Currently Qlik Rapid API Gateway Security is inherited from following things.
Cloud Security Settings (i.e. Security Groups and IP Filtering) Application Security Settings( API Gateway Security Settings) Qlik Sense Security Settings(Qlik Sense QMC Settings)
As of Sept 2020 only Supported Platform is AWS Cloud.
If there is security vulnerability please file a Security Issue Request or email [email protected]