Protects API endpoints by enforcing authentication, rate limiting, and threat prevention at the gateway layer.