Harness and Kong Expand Strategic Partnership

Harness and Kong announced an expansion of their strategic partnership to address the growing security challenges posed by AI-driven architectures, autonomous agents, and Model Context Protocol (MCP) deployments.

The two companies are extending their joint solution from Kong API Gateway to also include Kong AI Gateway, bringing Harness's AI security intelligence directly into the AI infrastructure layer and enabling enterprises to discover, monitor, and protect every agent, AI asset, LLM-powered service, and MCP-connected workflow that traverses it.

Harness and Kong have been jointly trusted by enterprises to deliver best-in-class API security for years. The existing Harness and Kong API Gateway integration provides:

• Comprehensive API traffic visibility and behavioral analysis across all Kong-managed services
• Real-time detection and blocking of API threats, including OWASP API Security Top 10 risks, credential stuffing attacks, and business logic abuse
• Continuous sensitive data tracking to identify PII exposure and regulatory risk
• Zero-friction deployment alongside existing Kong configurations

This new offering of the AI Gateway solution applies the same level of security depth to AI infrastructure, ensuring that security teams are not left behind as their organizations adopt AI and agentic operations.

"Our partnership with Harness has given joint customers production-grade API security that works with the way they build, not against it," said Ken Kim, Senior Vice President, Business Development at Kong Inc. "Extending to include Kong AI Gateway is a natural next step. The same enterprises are now moving AI into production through our gateway and need the same depth of visibility and control they've come to rely on for their APIs for all AI traffic types including LLM, MCP, and A2A. That's exactly what this delivers and is crucial for organizations scaling in the agentic era."

The new Harness and Kong AI Gateway integration directly tackles these challenges across two critical domains: AI discovery and AI protection.

• AI Discovery: Harness automatically inventories every AI asset, API, MCP server, tool, prompt, and resource routed through Kong AI Gateway — providing security teams with a continuously updated catalog of their AI attack surface. No manual documentation. No blind spots.
• AI Protection: Harness applies behavioral analysis and anomaly detection to AI traffic in real time, identifying prompt injection attacks, data exfiltration through AI responses, jailbreaking, malicious code in prompts, and other AI-specific threats. Enterprises gain the same depth of observability and protection for their agents and AI workloads that they already rely on for traditional APIs, with full prompt and response details available for incident investigation and inline policy enforcement through Kong AI Gateway.

"Shadow AI has become the defining security blind spot for enterprises today. Traditional tools were built for static code and predictable systems, not for adaptive AI models, agent-to-agent communication, and MCP-connected workflows that evolve continuously," said Rahul Sood, GM of Application Security at Harness. "This integration of Harness AI Security with Kong puts security intelligence directly into the connectivity layer where AI traffic flows. Joint customers now have the visibility and control they need to move fast without losing sight of what's happening across their AI infrastructure."

The Harness and Kong API Gateway integration is generally available now for all joint customers. The Kong AI Gateway integration, including AI Discovery and AI Protection, is also generally available now.