# IBM API Connect vs Kong Gateway

**Leader by vioscaleAI score:** Kong Gateway

| Attribute | IBM API Connect | Kong Gateway |
|---|---|---|
| **vioscaleAI score** | 48.5 (40% (low)) | 53.8 (74% (medium)) |
| activity.commits_last_30d | - | 10 |
| adoption.dependent_repos | - | 1 |
| adoption.github_stars | - | 44,260 |
| content.faq | `[{"answer":"An agentic AI-powered API management solution that empowers developers to build and manage APIs more efficiently, with AI-agents assisting in securely scaling API infrastructure across hybrid environments. It is indexed under API Gateways.","source":"https://www.ibm.com/products/api-connect","question":"What is IBM API Connect?","confidence":0.6},{"answer":"IBM API Connect offers a free tier, so you can start without paying. Paid plans are also available: Pay-as-You-Go, Standard Tier (SaaS), Premium Tier (SaaS) and Reserved Instance (SaaS). Pricing changes often, so verify at source before relying on it.","source":"https://www.ibm.com/products/api-connect/pricing","question":"Is IBM API Connect free?","confidence":0.6},{"answer":"Yes. IBM API Connect can be deployed cloud / SaaS, hybrid, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://www.ibm.com/products/api-connect/pricing","question":"Can IBM API Connect be self-hosted?","confidence":0.6}]` | `[{"answer":"Kong provides a unified platform for building, testing, and governing APIs and AI agents. It handles both traditional API gateway functions—routing, rate limiting, authentication—and modern AI-specific concerns like token budgeting, context management, and LLM traffic control. It is indexed under API Gateways.","source":"https://konghq.com","question":"What is Kong Gateway?","confidence":0.6},{"answer":"Kong Gateway offers a free tier, so you can start without paying. Pricing changes often, so verify at source before relying on it.","source":"https://konghq.com","question":"Is Kong Gateway free?","confidence":0.6},{"answer":"Kong Gateway supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.","source":"https://konghq.com","question":"What platforms does Kong Gateway support?","confidence":0.6},{"answer":"Yes. Kong Gateway can be deployed cloud / SaaS, hybrid and self-hosted, so it does not have to run on the vendor's infrastructure.","source":"https://konghq.com","question":"Can Kong Gateway be self-hosted?","confidence":0.6},{"answer":"We have confirmed 11 integrations for Kong Gateway, including AWS Bedrock, Azure Content Safety, Google Cloud Model Armor, OpenAI, Anthropic, Llama 3, Kubernetes and Helm, plus 3 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://konghq.com","question":"What does Kong Gateway integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 and GDPR for Kong Gateway. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Kong Gateway not holding them. Always confirm compliance directly before you rely on it.","source":"https://konghq.com/compliance","question":"What security certifications does Kong Gateway have?","confidence":0.7},{"answer":"Yes. Kong Gateway is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.","source":"https://github.com/Kong/kong","question":"Is Kong Gateway open source?","confidence":0.95},{"answer":"Kong Gateway is available worldwide. Its primary market is the United States.","source":"https://konghq.com","question":"Where is Kong Gateway available?","confidence":0.5}]` |
| deployment.options | `{"cloud":true,"hybrid":true,"on_prem":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"self_hosted":true}` |
| description.long | An agentic AI-powered API management solution that empowers developers to build and manage APIs more efficiently, with AI-agents assisting in securely scaling API infrastructure across hybrid environments. | Kong Gateway is a scalable API and LLM gateway platform designed for cloud-native deployments. It provides traffic management, authentication, rate limiting, request transformation, and advanced AI capabilities. |
| features.capabilities | `{"hosting":"both","monetization":true,"observability":true,"developer_portal":true}` | `{"mtls":true,"hosting":"both","k8s_native":true,"oauth_oidc":true,"monetization":true,"observability":true,"rate_limiting":true,"developer_portal":true,"plugin_ecosystem":"extensive","request_transformation":true}` |
| integrations.count | - | 12 |
| integrations.list | - | `[{"name":"AWS Bedrock"},{"name":"Azure Content Safety"},{"name":"Google Cloud Model Armor"},{"name":"OpenAI"},{"name":"Anthropic"},{"name":"Llama 3"},{"name":"Kubernetes"},{"name":"Helm"},{"name":"Git"},{"name":"Stripe"},{"name":"Twilio"},{"name":"Llama","native":true,"category":"llm","direction":"outbound"},{"name":"DocuSign","native":true,"category":"business_process","direction":"outbound"},{"name":"Insomnia","native":true,"category":"api_development","direction":"bidirectional"},{"name":"Apache Kafka","native":true,"category":"event_streaming","direction":"bidirectional"},{"name":"Redis","native":true,"category":"cache","direction":"outbound"},{"name":"Prometheus","native":true,"category":"monitoring","direction":"outbound"},{"name":"cert-manager","native":true,"category":"pki","direction":"outbound"},{"name":"AWS Lambda","native":true}]` |
| language.primary | - | Lua |
| license.spdx | - | Apache-2.0 |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | - | `{"cli":true,"web":true,"linux":true}` |
| pricing | `{"type":"hybrid","plans":[{"free":false,"name":"Pay-as-You-Go","summary":"Usage-based SaaS pricing on AWS","features":["Multi-tenant","1 instance","Unlimited API calls","30 days analytics retention","24x7x365 support","99.9% SLA"],"commitment":"monthly","description":"Usage-based pricing, no upfront costs, cancel at any time, hosted on AWS","contactSales":false,"includedLimits":{"api_calls":"Unlimited","analytics_retention":"30 days"}},{"free":false,"name":"Standard Tier (SaaS)","summary":"Annual SaaS commitment for standard multi-tenant deployment","features":["Multi-tenant","1 instance","100,000+ API calls/year","90 days analytics retention","24x7x365 support","Up to 99.95% SLA"],"commitment":"annual","description":"Annual SaaS subscription, multi-tenant, hosted on AWS","contactSales":false,"includedLimits":{"api_calls_annual":"100,000+","analytics_retention":"90 days"}},{"free":false,"name":"Premium Tier (SaaS)","summary":"Annual SaaS commitment for premium single-tenant deployment","features":["Single-tenant","1-3 instances","100M+ API calls/year","Custom analytics retention","24x7x365 support","Up to 99.95% SLA"],"commitment":"annual","description":"Annual SaaS subscription, single-tenant gateway with advanced capabilities, hosted on AWS","contactSales":false,"includedLimits":{"api_calls_annual":"100M+","analytics_retention":"Custom"}},{"free":false,"name":"Reserved Instance (SaaS)","summary":"Annual SaaS commitment for reserved instance","features":["Single-tenant","Customer-determined instances","120M+ API calls/year","Custom analytics retention","Customer-determined support","Customer-determined SLA"],"commitment":"annual","description":"Annual SaaS subscription, single-tenant with greater isolation and availability, hosted on IBM Cloud","contactSales":true,"includedLimits":{"api_calls_annual":"120M+","analytics_retention":"Custom"}},{"free":false,"name":"Software (Self-Managed)","summary":"Annual self-managed software subscription","features":["On-premises/hybrid/multi-cloud deployment","Customer-determined instances","Customer-determined API call volume","Customer-determined analytics retention","Installation and deployment assistance","Customer-determined SLA"],"commitment":"annual","description":"Self-managed deployment on premises, hybrid cloud, or multi-cloud with IBM Software Subscription & Support, renewed annually","contactSales":true}],"summary":"Pay-as-you-go usage-based, SaaS subscriptions (Standard, Premium, Reserved), or self-managed software. 30-day free trial.","freeTier":true,"sourceUrl":"https://www.ibm.com/products/api-connect/pricing","retrievedAt":"2026-08-13T16:52:09.835Z","freeTrialDays":30,"billingPeriods":["month","year"]}` | `{"type":"open_source","summary":"Open source core; Kong Konnect cloud platform offers free trial and commercial subscriptions","sourceUrl":"https://konghq.com","retrievedAt":"2026-10-13T15:14:34.129Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | freemium | open_source |
| pricing.price_level | low | free |
| pricing.transparent | no | no |
| release.cadence_days | - | 42 |
| release.history | - | `[{"url":"https://github.com/Kong/kong/releases/tag/3.9.4","date":"2026-10-12T07:27:48Z","type":"stable","version":"3.9.4"},{"url":"https://github.com/Kong/kong/releases/tag/3.9.3","date":"2026-06-17T06:02:19Z","type":"stable","version":"3.9.3"},{"url":"https://github.com/Kong/kong/releases/tag/3.9.2","date":"2026-06-04T07:12:53Z","type":"stable","version":"3.9.2"},{"url":"https://github.com/Kong/kong/releases/tag/3.9.1","date":"2025-06-04T09:20:05Z","type":"stable","version":"3.9.1"},{"url":"https://github.com/Kong/kong/releases/tag/3.9.0","date":"2024-12-13T04:17:54Z","type":"stable","version":"3.9.0"},{"url":"https://github.com/Kong/kong/releases/tag/3.8.1","date":"2024-11-18T20:52:27Z","type":"stable","version":"3.8.1"},{"url":"https://github.com/Kong/kong/releases/tag/3.8.0","date":"2024-09-11T09:19:15Z","type":"stable","version":"3.8.0"},{"url":"https://github.com/Kong/kong/releases/tag/2.8.5","date":"2024-06-24T14:54:52Z","type":"stable","version":"2.8.5"},{"url":"https://github.com/Kong/kong/releases/tag/3.7.1","date":"2024-06-21T09:38:32Z","type":"stable","version":"3.7.1"},{"url":"https://github.com/Kong/kong/releases/tag/3.7.0","date":"2024-05-28T16:00:45Z","type":"stable","version":"3.7.0"},{"url":"https://github.com/Kong/kong/releases/tag/3.6.1","date":"2024-03-04T14:19:57Z","type":"stable","version":"3.6.1"},{"url":"https://github.com/Kong/kong/releases/tag/3.6.0","date":"2024-02-09T22:08:50Z","type":"stable","version":"3.6.0"},{"url":"https://github.com/Kong/kong/releases/tag/3.5.0","date":"2023-11-08T09:50:40Z","type":"stable","version":"3.5.0"},{"url":"https://github.com/Kong/kong/releases/tag/3.4.2","date":"2023-10-12T10:50:05Z","type":"stable","version":"3.4.2"},{"url":"https://github.com/Kong/kong/releases/tag/3.4.1","date":"2023-10-03T10:33:19Z","type":"stable","version":"3.4.1"},{"url":"https://github.com/Kong/kong/releases/tag/2.8.4","date":"2023-09-20T23:03:15Z","type":"stable","version":"2.8.4"},{"url":"https://github.com/Kong/kong/releases/tag/3.4.0","date":"2023-08-09T15:57:37Z","type":"stable","version":"3.4.0"},{"url":"https://github.com/Kong/kong/releases/tag/3.3.1","date":"2023-07-11T08:58:57Z","type":"stable","version":"3.3.1"},{"url":"https://github.com/Kong/kong/releases/tag/3.3.0","date":"2023-05-18T17:19:41Z","type":"stable","version":"3.3.0"},{"url":"https://github.com/Kong/kong/releases/tag/3.2.2","date":"2023-03-16T12:24:30Z","type":"stable","version":"3.2.2"}]` |
| reliability.sla_pct | 99.9 | 99.99 |
| reliability.status_page | - | yes |
| security.disclosure_policy | yes | yes |
| security.gdpr | - | yes |
| security.pci | - | yes |
| security.scorecard | - | 7.5 |
| security.soc2 | - | yes |
| security.trust_center | - | https://konghq.com/blog/product-releases/trust-what-youre-shipping-with-insomnia-v12 |
| security.vulnerabilities | - | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2FKong%2Fkong&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (API Gateways)

| Capability | IBM API Connect | Kong Gateway |
|---|:--:|:--:|
| **Deployment** |  |  |
| Hosting | Cloud + self-hosted | Cloud + self-hosted |
| Kubernetes-native | - | ✓ |
| **Traffic** |  |  |
| Rate limiting | - | ✓ |
| Request/response transformation | - | ✓ |
| **Security** |  |  |
| OAuth2 / OIDC / JWT | - | ✓ |
| Mutual TLS | - | ✓ |
| **Protocols** |  |  |
| GraphQL gateway | - | - |
| gRPC support | - | - |
| **Delivery** |  |  |
| Developer portal | ✓ | ✓ |
| Monetization | ✓ | ✓ |
| **Ecosystem** |  |  |
| Plugin ecosystem | - | Extensive |
| **Insight** |  |  |
| Observability | ✓ | ✓ |

*Source: vioscaleAI. Generated 2026-10-17T11:33:14.945Z. "-" = undocumented, not absent.*