API Gateways, Management & Edge Security4 min readUpdated September 2026

Kong vs Apigee for SaaS Companies That Meter API Usage

The moment you start billing customers by the API call, a plain reverse proxy stops being enough. You need per plan rate limits, usage counters that reconcile with your invoices, and a developer portal that does not require an engineer to hand out keys by hand.

That is the real split between Kong and Google Cloud Apigee for B2B SaaS and cloud software companies. Apigee ships metering, monetization, and portal authoring as built in features. Kong keeps latency low and configuration in Git, and leaves the billing plumbing for your own engineers to build.

Vendors Covered in this Article

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

Why a plan tiered pricing model breaks a plain proxy

A single rate limit works fine until you launch a second pricing tier. Once Starter, Growth, and Enterprise customers each need their own request ceilings, burst allowances, and overage rules, you are no longer just routing traffic, you are running a billing system that happens to sit in front of your API.

The gateway also becomes the record of what actually happened: which customer called which endpoint, how many times, and whether they crossed a threshold that should trigger an upsell prompt or a hard block. Get this wrong and your invoices and your product's enforced limits drift apart, which is the kind of discrepancy a finance team notices before an engineer does.

What Apigee gives you without building it yourself

Apigee's monetization module ties directly into its rate limiting policies, so a plan change made in the portal can adjust a customer's ceiling without a deploy. The developer portal handles key issuance, documentation, and sandbox credentials, which matters once prospects start self serving their way to a trial instead of emailing your team for access.

The tradeoff is cost and dependency on Google's runtime. You end up paying for governance you may not need yet if your customer base is still small enough that a shared spreadsheet and a support inbox get the job done.

What Kong asks you to build yourself

Kong's plugin architecture gives you the primitives: rate limiting, key authentication, request transformation. The logic connecting a rate limit hit to an actual invoice line is yours to write, usually as a plugin or sidecar that writes usage events somewhere your billing system can read them.

What you get in exchange is configuration that lives in your own repository, reviewed the same way as any other pull request, and a runtime you can run anywhere without a recurring platform fee tied to call volume.

A decision rule for choosing between them

If your plan tiers are still settling and you are iterating on pricing every few weeks, Kong's Git based configuration lets you ship changes as fast as anything else in your stack. If your tiers are locked in and the next priority is a self service developer portal that cuts down support tickets, Apigee's built in monetization saves you a build you would otherwise own indefinitely.

Most SaaS teams start with Kong while pricing is still moving, then reassess once usage based billing is stable and the portal becomes the bigger gap. Taj, MeetMyCTO's AI CTO, can walk through your current call volumes and pricing tiers if you want a second read on the timing.

Questions that settle the choice:

  • Are your pricing tiers still changing every few weeks? If so, Kong's Git-based configuration lets you ship plan changes as quickly as anything else in your stack.
  • Are your tiers locked in while support tickets about API keys pile up? Apigee's built-in monetization and developer portal save a build you would otherwise own indefinitely.
  • If you choose Kong, who will own the code that turns a rate limit hit into an invoice line?
  • Do your usage counters reconcile with your invoices, and does one named person answer when a customer's usage and bill disagree?

Where Cloudflare API Shield fits instead

Cloudflare API Shield is not really competing on metering. It validates that requests match your OpenAPI schema and pins client certificates at the edge, which matters more for blocking malformed or forged traffic than for billing. Some teams run it in front of either Kong or Apigee as a schema validation layer rather than choosing it as a substitute for them.

Skip it if metering and a developer portal are your priority. Consider it alongside whichever gateway you pick if schema validation and edge level abuse protection are separate problems you are also solving. For a fuller comparison of all three, see Kong vs Apigee vs Cloudflare API Shield.

What a mid migration mistake usually looks like

The most common failure mode is not picking the wrong gateway, it is running two metering systems in parallel during a migration and letting them drift apart. A team moves half its endpoints to a new rate limiting scheme, leaves the rest on the old one, and a customer ends up billed inconsistently depending on which endpoint they happened to call that month.

Avoid this by migrating one pricing tier at a time rather than one endpoint at a time, and by reconciling invoiced usage against gateway logged usage for a full billing cycle before retiring the old configuration. A discrepancy caught during a parallel run is a configuration bug. The same discrepancy caught by a customer's finance team is a support escalation and a trust problem.

Who should actually own the metering pipeline

Metering sits at the intersection of engineering, product, and finance, which means it often ends up owned by none of them until something breaks. Engineering built the plugin, product set the tier boundaries, and finance reconciles the invoices, but no single person is accountable when a customer's usage and their bill disagree.

Naming a clear owner, usually a senior engineer with a direct line to whoever runs billing operations, closes that gap before it becomes a recurring fire drill. That person does not need to write every plugin change themselves, but they do need to be the one who signs off before a rate limit or tier boundary changes in production.

Executive Capability Standard

What Good Looks Like

A well run API program in B2B SaaS and cloud software meters usage accurately enough that a customer's invoice and their enforced rate limit always agree, and a new integration partner can get sandbox credentials without waiting on an engineer.

Building The Capability (5-Stage Skill Ladder)

1. Learn:Map which endpoints your pricing tiers actually gate, and where usage data currently lives outside your gateway.
2. Do Manually:Track usage and rate limit overrides in a shared spreadsheet while your pricing model is still changing from month to month.
3. Delegate:Assign one engineer to own the metering to billing pipeline so it is not rebuilt from scratch by whoever touches it next.
4. Automate:Wire Kong's usage plugins or Apigee's monetization module directly into your billing system so plan changes take effect without a deploy.
5. Buy:Move to a managed API platform once your developer portal, key issuance, and metering all need to run without engineering involvement.

How to Get Started

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

Frequently Asked Questions

Can I switch from Kong to Apigee later without rebuilding my API contracts?

Yes, if your API definitions live in an OpenAPI spec independent of the gateway. The rate limiting and metering policies will not transfer automatically since each product configures them differently, but your client facing contracts, paths, parameters, and authentication scheme, can stay the same. Budget time to rebuild the metering to billing pipeline either way.

Does Kong support usage based billing on its own?

Kong tracks the data usage based billing needs, request counts, consumer identity, response codes, through its logging and rate limiting plugins, but it does not generate invoices or manage plan tiers by itself. You connect that data to a billing system yourself, usually through a plugin that writes usage events to a queue your finance stack reads.

Do I need a developer portal if I only have a handful of API customers?

Probably not yet. A portal earns its cost once prospects start self serving credentials without talking to your team, which usually starts mattering somewhere between a handful and a few dozen active integrations. Below that, a shared document covering your API key process and a support inbox is a reasonable stand in.

About the numbers

This guide doesn't quote a sourced benchmark. Figures in it are estimates or general guidance, so check them against your own numbers.

Related Guides