Compare AI gateways
Pick up to four platforms. Every cell shows a verification state, not a marketing claim — “not publicly documented” means we could not find an official source, not that the capability is missing. See our methodology.
| Capability | KOKong AI Gateway |
|---|---|
| Security | |
| Prompt-injection detectionIdentifies attempts to override system instructions in prompts or tool output. | AvailableAvailable. Verified from official documentation.Provided by the AI Prompt Guard plugin. |
| Prompt-injection blockingBlocks the request before it reaches the model, rather than only logging it. | AvailableAvailable. Verified from official documentation.Prompt Guard rejects matching requests at the gateway. |
| Jailbreak detectionDetects known jailbreak and guardrail-evasion patterns. | Verification pendingVerification pending. Verification pending. |
| PII detectionIdentifies personal information in prompts or responses. | AvailableAvailable. Verified from official documentation.AI Sanitizer / PII plugin. |
| PII redactionMasks or removes personal information before it leaves the gateway. | AvailableAvailable. Verified from official documentation.Sensitive values can be redacted before the request is forwarded. |
| Secret & credential scanningDetects API keys, tokens and credentials in prompts or output. | Verification pendingVerification pending. Verification pending. |
| Input inspectionInspects outbound requests before they reach the model. | AvailableAvailable. Verified from official documentation. |
| Output inspectionInspects inbound model responses before they reach the application. | AvailableAvailable. Verified from official documentation.Response guarding is available as a plugin. |
| Content moderationClassifies harmful or policy-violating content. Not equivalent to injection defense. | AvailableAvailable. Verified from official documentation.Content-safety plugin integration. |
| Policy enforcementConfigurable rules applied per route, team, key or environment. | AvailableAvailable. Verified from official documentation.Capabilities are configured as per-route plugins. |
| Agent & tool controlsConstrains tool calls, autonomous actions and agent permissions. | Verification pendingVerification pending. Verification pending. |
| MCP securityControls or inspects Model Context Protocol server traffic. | AvailableAvailable. Verified from official documentation.MCP traffic can be proxied and governed. |
| Audit logsDurable, reviewable record of requests and policy decisions. | AvailableAvailable. Verified from official documentation. |
| Access controlsRoles, teams, keys and scoped permissions. | AvailableAvailable. Verified from official documentation.Consumers, keys and RBAC from Kong Gateway. |
| Cost optimization | |
| Prompt compressionReduces the number of tokens actually sent to the model. | Not publicly documentedNot publicly documented. Not publicly documented. |
| Exact cachingReturns a stored response for a byte-identical request. | AvailableAvailable. Verified from official documentation.AI Proxy caching. |
| Semantic cachingReturns a stored response for a semantically similar request using embeddings. | AvailableAvailable. Verified from official documentation.AI Semantic Cache plugin. |
| Intelligent model routingChooses a model per request based on task, cost or performance. | AvailableAvailable. Verified from official documentation.AI Proxy Advanced routes across providers and models. |
| Automatic fallbackRetries against an alternate model or provider on failure. | AvailableAvailable. Verified from official documentation.Provider fallback on failure. |
| Load balancingDistributes traffic across keys, regions or providers. | AvailableAvailable. Verified from official documentation.Load balancing across model targets. |
| Token budgetsHard or soft limits expressed in tokens. | AvailableAvailable. Verified from official documentation.Token-based rate limiting acts as a token budget. |
| Dollar budgetsSpending limits expressed in currency. | Verification pendingVerification pending. Verification pending. |
| Rate limitsRequest throttling. Throttling is not the same as token reduction. | AvailableAvailable. Verified from official documentation.AI Rate Limiting Advanced plugin, including token-based limits. |
| Cost attributionAttributes spend to teams, keys, users or features. | LimitedLimited. Partially documented.Usage is reported per consumer and route; dedicated cost attribution not stated. |
| Cost analyticsDashboards and reporting on token and dollar usage. | AvailableAvailable. Verified from official documentation.AI analytics and observability. |
| Savings reportingReports the spend avoided by compression, caching or routing. | Verification pendingVerification pending. Verification pending. |
| Models and deployment | |
| OpenAISupports OpenAI models. | AvailableAvailable. Verified from official documentation. |
| AnthropicSupports Anthropic models. | AvailableAvailable. Verified from official documentation. |
| Google GeminiSupports Google Gemini models. | AvailableAvailable. Verified from official documentation. |
| AWS BedrockSupports AWS Bedrock as a provider. | AvailableAvailable. Verified from official documentation. |
| Azure OpenAISupports Azure OpenAI deployments. | AvailableAvailable. Verified from official documentation. |
| Open-source modelsSupports open-weight models or self-hosted inference endpoints. | AvailableAvailable. Verified from official documentation.Ollama, Hugging Face and self-hosted endpoints. |
| SaaS deploymentVendor-hosted managed service. | AvailableAvailable. Verified from official documentation.Konnect managed control plane. |
| VPC / private cloudDeployable inside a customer cloud account. | AvailableAvailable. Verified from official documentation.Kubernetes and cloud deployment. |
| On-premiseDeployable in a customer data centre. | AvailableAvailable. Verified from official documentation. |
| Self-hostedCustomer runs and operates the gateway themselves. | AvailableAvailable. Verified from official documentation. |
| Open-source optionSource code published under an open-source licence. | AvailableAvailable. Verified from official documentation.Kong Gateway is open source; some AI plugins are enterprise-only. |
| APIProgrammatic API for configuration or traffic. | AvailableAvailable. Verified from official documentation. |
| SDKOfficial client libraries. | AvailableAvailable. Verified from official documentation. |
| Commercial | |
| Public pricingList pricing published on the vendor website. | Verification pendingVerification pending. Verification pending. |
| Free tierA permanently free usage tier. | Verification pendingVerification pending. Verification pending. |
| Free trialA time-limited or credit-limited trial. | Verification pendingVerification pending. Verification pending. |
| Enterprise planA named enterprise tier. | Verification pendingVerification pending. Verification pending. |
| Contact sales requiredPricing requires contacting the vendor. | Verification pendingVerification pending. Verification pending. |
| Best for | Platform teams already running Kong that want AI policy in the same data plane |
| Last reviewed | 2026-07-30 |