DataPower supports WS-Policy for defining security requirements, provides protection against DOS attacks through rate limiting and throttling, and helps prevent SQL injection through input validation and parameter filtering. All three security capabilities are part of DataPower's security gateway functionality.