# Prevent graph misuse with operation size and complexity limits

DevFeed: [Prevent graph misuse with operation size and complexity limits](<https://devfeed.tech/articles/prevent-graph-misuse-with-operation-size-and-complexity-limits-23484.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/prevent-graph-misuse-with-operation-size-and-complexity-limits>)

Author: Vivek Ravishankar

Published: 2023-05-04T11:29:42Z

Content type: release

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [GraphOS](<https://devfeed.tech/topics/graphos.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>)

Tags: [announcement](<https://devfeed.tech/tags/announcement.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [graphos](<https://devfeed.tech/tags/graphos.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [operations](<https://devfeed.tech/tags/operations.md>), [performance](<https://devfeed.tech/tags/performance.md>), [preview](<https://devfeed.tech/tags/preview.md>), [protection](<https://devfeed.tech/tags/protection.md>), [router](<https://devfeed.tech/tags/router.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

Apollo GraphOS Enterprise introduces a preview router security feature that limits GraphQL operation size and complexity. Platform teams can centralize controls at the graph router to reduce misuse, excessive server load, and performance risks across federated subgraphs.

## Source excerpt

A GraphQL API with the power to give app developers everything they need in a single query is excellent for delivery velocity, but it also could have the potential to enable improper access to data if not secured correctly. With supergraph architecture, you can mitigate this risk by implementing the proper security controls in each subgraph, but Apollo GraphOS is helping platform teams add an additional layer of security in front of subgraphs by building controls into the graph router itself.