Eyeriss is a complete API gateway built from the ground up around security, not bolted on as an afterthought. Conditional RBAC, multiple authentication methods including API keys (Argon2id-hashed), Bearer tokens, JWT (HS256/RS256/ES256), and MFA-enforced admin access provide strong security controls for both users and the APIs it protects. Eyeriss provides defense-in-depth controls such as SSRF protection, rate limiting with fail-closed enforcement, encrypted-at-rest backend credentials, timing-safe token comparison, and automated credential lifecycle management including OAuth2 and proprietary token exchange flows. All requests are audit-logged with correlation IDs, and the gateway enforces deny-by-default authorization, content-type whitelisting, request size limits, and brute-force protection out of the box.