--- title: "Download list of all Kong sites" description: "Every website running Kong, with domain, DNS, WHOIS, IP address, hosting country and global rank on each row. One file, rebuilt daily." url: https://webatla.com/technology/kong --- [Home](https://webatla.com/) › [Technologies](https://webatla.com/technology) › [Reverse proxies](https://webatla.com/technology?category=Reverse%20proxies) › Kong ![Kong logo](https://webatla.com/assets/tech-logos/kong.png) # Download websites that use Kong 21,739 live sites using Kong right now Reverse proxies · by Kong Inc. · since 2015 · open source 22K sites, Dataset updated · 2026-10-27 Categories [Reverse proxies](https://webatla.com/technology?category=Reverse%20proxies) [🔒 Get the list](https://webatla.com/technology/kong#preview) Requires a dataset purchase [About Kong](https://webatla.com/technology/kong#overview) [Database preview](https://webatla.com/technology/kong#preview) [Versions](https://webatla.com/technology/kong#versions) [Download](https://webatla.com/technology/kong#download) All figures as of Oct 27, 2026 All figures here come from one snapshot of the webatla database, taken on this date (UTC). We usually refresh it every day. 21,739, Sites detected 0.0%, Of all websites 1.4.1, Most used version ## Preview Kong site datasets Kong detection is a value inside the **Technologies** column. Two datasets carry it. **Technologies · €159 / month · 21,739 rows · 14 columns · webatla-technologies-kong-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | PR value | Harmonic value | Domain creation date | Domain expiration date | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | sympla.com.br | [com.br](https://webatla.com/tld/br) | [br](https://webatla.com/tld/br) | ICANN | HTTP 200 | 52.222.236.119 | [US](https://webatla.com/country/us) | {…} | 2026-09-20 | HubSpot 143127487 3882593 +1 , Google Ads AW-876807203 , Google Analytics G-KXH10SQTZF G-VT3M1H9PT9 UA-24958859-7 +2 , HSTS, Kong 3.4.0 , Miro, HTTP/3, Algolia, Favicon, Mixpanel | 0.0000061021 | 17,939,324 | 2011-03-11 | 2029-03-11 | | pb.pl | [pl](https://webatla.com/tld/pl) | [pl](https://webatla.com/tld/pl) | ICANN | HTTP 200 | 104.20.27.8 | [US](https://webatla.com/country/us) | {…} | 2026-10-11 | Google Ads AW-1058267274 , Google Analytics G-S6N9810DT6 UA-1121769-10 UA-1121769-2 UA-1121769-45 UA-1121769-5 UA-1121769-52 UA-1121769-74 UA-44780777-2 +7 , Google Tag Manager GTM-WD48PVNV … | 0.00000102698 | 17,546,280 | 1999-11-30 | 2026-11-29 | | hvg.hu | [hu](https://webatla.com/tld/hu) | [hu](https://webatla.com/tld/hu) | ICANN | HTTP 200 | 104.18.16.49 | [US](https://webatla.com/country/us) | {…} | 2026-10-19 | Google Analytics G-14QX7V9916 G-77HE9DGT13 G-PRRV40NZ4H G-QX8WTTWLMS UA-25448511-44 UA-776778-2 UA-776778-64 +6 , Google Tag Manager GTM-P9CGKX , PWA, Kong 3.5.0 , Unpkg, Gemius, HTTP/2, Hotjar… | 0.000000863801 | 17,620,312 | 1994-03-23 | — | | gengo.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 44.216.125.86 | [US](https://webatla.com/country/us) | {…} | 2026-10-16 | Google Ads AW-960145597 , Google Analytics G-G5P91BPP01 UA-5711737-1 UA-5711737-8 +2 , PHP, Kong 2.0.5 , WPML 4.7.6 , MySQL, Nginx 1.17.10 , Slick, HTTP/2, Popper | 0.000000643667 | 15,727,954 | 1999-03-19 | 2027-03-19 | | swoopfunding.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 150.171.109.101 | [US](https://webatla.com/country/us) | {…} | 2026-10-26 | HubSpot 25104510 , Google Analytics G-07MDTD5R6V G-CLDF35FX35 G-H3E22K35T9 G-NTS34F2P69 G-R0C73EVLCB G-S9VF5NYTYH G-SJXRQ79B64 G-YN49N0JWWV +7 , Google Tag Manager GTM-TNWKQLRL , PHP, HSTS, Kong… | 0.000000559659 | 15,201,188 | 2017-12-19 | 2028-12-19 | **All data · €599 / month · 21,739 rows · 23 columns · webatla-all-data-kong-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | DNS last data checked | DNS Status | DNS records | PR value | Harmonic value | RDAP/WHOIS last data checked | RDAP/WHOIS method | Domain creation date | Domain expiration date | Domain last changed | Registrar | RDAP/WHOIS Record | Response Status RDAP/WHOIS | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | sympla.com.br | [com.br](https://webatla.com/tld/br) | [br](https://webatla.com/tld/br) | ICANN | HTTP 200 | 52.222.236.119 | [US](https://webatla.com/country/us) | {…} | 2026-09-20 | HubSpot 143127487 3882593 +1 , Google Ads AW-876807203 , Google Analytics G-KXH10SQTZF G-VT3M1H9PT9 UA-24958859-7 +2 , HSTS, Kong 3.4.0 , Miro, HTTP/3, Algolia, Favicon, Mixpanel | 2026-10-15 | TRUE | {…} | 0.0000061021 | 17,939,324 | 2025-08-05 | RDAP | 2011-03-11 | 2029-03-11 | 2020-01-25 | — | {…} | Domain is active | | pb.pl | [pl](https://webatla.com/tld/pl) | [pl](https://webatla.com/tld/pl) | ICANN | HTTP 200 | 104.20.27.8 | [US](https://webatla.com/country/us) | {…} | 2026-10-11 | Google Ads AW-1058267274 , Google Analytics G-S6N9810DT6 UA-1121769-10 UA-1121769-2 UA-1121769-45 UA-1121769-5 UA-1121769-52 UA-1121769-74 UA-44780777-2 +7 , Google Tag Manager GTM-WD48PVNV … | 2026-10-17 | TRUE | {…} | 0.00000102698 | 17,546,280 | 2025-12-05 | RDAP | 1999-11-30 | 2026-11-29 | 2025-12-05 | OVH SAS | {…} | Domain is active | | hvg.hu | [hu](https://webatla.com/tld/hu) | [hu](https://webatla.com/tld/hu) | ICANN | HTTP 200 | 104.18.16.49 | [US](https://webatla.com/country/us) | {…} | 2026-10-19 | Google Analytics G-14QX7V9916 G-77HE9DGT13 G-PRRV40NZ4H G-QX8WTTWLMS UA-25448511-44 UA-776778-2 UA-776778-64 +6 , Google Tag Manager GTM-P9CGKX , PWA, Kong 3.5.0 , Unpkg, Gemius, HTTP/2, Hotjar… | 2026-10-22 | TRUE | {…} | 0.000000863801 | 17,620,312 | 2026-10-16 | WHOIS | 1994-03-23 | — | — | — | {…} | Domain is active | | gengo.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 44.216.125.86 | [US](https://webatla.com/country/us) | {…} | 2026-10-16 | Google Ads AW-960145597 , Google Analytics G-G5P91BPP01 UA-5711737-1 UA-5711737-8 +2 , PHP, Kong 2.0.5 , WPML 4.7.6 , MySQL, Nginx 1.17.10 , Slick, HTTP/2, Popper | 2026-10-22 | TRUE | {…} | 0.000000643667 | 15,727,954 | 2026-03-20 | RDAP | 1999-03-19 | 2027-03-19 | 2026-03-20 | GoDaddy.com, LLC | {…} | Domain is active | | swoopfunding.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 150.171.109.101 | [US](https://webatla.com/country/us) | {…} | 2026-10-26 | HubSpot 25104510 , Google Analytics G-07MDTD5R6V G-CLDF35FX35 G-H3E22K35T9 G-NTS34F2P69 G-R0C73EVLCB G-S9VF5NYTYH G-SJXRQ79B64 G-YN49N0JWWV +7 , Google Tag Manager GTM-TNWKQLRL , PHP, HSTS, Kong… | 2026-10-19 | TRUE | {…} | 0.000000559659 | 15,201,188 | 2025-06-19 | RDAP | 2017-12-19 | 2028-12-19 | 2025-06-19 | 123-Reg Limited | {…} | Domain is active | [↓ Download preview (20 rows, free)](https://webatla.com/api/v1/sample/technology/kong?dataset=technologies) [Buy Technologies · €159 / month](https://webatla.com/account/checkout?dataset=technologies) ## Version distribution Detected Kong versions across all 21,739 sites. | Version | Sites | Share | | --- | --- | --- | | **1.4.1** | 17,102 | 78.7% | | 3.6.1 | 1,242 | 5.7% | | 0.14.1 | 680 | 3.1% | | 3.0.0 | 384 | 1.8% | | 2.1.3 | 371 | 1.7% | ## The Kong dataset Every site we've detected as running Kong, with version, hosting, country, TLD and traffic rank. ### Kong lives inside 2 datasets Kong detection is part of **Technologies** (€159/mo) and **All data** (€599/mo). Buy either to filter the full 21,739-site list, or grab a free preview first. [See datasets](https://webatla.com/pricing) [↓ Download free preview (20 rows)](https://webatla.com/api/v1/sample/technology/kong?dataset=technologies) ## About Kong ### At a glance - **Vendor:** Kong Inc. - **Website:** konghq.com ↗ - **Language:** Lua - **License:** Apache 2.0 - **First release:** 2015-04-01 An API gateway is built to be unremarkable. Kong sits between clients and the services behind them, terminating requests, checking credentials, counting calls and forwarding whatever survives, and a carefully configured deployment leaves very little evidence of itself in a response. A list of domains where the gateway is visible at all is therefore a list of deployments that either chose not to hide or were never tuned to. The observation surface matters as much as the detection. Gateways usually live on an api subdomain or an internal hostname, while a web technology dataset looks at what a public site serves. A match here generally means the gateway is fronting the public property itself, which is a different and less common deployment pattern than the ordinary one, and it tends to indicate a team that put its whole edge behind a single Reverse proxies component rather than a separate proxy for the website. Where the gateway is visible, the implication is organisational rather than cosmetic. A team that puts Kong in front of its services has interfaces worth governing, more than one backend and someone whose job description includes rate limits, authentication and traffic policy. Written in Lua on top of an established proxy core, the gateway is chosen by platform engineers rather than by whoever picked the content management system, and it usually arrives in company with container orchestration, a service registry and a deployment pipeline. The Apache 2.0 licence explains much of the spread. Kong Inc. publishes an open core anyone can run without ever speaking to a salesperson, alongside a commercial edition and a managed service, so deployments range from a single container in front of a hobby project to a regulated enterprise estate. Released first in 2015, the gateway arrived exactly as microservice architectures were becoming a default, and a large share of what we detect belongs to systems designed in that period. Version data is where the picture turns uncomfortable for anyone responsible for a fleet. We record 102 distinct versions in the wild, with 1.4.1 recurring more than any other, and a self hosted gateway does not update itself. Old builds keep serving traffic because they work, because the plugins pinned to them were never retested, or because the engineer who deployed them has moved on. For security research the distribution across domains is more useful than any total, since an advisory covers a range of releases rather than a product name. As of October 2026 we see Kong on 21,739 sites, and the figure should be read as a lower bound. Gateways behind a content delivery network that rewrites headers, or configured to strip identifying responses, simply never surface. What a full extract offers beyond a single lookup is the shape of the population: which sectors standardised on the gateway, which estates run it beside a competing proxy, and which domains still sit on releases a given advisory covers. Vendor teams use lists like this for displacement research, security teams for exposure mapping, and analysts for judging whether an open core has actually converted into paying infrastructure. ## Frequently asked questions How many websites use Kong? webatla detects Kong on 22K websites, refreshed daily, each with its domain, DNS, WHOIS, IP, country and ranking. Can I download the list of websites using Kong? Yes, as structured JSONL. Grab a free sample first. What's included for each site, and how fresh is it? Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic, re-detected and re-exported daily. How do I find the websites using Kong? Buy the technology dataset, then download the complete list of domains we detect using Kong, re-exported every day. What else is in the Kong technology data? Each row places Kong next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking. Can I download just the sites using Kong, or the whole database? Both. Every site running Kong comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export. How do I download the list of websites using Kong? Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running Kong as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank. ## Get the full list of websites using Kong Pick the dataset that covers what you need. Each one includes Kong and downloads as JSONL, rebuilt daily. Technologies, 14 columns Full website tech stack per site: CMS, payments, analytics, frameworks. €159 / mo [Buy and download](https://webatla.com/account/checkout?dataset=technologies) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=technologies) All data, 23 columns Everything we have, in a single package. The full webatla universe. €599 / mo [Buy and download](https://webatla.com/account/checkout?dataset=all-data) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=all-data) Want to compare every dataset side by side? [Visit the pricing page](https://webatla.com/pricing) ## Related technologies [![Nginx logo](https://webatla.com/assets/tech-logos/nginx.png) Nginx Server Software · 72.5M sites](https://webatla.com/technology/nginx) [![Envoy logo](https://webatla.com/assets/tech-logos/envoy.png) Envoy Server Software · 274K sites](https://webatla.com/technology/envoy) [![F5 BigIP logo](https://webatla.com/assets/tech-logos/f5-bigip.png) F5 BigIP Security · 88K sites](https://webatla.com/technology/f5-bigip) [![IBM DataPower logo](https://webatla.com/assets/tech-logos/ibm-datapower.png) IBM DataPower Security · 146 sites](https://webatla.com/technology/ibm-datapower)