DataDome Releases Kong Server-Side Integration
DataDome’s mission is to protect our customers against threats and online fraud on any infrastructure. As requested by our customers, we have added Kong to our list of supported integrations. Kong is an API gateway provided by KongHQ that can be hosted either on-premise or in the cloud, depending on your requirements.
API gateways are used to centralize API management inside organizations, and should be protected against malicious traffic. If only your website is protected against online threats, bots can adapt and find vulnerabilities in your mobile application and/or APIs. Therefore, you should always protect your website, mobile app, and APIs.
The Kong integration joins DataDome’s other API gateway integrations including Google Cloud Apigee, which we released a few months ago. DataDome worked closely with the Kong team to create a Kong plugin, available in Kong Hub, that works on both open-source and enterprise editions (Kong Konnect).
Integrated Protection in Real Time
When we release a new integration, our goal is always to provide an easy setup for our customers. This integration is distributed as a Kong plugin available through LuaRocks, the de facto standard for Lua Packages.
You can set up DataDome bot and online fraud protection to protect either:
- All of your APIs.
- A specific service, route, or consumer.
As always, if a request is determined to be from a bot, the solution will display the privacy-compliant, secure, and accessible DataDome CAPTCHA.

Setup Overview
You can find the full instructions in our Kong technical integration documentation. If you use Kong Enterprise Edition/Kong Konnect, you need to contact your Kong CSM so they can enable the DataDome Kong plugin inside your Kong tenant.
The steps below provide a simplistic overview of the process.
4 Simple Steps
- Download and install the Kong Plugin to each of your nodes (data planes).
- Add your DataDome server-side API key (found in your dashboard) to either the configuration file or in Kong Konnect.
- Reload Kong.
- Set up the API routes you would like to protect with DataDome.
Congrats, you are now protected and can see your real-time traffic in the DataDome dashboard!
Supporting Every Platform Possible
The new Kong integration is the latest in a range of DataDome integrations, as we continue to expand our supported platforms. With more than 25 server-side integrations available today, 50+ total integrations, and more to come, DataDome stops bad bots and online fraud on any infrastructure—big or small.
See how bot management can help you with a free 30-day trial, or schedule a live demonstration.