Join me for a tour through what I have learned developing, testing, and operating a GraphQL API in the real world. This talk will discuss how to build security into your GraphQL API from the ground up. We will cover how to approach security as a core feature of your graph, how to build the tools developers need to construct secure applications, and how to log GraphQL requests in a way that fits your use case.