Book A Demo Free Trial

The Easiest Way To Add Security To Kong

Snapt Nova WAF Security plugin for Kong adds powerful app security to your API Gateway and application ingress. REST API, autoscaling, and multi-cloud.

snapt-nova-architecture-diagram-kong-plugin

Snapt Nova WAF Security Plugin

Kong WAF Security. No Legacy Appliances.

Proxy requests from Kong ingress to Snapt Nova WAF. Stop bots, scrapers, data leaks, spammers, SQL injections, XSS attacks, denial of service, and much more.

Powerful Layer 7 WAF

Nova provides full OWASP 10 protection, ensuring your apps and APIs are compliant, reliable, and protected from threats, denial of service, and abuse.

Over 1 Million SSL TPS

Fast, lightweight WAF services scale out to millions of nodes at 10K SSL TPS per node. Scale out in any cloud in 30 seconds. Near-zero latency control plane.

Modern Architecture

Nova's centralized control is built for modern distributed apps. Autoscaling, multi-cloud, self-healing, and lightweight. Deploy as IaC with REST API.

Kong Plugin for WAF Security

Secure Kong the way you always wanted to.

Snapt Nova comes with a native Kong plugin so it just works. Snapt's plugin is compatible with Kong Plugin Hub and acts as middleware that proxies requests from Kong ingress to Snapt Nova.

Container-friendly app services and upstream service discovery make Snapt Nova especially powerful when deploying Kong with Kubernetes. 

Nova is the industry-leading centralized app services platform securing 7 Trillion+ HTTP/S requests per day.

Get started guide →
dashboard

Automation and API

A cloud-native gateway and ingress controller need cloud-native application security. 

Dropping a clunky WAF or ADC appliance in front of your Kong deployment really cramps your style. Become fully agile and deploy all your Infrastructure as Code inside the Kong ecosystem you know and love.

Nova spawns lightweight data plane WAF nodes, defined by a centralized control plane. Automate everything with a full REST API.

Nova API Documentation →
snapt-nova-diagram-advanced-user-architecture

Autoscaling Security

Don't get a WAF – get the superpower to create unlimited WAFs and load balancers on-demand!

Now your app security works in the same way as your other cloud-native Kong components. Scale up, scale down, manage it remotely, and only pay for what you use.

Snapt Nova uses lightweight worker nodes capable of running on 2-core CPUs and even ARM without sacrificing performance of 10,000 SSL TPS per node. These nodes are totally dynamic and ephemeral so scale-in is 100% efficient.

Nova Autoscaling Documentation →
snapt-nova-diagram-autoscaling

Universal Deployment – Just Like Kong

Nova works with any cloud, any container platform, any VM and hypervisor, and even on bare metal. 

Security and observability however and wherever you deploy, with a 100% cloud-neutral architecture. Extend the power of Snapt Nova to every part of your network, all in a centralized platform. 

Global policy and access control for consistency and compliance. Per-backend and per-app configuration and metrics because one size doesn't always fit all.

Nova Clouds Documentation →
snapt-nova-diagram-multi-cloud-observability

What's Inside?

Snapt Nova provides everything you need to add WAF security inside Kong.

Layer 7 WAF

Nova provides a full OWASP 10 protection suite, ensuring your apps and APIs are compliant, reliable, and protected from threats, denial of service, and abuse.

Central Security Orchestration

Centrally manage allow lists and deny lists, rulesets, rate limits, and more across all your locations, clouds, and application backends.

DoS Protection

Nova automatically mitigates Denial of Service attacks, with AI and ML-driven dynamic adjustments to traffic based on real-time telemetry.

Total Visibility

Nova web app firewalls are in constant communication with the Nova Controller, allowing detailed real-time monitoring and reactions to threats. You can easily monitor threats across multiple clouds and locations.

Powerful Telemetry

More than just TCP data, Nova monitors request rates, HTTP error rates, HTTP POSTs, known vulnerable endpoints, response codes, IP threat level and much more to determine the likelihood of a threat in real time.

Machine Learning and AI

Nova's ML engine ingests real-time global threat intelligence and profiles your traffic and infrastructure, constructing a pattern of "normal" behavior to identify anomalies and stop attackers.

Want to see how Snapt Nova works with Kong?

We will schedule an introductory call with you to discuss your requirements and demonstrate Snapt's products. We also provide an enterprise-level trial license for your POC.