Kong

@kong

The AI Connectivity Company

HQ: San Francisco

Kong
@kong
13時間
An agent goes sideways at 2 a.m. Revoking its access shouldn’t mean rotating a key that fourteen services share. Kong Token Vault keeps credentials out of the agent, so revocation is one targeted action. 👉 bit.ly/4iGrIiz
GIF
Kong
@kong
11月12日
A secrets manager has to trust whoever it hands the secret to. With agents, that’s the party you trust least. Kong Token Vault injects per-user OAuth credentials at the gateway, so the agent never holds one. konghq.com/blog/product-r…
GIF
Kong
@kong
11月12日
Your agent replays a thinking block after the context changed. The provider returns a 400. Your user returns a very short message. Kong AI Gateway 2.3 now drops the stale block by default on Anthropic, Vertex, Azure Foundry and Bedrock.
Kong
@kong
11月11日
A valid login and a valid token can still read other customers’ invoices. Change one number in the request and you’re in. That’s BOLA, the #1 risk on the OWASP API Security Top 10. Authentication says who you are. Ownership checks say what you can touch. bit.ly/4BMDZL7
Kong
@kong
11月11日
AI agents are the newest Kafka clients, and there are a lot of them. Hand-written ACLs won’t scale. Kong Event Gateway turns onboarding into policy: OAuth, mTLS, field encryption, per-agent data slices. One cluster, many virtual views. bit.ly/4z6VPWR

Kongさんのポスト