Your APIs run on several clouds and a data centre. Their policies shouldn’t live in four places — Kong Konnect runs one control plane — in an India geo if you choose — for Kong Gateways that run serverless, in your own clusters or as dedicated cloud gateways, with portal, catalog and identity built in.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
This page covers Kong Konnect — the API platform, including self-hosted Gateway Enterprise. The rest:
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
One place to run, secure and publish APIs — gateways that carry the traffic, and a control plane that sets their policy.
What consolidation actually replaces, dimension by dimension.
| Dimension | A gateway per team, keys by email | Kong Konnect |
|---|---|---|
| Where policy lives | Per gateway, per team, per cloud | One control plane for every data plane |
| Finding your APIs | Spreadsheets and tribal memory | A Service Catalog with named owners |
| Partner onboarding | Keys emailed on request | Self-service app registration in Dev Portal |
| Service-to-service auth | Shared secrets baked into config | Kong Identity tokens, metered per million |
| The price | Licences and servers nobody totals | Public Plus card, or a quoted Enterprise deal |
| What it is NOT | — | Not an integration suite — no connector flows |
The cheapest test is the 30-day free trial: connect one hybrid gateway, publish one API to the Dev Portal, and see what it replaces.
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Kong hosts the control plane in the geo you pick — US, EU, AU, ME, IN or SG. Services, routes, consumers and plugin settings live there and are pushed to gateways.
Gateway nodes proxy the live requests — serverless, as hybrid nodes on your own clusters or VMs, or as Dedicated Cloud Gateways Kong runs on AWS, Azure or GCP.
Dev Portal publishes APIs to consumers, Service Catalog inventories them, MCP Registry lists agent tools, Kong Identity issues machine tokens and Metering & Billing invoices usage.
Where a SaaS control plane is ruled out, Gateway Enterprise runs both planes on your own servers under a licence file — a separate offering, priced by quote.
A SaaS control plane in the geo you pick — gateways serverless, in your clusters, or dedicated on AWS, Azure or GCP.
Kong Konnect manages every Kong Gateway from one control plane, wherever the gateways run.
Serverless for small APIs, hybrid nodes in your own clusters, or Dedicated Cloud Gateways with a 99.99% SLA — all from one control plane.
Kong Gateway routes HTTP, gRPC, WebSocket, TCP and UDP traffic, with plugins for authentication, rate limiting and transformation per route.
Event Gateway, introduced in 2025, secures and exposes Kafka topics much as the gateway handles REST; it has no public price.
Service Catalog keeps a single list of services and their APIs, so owners are known and undocumented endpoints surface before an audit does.
Kong Identity issues OAuth 2.0 and OpenID Connect tokens for service-to-service calls; on Plus it is metered at $30 per million access tokens.
Plus carries neither SSO nor audit logs. Both are Enterprise-only — a real gap for any regulated team sharing one Konnect organisation.
Publish APIs with docs and self-service app registration. Plus includes one portal (two at most) and two published APIs, rising to 20.
Added in February 2026, the MCP Registry lists the MCP servers and tools AI agents may call, next to the APIs those agents already use.
Built on OpenMeter, acquired in 2025: meter API calls or AI tokens and invoice them — on Plus, $20 per million events plus 0.4% of billings.
The Service Catalog as one inventory of APIs, publishing through the Developer Portal, and managing Kong config as code with decK.
One inventory for every API.
Publishing APIs to consumers.
Gateway config as code.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Here’s what genuinely sets it apart — and exactly where it stops.
Konnect splits where configuration lives from where traffic flows. One control plane manages serverless gateways, hybrid nodes on your own Kubernetes or VMs and Dedicated Cloud Gateways on AWS, Azure or GCP — one policy model, not three.
Konnect Plus is public and metered hourly: $25 a month per serverless control plane, $200 per hybrid one, $500 a month per Dedicated Cloud Gateway plus $0.15 a GB, with 1M API requests included and $200 per extra million. A pilot can be priced on a spreadsheet.
Konnect added an India geo in December 2024. Kong’s docs say services, routes, consumers, portals and metering data stay in the chosen geo; only authentication, billing and usage are shared between geos. No city or cloud region is published.
Plus caps out at 10M API requests a month and has no SSO or audit logs — those need Enterprise. Plus is card-billed in US dollars only. And the open-source Kong Gateway’s last release line is 3.9.x, so the free path does not follow Enterprise, now at 3.16.
List every gateway, API and its monthly requests — that decides serverless, hybrid or dedicated, and Plus or Enterprise.
Choose the IN geo or another, decide which data planes stay on your own infrastructure, and get storage terms in writing.
Connect one hybrid data plane to the free trial, move a single team’s APIs onto it and compare latency and policy effort.
Publish the pilot APIs to Dev Portal for self-service keys, and load Service Catalog with owners for every live service.
Move the remaining teams under Konnect, manage config through decK in CI, confirm no traffic hits old gateways, then switch off.
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
“Hybrid nodes run in our own data centre while the control plane sits in Konnect’s India geo. That split is what cleared our risk review.”
“We priced the pilot off the public card — two hybrid control planes and a request add-on — before anyone from sales rang us.”
“Plus has no SSO. The day a second team joined our Konnect organisation, the Enterprise conversation became unavoidable.”
“The Dev Portal replaced a wiki of spec files. Partners register their own apps now instead of emailing us for keys.”
“We run AWS and Azure. Dedicated Cloud Gateways on both, one control plane, one plugin set — that settled the choice.”
“Card billing in dollars did not suit our finance team. Moving to an annual Enterprise contract through a reseller fixed it.”
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the API management market — tap any vendor to see why it sits where it does.
Execution strength vs product vision — the classic market map, minus the paywall.
Gartner MQ Leader 2025; Forrester Leader Q3 2026.
The grid nobody publishes — how many places the gateway can run and keep its data, India included, vs how many kinds of traffic it governs.
IN geo, hybrid, dedicated or self-hosted; APIs, Kafka, AI.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Against Google Apigee, MuleSoft Anypoint, AWS API Gateway, Azure API Management and Gravitee — on deployment, traffic covered, price, limits, security and India.
| Dimension | Kong Konnect | Google Apigee | MuleSoft Anypoint | AWS API Gateway | Azure API Management | Gravitee |
|---|---|---|---|---|---|---|
| What it is | SaaS API platform | Google Cloud API mgmt | Integration + API suite | Managed AWS front door | Azure-managed API mgmt | Open-core API platform |
| Deployment | SaaS, hybrid, self-host | Hosted or hybrid | Managed or self-managed | AWS-managed only | Self-hosted on 2 tiers | SaaS, hybrid, own infra |
| Traffic covered | APIs, events, AI | APIs plus LLM policies | APIs, AI, MCP, flows | REST, HTTP, WebSocket | APIs, LLMs, MCP, A2A | APIs, events, agents |
| Pricing model | Per control plane + use | Per call + environment | Annual contract, quoted | Pure per-request | Per unit-hour or call | Flat per gateway |
| Published entry price | $25/month serverless | $365/month + calls | No list price | $3.50 per 1M REST | 1M calls free | $2,500/month Planet |
| Included vs add-on | Core in, extras metered | Analytics, security paid | Metered by capability | Transfer billed apart | AI gateway in all tiers | Unlimited APIs, users |
| Scale and limits | Plus caps at 10M/month | Tiered by QPS | Set by contract | Volume tiers to 20B+ | Unlimited on Premium v2 | Unlimited calls |
| Security depth | Plugins + Kong Identity | Advanced API Security | Policies via gateway | IAM, Cognito, WAF | Content safety policy | Open core + paid plugins |
| Integrations | decK, Operator, clouds | Google Cloud native | Connector-rich | AWS services | Azure + AI back ends | Multi-cloud gateways |
| Governance and SSO | SSO on Enterprise only | Google Cloud IAM | External identity | IAM + resource policies | Entra ID and RBAC | Not on pricing page |
| India storage region | IN geo; city unnamed | Mumbai runtime | India Cloud | Mumbai region | Central India | No India SaaS region |
| Support | Email on Plus | Tiered SLAs | Terms not public | Via AWS Support | Azure support + SLA | Gold to 24/7 + TAM |
| Lock-in and exit | Declarative, open roots | Apigee-specific proxies | Mule-specific assets | AWS-bound | Azure-bound | Apache-2.0 core |
| Best fit | Multi-cloud estates | Google Cloud estates | Salesforce shops | Serverless on AWS | Microsoft estates | Flat-price, event-heavy |
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Kong Konnect is one of 35 developer tools products TechBag carries. The Developer Tools guide narrows them to a shortlist and shows the reasoning. →
Drag the sliders (APIs in production; engineer-hour cost). Estimates model engineering time spent on per-gateway configuration, key requests and hunting for undocumented APIs at an assumed 1.5 hours per API a year, with 70% of it removed by one control plane and a self-service portal. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Published: Konnect Plus is a self-serve rate card, card-billed in USD and metered hourly — $25/month per serverless control plane, $200 per hybrid, $500/month per Dedicated Cloud Gateway plus $0.15/GB, with 1M API requests included and $200 per extra million (10M a month at most). Enterprise and fully self-hosted Gateway Enterprise are custom-priced. TechBag models your traffic first, then quotes in INR with GST.
Best for pilots and single-team estates
Best for a broader rollout
Best for regulated, multi-team estates
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Tell us your requirements and current tools — we’ll model it against what you spend today.
Take this into your next vendor call — including ours.
Will you stay under 10M API requests a month and two hybrid control planes? Past either, Konnect Plus no longer fits.
Serverless, hybrid or Dedicated Cloud Gateways? Hybrid keeps data planes on your infrastructure; dedicated adds $0.15 per GB.
Have you chosen the IN geo — and has Kong confirmed in the contract what data stays in it and what is shared?
Do you need SSO or audit logs? Neither is on Plus; budget for Enterprise if either is a requirement.
Can your finance team pay a USD card bill metered hourly, or do you need an annual contract invoiced in INR?
Must the control plane run on your own servers? Then price Gateway Enterprise, which Kong quotes separately.
Will LLM calls pass through the gateway? AI Gateway is $100 a month per model on Plus, up to five models.
Running Kong Gateway OSS today? Its last release line is 3.9.x — plan the move to Enterprise before sizing.
Model your control planes and monthly requests first, or let a TechBag advisor scope a pilot that puts one team's APIs behind a hybrid gateway.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.