Infrastructure
Kong Gateway: supported versions and end-of-life dates today
Kong Gateway 3.9 and 3.4 are supported; 3.8 reached end of life on Dec 12, 2024; the latest release is 3.9.4.
Last checked against endoflife.date and deps.dev.
- Latest release
- 3.9.4
- GitHub stars
- 44.3k
- Licence
- Apache-2.0
- OpenSSF Scorecard
- 7.4 / 10
Supported versions
Maintenance and supply chain
OpenSSF Scorecard 7.4 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 12 commits and 3 issue updates found in the last 90 days.
Weakest checks
- Over-privileged CI tokens (Token-Permissions 0/10)
- No fuzzing (Fuzzing 0/10)
- No OpenSSF best-practices badge (CII-Best-Practices 2/10)
Alternatives
AWS API Gateway
Fully managed API gateway service
Strengths
- Fully managed
- Deep AWS integration
Trade-offs
- AWS vendor lock-in
- Limited customization
Apigee
Enterprise API management platform by Google
Strengths
- Comprehensive API analytics and monitoring
- Advanced developer portal capabilities
Trade-offs
- Complex setup and configuration
- Overkill for small-scale API needs
Tyk
Open-source API gateway with GraphQL support
Strengths
- Open-source with self-hosting option
- Native GraphQL federation support
Trade-offs
- Smaller community compared to Kong
- Limited plugin ecosystem
Ambassador
Kubernetes-native API gateway built on Envoy
Strengths
- Kubernetes-native with CRD configuration
- Built on battle-tested Envoy proxy
Trade-offs
- Kubernetes-only (not suitable for non-K8s)
- Configuration can be complex
Docs and release notes
Check Kong Gateway in your own stack
This page checks Kong Gateway in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.