Security

Secure your gateway to prevent unauthenticated and unauthorized access to your apps.

Access logging

Capture an access log for all the requests that enter the gateway.

CORS

Enforce client-site access controls with cross-origin resource sharing (CORS).

CSRF

Apply a CSRF filter to the gateway to help prevent cross-site request forgery attacks.

Data loss prevention (DLP)

Ensure that sensitive data isn't logged or leaked by masking data in response bodies<!–and headers, …

External authentication and authorization

JWT

Rate limiting

Web Application Firewall (WAF)