Kong

This account is verified because it's an official organization on X. Learn more

@kong

The AI Connectivity Company

HQ: San Francisco kong.ai Joined February 2009

463 Following 26K Followers 13K Posts

Latest posts 5

Kong @kong 3h

A valid login and a valid token can still read other customers’ invoices. Change one number in the request and you’re in.

That’s BOLA, the #1 risk on the OWASP API Security Top 10. Authentication says who you are. Ownership checks say what you can touch.

bit.ly/4BMDZL7

A chart titled "OWASP API Risk (2023)" lists ten API security risks alongside recommendations for fixing them. Each risk is labeled, such as "API1: Broken object level authorization," followed by suggested practices like "Practice 4: ownership checks, two-user tests." The chart pairs risks with corresponding mitigation strategies to improve API security.

Kong @kong 3h

AI agents are the newest Kafka clients, and there are a lot of them. Hand-written ACLs won’t scale.

Kong Event Gateway turns onboarding into policy: OAuth, mTLS, field encryption, per-agent data slices. One cluster, many virtual views.

bit.ly/4z6VPWR

2:33

Kong @kong 1d

↑, ↑, ↓, ↓, ←, →, ←, →, B, A, Space

developer.konghq.com

1:31

Kong @kong 1d

Your AI bill says “OpenAI: one line item.”

It should say which team, which app, which agent, and which loop ran all weekend. Attribution belongs where every request already passes through: the gateway.

bit.ly/3WwXJCs

Kong @kong 2d

Day-0 support for Fable 5.2 on Kong means:

▪︎ Detailed Fable 5.2 pricing updates (across providers) in the Konnect price catalog

▪︎ Fable 5.2 cost tracking and budgets

▪︎ Switching agents over to Fable 5.2 with minimal business disruption

And a lot more...all on day-0.

Learn more about Kong AI Management: lnkd.in/gP4ejkXA

0:39