supports both real-time and batch/messaging integrations. |
Supports both synchronous and asynchronous APIs and integrations. | |
|
Legacy System Integration Support for mainframes or legacy middleware (e.g., MQ, FTP). |
Legacy system integration available via plugins and third-party adapters. | |
|
GraphQL/FIX/Protobuf Adapter Support Adapters for financial industry protocols and formats. |
GraphQL and FIX protocol adapters are available as part of the enterprise plugin ecosystem. | |
|
API Chaining/Orchestration Capability to coordinate multiple API calls as part of a workflow. |
API orchestration possible via Kong plugins, service chaining, and upstream configuration. |
|
Horizontal Scaling Ability to add more nodes to handle increased API loads. |
Kong can be horizontally scaled—Kubernetes and clustering fully supported. | |
|
Vertical Scaling Directly increases resources (CPU, RAM) per node for greater throughput. |
Vertical scaling handled via increasing compute resources in deployment. | |
|
Concurrent Connection Support Maximum number of simultaneous connections supported. |
No information available | |
|
API Throughput Maximum number of API calls handled per second. |
No information available | |
|
Low Latency HTTP Routing Optimized networking for fast API responses. |
Optimized for low-latency HTTP traffic via NGINX core and tuning guides. | |
|
Caching Layer Support Integrated support for in-memory or distributed caching. |
Caching layer support available (Redis, in-memory) for rate limiting, responses, etc. | |
|
Rate Throttling Capabilities Dynamic control over API call rates to prevent overload. |
Rate throttling and dynamic quotas are available via plugin configuration. | |
|
Load Balancer Integration Native integration with software/hardware load balancers. |
Works with software and hardware load balancers—NGINX-based architecture. | |
|
Streaming API Support Support for high-frequency data over persistent connections (e.g., WebSockets, SSE). |
Streaming APIs (WebSocket, SSE) are supported via plugin architecture. | |
|
API Response Time Guarantee Guaranteed maximum latency for API requests. |
No information available |
|
Regulatory Compliance Templates Built-in templates for major financial regulations (MiFID II, SEC, GDPR, etc.). |
Regulatory compliance templates for Open Banking/PSD2 are referenced in documentation; GDPR features exist. | |
|
Data Retention Policies Configurable data storage and deletion schedules. |
Data retention policies configurable on audit/data logs and analytics. | |
|
Audit Trail Immutable, searchable logs of all API changes and access. |
Audit trail for all platform/API changes is included in the enterprise audit log. | |
|
Policy Enforcement Engine Automated enforcement of business and IT policies. |
Custom/business policy enforcement supported via plugins and declarative policy engine. | |
|
Consent Management Captures and manages client data consent as per regulations. |
Kong provides configurable consent management modules and logging for privacy compliance (GDPR, PSD2). | |
|
PII Data Masking On-the-fly obfuscation of personally identifiable information in API responses. |
PII masking/filtering features can be enforced via plugins or integration with data security suites. | |
|
Vulnerability Scanning Automated security scans for the API surface. |
Automated vulnerability scanning is available in enterprise/security plugin editions. | |
|
Change Approval Workflows Enforced approval flow for significant API config changes. |
Change approval workflows are supported for API config via RBAC and workflow modules. | |
|
Exportable Compliance Reports Auto-generated compliance reports for internal/external audits. |
Compliance reports are exportable in enterprise analytics and via API. | |
|
Contract and SLA Management Track and manage legal obligations and performance guarantees. |
Contract/SLA tracking can be integrated/extended in enterprise environments; supports these features. |
|
API Deprecation Workflow Automates notifying users and retiring outdated APIs. |
Deprecation workflow is built into dev portal notifications and release lifecycle modules. | |
|
Backward Compatibility Checks Checks API changes for breaking compatibility. |
Backward compatibility checks can be enforced through APIs and configuration policy plugins. | |
|
Automated API Testing Built-in test suites for continuous integration and delivery. |
Automated API test integration available through CI/CD integrations. | |
|
Sandbox Environment Isolated environment for safe API experimentation. |
Sandbox environments are offered for development/testing APIs. | |
|
Release Management Coordinates and documents API version rollouts. |
Release management tooling included in Kong Portal for APIs. | |
|
Incident Management Integration Links with incident response tools for outage resolution. |
Integrated with incident management tools in enterprise deployments. | |
|
Change Notification System Automated or manual notifications for API updates to users. |
Notification systems for API changes (portal, email, webhook) are available. | |
|
Rollback Support Easily revert to previous API versions. |
Revert/rollback API configuration and versions is possible. | |
|
Automated Health Checks Continuous monitoring and health status reporting for APIs. |
Automated health checks supported for upstream APIs. | |
|
Custom Lifecycle Stages Define bespoke API lifecycle stages to suit organization needs. |
Custom lifecycle stages available for APIs via configuration. |
|
Plugin Architecture Ability to add third-party or custom-developed plugins. |
Plugin architecture is one of Kong Gateway’s core features. | |
|
Custom Scripting Support Allows scripting or business logic within API flows (e.g., JavaScript, Python). |
Custom scripting can be executed via custom plugins in Lua, Go, JS, etc. | |
|
UI Theme Customization Ability to change developer portal look and feel. |
UI theme customization enabled on developer portal. | |
|
Branding Options Custom logos, colors, and company info in developer portals. |
Branding/developer portal customization is supported. | |
|
API Workflow Designer Built-in drag-and-drop for API workflows and transformations. |
Not as far as we are aware.* No drag-and-drop workflow designer; API workflows are handled through configuration and plugins. | |
|
Custom Policy Definition Define bespoke security and access policies. |
Custom security/access policy can be defined via plugins and configuration. | |
|
Configurable Messaging Templates Edit email and notification templates sent from the platform. |
Message templates customizable for portal-based communications. | |
|
Extensible Data Model Customize data model for additional business attributes. |
Developer data model extension possible with custom fields in Dev Portal. | |
|
Custom Auth Provider Integration Plug in identity providers not natively supported. |
Custom authentication providers can be integrated via plugin architecture. | |
|
White-Labeling Support Deploy platform as an OEM/private-label solution. |
White-labeling and OEM deployment are offered for large enterprise/partners. |
|
24x7 Support Availability Round-the-clock technical support coverage. |
Premium plans include 24x7 technical support. | |
|
Knowledge Base & FAQs Comprehensive, searchable help and how-to articles. |
Knowledge base and searchable documentation offered on Kong support portal. | |
|
Video Tutorials Official video walkthroughs of common integration tasks. |
Video walkthroughs are available on Kong’s documentation site and YouTube. | |
|
API Usage Best Practices Documentation Guidelines and recommendations for efficient, secure API usage. |
Best practice documentation and guides provided as part of official docs. | |
|
Code Example Libraries Curated code samples for various use cases and languages. |
Code example libraries for various integrations and use-cases are available. | |
|
Multi-Language Support Documentation and support available in multiple languages. |
Not as far as we are aware.* Documentation primarily in English; multi-language limited unless extended by customer. | |
|
Onboarding Workshops Instructor-led or virtual onboarding sessions for developers. |
Onboarding workshops/webinars available to enterprise customers. | |
|
Dedicated Customer Success Manager Assigned contact to help with setup, scaling, and troubleshooting. |
Dedicated Customer Success Managers for enterprise plans. | |
|
Community Channel Access (Slack, Discord, etc.) Official real-time forums for peer and expert support. |
Official Slack/Discourse channels available for the Kong developer/user community. | |
|
SLA on Support Response Guaranteed response within a defined time window. |
No information available |
This data was generated by an AI system. Please check
with the supplier. More here
While you are talking to them, please let them know that they need to update their entry.