# Enforcing GraphQL security best practices with GraphOS

DevFeed: [Enforcing GraphQL security best practices with GraphOS](<https://devfeed.tech/articles/enforcing-graphql-security-best-practices-with-graphos-23288.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/enforcing-graphql-security-best-practices-with-graphos>)

Author: Vivek Ravishankar

Published: 2023-10-05T14:44:53Z

Content type: tutorial

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [GraphOS](<https://devfeed.tech/topics/graphos.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [authorization](<https://devfeed.tech/tags/authorization.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [graphos](<https://devfeed.tech/tags/graphos.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [scalability](<https://devfeed.tech/tags/scalability.md>), [security](<https://devfeed.tech/tags/security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>)

## AI overview

This article explains how to use Apollo GraphOS to apply GraphQL security best practices at scale. It describes centralizing authentication and authorization in the Apollo Router, enforcing declarative access-control policies, blocking malicious traffic at the graph edge, and safelisting operations for first-party applications.

## Source excerpt

GraphQL provides a self-service developer experience by enabling client teams to fetch all of the data they need with a single query. When implementing GraphQL at scale, it's important to balance its flexibility with security measures that prevent bad actors from exploiting its self-serve nature. A supergraph provides a unified but modular approach to GraphQL at scale.