SaaS Ranking

Transparency alternatives to Kong

Other API management vendors we measure, sorted by how much we found at them and not at Kong. This is a comparison of disclosure, not of features or fitness.

12 shown of 45 that differ from Kong on at least one criterion we measured for both. Public transparency score, not a product or security rating.

Kong has 8 gaps in what we could measure: Subprocessor list, Data location stated, Certifications named, Uptime SLA with a figure, HTTPS enforced with HSTS, No third-party tracking before consent, security.txt (RFC 9116), Notice before subprocessors change. The column “Found there, not found at Kong” is the one that closes them.

VendorScoreFound there, not found at KongFound at Kong, not found there
Redoclyredocly.comSee also Transparency alternatives to Redocly 74/100 5 Subprocessor list, Certifications named, Uptime SLA with a figure, +2 nothing Compare
Moesifmoesif.comSee also Transparency alternatives to Moesif 65/100 5 Subprocessor list, Data location stated, Certifications named, +2 2 Status page with history, Public pricing Compare
Svixsvix.comSee also Transparency alternatives to Svix 65/100 5 Subprocessor list, Data location stated, Certifications named, +2 1 Data processing agreement Compare
Postmanpostman.comSee also Transparency alternatives to Postman 57/100 5 Data location stated, Certifications named, HTTPS enforced with HSTS, +2 2 Data processing agreement, Named privacy contact Compare
Speakeasyspeakeasy.comSee also Transparency alternatives to Speakeasy 30/100 4 Certifications named, HTTPS enforced with HSTS, No third-party tracking before consent, +1 3 Data processing agreement, Status page with history, Public pricing Compare
Hookdeckhookdeck.comSee also Transparency alternatives to Hookdeck 57/100 3 Subprocessor list, HTTPS enforced with HSTS, Notice before subprocessors change 1 Status page with history Compare
Theneotheneo.ioSee also Transparency alternatives to Theneo 52/100 3 Data location stated, Certifications named, HTTPS enforced with HSTS 1 Status page with history Compare
Bump.shbump.shSee also Transparency alternatives to Bump.sh 48/100 3 Data location stated, Certifications named, HTTPS enforced with HSTS 2 Status page with history, Named privacy contact Compare
Fernbuildwithfern.comSee also Transparency alternatives to Fern 43/100 3 Data location stated, Certifications named, HTTPS enforced with HSTS 2 Data processing agreement, Named privacy contact Compare
Apollo GraphQLapollographql.comSee also Transparency alternatives to Apollo GraphQL 39/100 3 Subprocessor list, HTTPS enforced with HSTS, Notice before subprocessors change 3 Data processing agreement, Status page with history, Named privacy contact Compare
Apitallyapitally.ioSee also Transparency alternatives to Apitally 35/100 3 Data location stated, HTTPS enforced with HSTS, No third-party tracking before consent 3 Data processing agreement, Status page with history, Public pricing Compare
Graviteegravitee.ioSee also Transparency alternatives to Gravitee 35/100 3 Data location stated, Certifications named, HTTPS enforced with HSTS 3 Data processing agreement, Status page with history, Named privacy contact Compare

Only criteria we could measure for both are counted. Where we could measure one and not the other, the row is silent: that would be a statement about our measurement, not about either vendor. Every single result with its source is on the two profiles.