Here is a stackoverflow question on securing signalr.
The problem with creating a game in signalr is that you have exposed the endpoints to the client – which means that you can be scripted.
It’s fairly safe for broadcast.
Securing SignalR
Random outpourings of a software developer
Developer Rants 