Systems | Development | Analytics | API | Testing

Kong is named **a Leader** in *The Forrester Wave: API Management Software, Q3 2026*. APIs used to be about connecting systems to each other. Now they're also how AI agents connect to everything: tools, data, other agents. That shift changes what good API management looks like, and it's where we at Kong have shifted our focus. Forrester's take on where we land.

AI has changed how fast testing teams can move, yet sorting through duplicate test cases still trips teams up. Ask the SmartBear Zephyr Agent for Rovo to generate test cases for a requirement, and coverage that used to take an afternoon comes back in a single conversation. That speed is a genuine win for teams building faster than ever, but as AI generates more test coverage, how do you make sure all of it stays worth keeping?

Drift detection stays narrow on purpose. It checks contract conformance – structure, status codes, schema – and deliberately leaves workflows and business logic to functional and end-to-end tests. That’s what makes it a fast add to our pipeline to prevent API drift. That narrow scope keeps it cheap to run. Fast execution, low flakiness, low maintenance cost – the kind of checks that make you more confident shipping. Catching drift early is the whole point.

Handwritten mocks are cheap one at a time. This series built enough of them to show how quickly that stops being true. Nine posts took one package notifier from a function returning "delayed" to a captured response from a real carrier. Along the way, we hand-authored canned successes, failure cases, a spy, a stateful fake, an HTTP server, response fixtures, and contract-drift tests in four languages.

DreamFactory 7.7.0 is now the recommended stable release. It's a substantial one: AI agents become governed, human-owned API consumers; a new open-source API Builder lets you author custom REST endpoints without writing scripts; versioned Schema Contracts catch database drift before it reaches your consumers; and the platform baseline moves to Laravel 13.25 and PHP 8.3.

The notifier has returned a message throughout this series, which made testing almost suspiciously easy. Assert on the return value and you are done. Real notifiers do more than build strings: they send them. Once a message goes to an email provider or SMS gateway, the function may return nothing useful. When that change lands, every existing test loses the value it asserted on. This is part 4 of a ten-part series. The code is in Java, Node.js, Go and Python.

Every codebase has a failure path nobody has run. Not through laziness, but because reproducing it requires a backend dependency to misbehave on cue. In the package notifier, the carrier must refuse, stall, or return nonsense at the exact moment the test runs. So the retry logic ships unverified and everyone hopes. The seam from post 2 already gives the test control. A seam is a place where you can change what code does without editing that code.

The spy from post 4 is a sharp tool. Once a test can record every interaction, it is tempting to assert on all of them. The result looks thorough, but it is usually a transcript rather than a useful specification. This post takes a test written that way, makes a change that no customer could possibly notice, and watches the test fail anyway. This is part 5 of a ten-part series. The code is in Java, Node.js, Go and Python.

We said you'd see the evidence quickly.. Here it is. **Kong AI Gateway 2.0 is now generally available**, and it isn't arriving quietly.