(Source: Digital By Default News) However, having a product with a locked-down, secure OS cannot run third party applications and does not have susceptibility to these types of OS attacks, or any other emerging types of OS attacks. This is where the common software-based architecture of most API Gateways quickly become their biggest vulnerability.