The Curious Engineer

All blogs / Security

Stytch Blog

stytch.com/blog

Read the latest from the Stytch team

SecurityWeb development

’21’22’23’24’25’26
Posts
288 from 12 Jan 2021 to 10 Nov 2025
Posting
now and then (1 in the last year)
Kind
company blog

2025 49

  1. Auth & identityNov 10, 2025AI agent authentication methods
  2. Stytch has joined Twilio to build the intelligent identity layer for the internetCompanyLatestOct 30, 2025
  3. ProductOct 17, 2025Stytch supports CIMD for OAuth
  4. Auth & identityOct 8, 2025Guide to authentication for the OpenAI Apps SDK
  5. Auth & identitySep 29, 2025Building MCP with OAuth Client ID Metadata (CIMD)
  6. LatestAuth & identityEngineeringSep 23, 2025How to implement Web Bot Auth for your AI agent, bot, or crawler (and why you should)
  7. LatestAuth & identityProductSep 23, 2025Stytch supports Web Bot Auth for agent and bot verification
  8. Agent Ready Episode 7 with Stytch: AI Agent Fraud and Threat Prevention
  9. ProductSep 9, 2025Stytch Connected Apps: auth for AI Agents & MCP that fits within your existing identity stack
  10. Observability & SLOs for AI Agent Workloads with Honeycomb
  11. Tool Calling & Orchestration: Building Multi-Agent Systems with Arcade
  12. Building AI-Ready APIs: Lessons from Early MCP Experiments
  13. Agent-to-agent OAuth: a guide for secure AI agent connectivity with MCP
  14. What is device fingerprinting, and how does it work?
  15. EngineeringAug 1, 2025Introducing IsAgent: understand and support AI agents using your site
  16. MCP authentication and authorization implementation guide
  17. Trusted Auth Tokens: handle any custom auth flow in minutes
  18. Browser fingerprinting: smarter fraud detection for the AI era
  19. Top SCIM Tools in 2025
  20. Introducing the Stytch MCP Server
  21. How to secure model-agent interactions against MCP vulnerabilities
  22. Controlling Consent with Connected Apps
  23. Example Securing AI Agent Access with OAuth in MCP
  24. Stytch Component Playground: a live UI builder for your next login flow
  25. Unified mobile biometrics: ship faster, support everyone
  26. EngineeringMay 21, 2025Understanding SLAs, SLOs, SLIs and Error Budgets
  27. SAML Example: How Single Sign-On (SSO) Works with Real Apps
  28. jwts.dev – Decode and learn about JWTs in one place
  29. If an AI agent can’t figure out how your API works, neither can your users
  30. CompanyMay 18, 2025Why we hack: the culture of company hackathons at Stytch
  31. npm-audit for MCP security: A deep-dive on mcp-scan
  32. Building an MCP server with OAuth and Cloudflare Workers
  33. What is a SAML service provider? How to integrate your app with enterprise Single Sign-On
  34. MCP and OAuth Dynamic Client Registration
  35. MCP authentication and authorization servers
  36. Handling AI agent permissions
  37. OAuth 2.1 vs 2.0: What developers need to know
  38. AI Agent Security: How to Authenticate, Authorize, and Monitor Agents
  39. Model Context Protocol (MCP): A comprehensive introduction for developers
  40. A developer’s guide to RFC 7519, part 1: JWT structure and claims
  41. Authentication as a service: Launch faster with stronger security
  42. Auth0 reviews: Why developers migrate from Auth0 to Stytch
  43. Authentication bypass in node-saml
  44. Connecting AI agents to every app
  45. Stytch User Impersonation: Fast, secure troubleshooting
  46. Stytch Terraform: Now generally available
  47. Stytch Fraud & Risk Prevention: Intelligent Rate Limiting, real-time monitoring, and more
  48. CompanyFeb 15, 2025Rebranding Stytch: A new look for the future of auth and security
  49. Why email verification is crucial for B2B applications

2024 20

  1. What Is Anonymous Visitor Identification? How to Identify Visitors to your Website or App
  2. Auth0's Security Incidents: How JWT Vulnerabilities Have Repeatedly Impacted the Platform
  3. Anti-spoofing tools and techniques
  4. Auth0’s 2024 Pricing Update: What They’re Hiding About the Real Costs
  5. SAML certificates explained
  6. What are SAML assertions?
  7. SAML vs LDAP: What's the difference?
  8. Stopping an account takeover before it takes a toll
  9. SCIM API: Your comprehensive guide and introduction
  10. Identity security: The key to access, compliance and trust in the digital era
  11. Webhooks security best practices
  12. Application security in the age of artificial intelligence: adapting to new challenges and opportunities
  13. Managing user sessions: localStorage vs sessionStorage vs cookies
  14. Unpacking MACH architecture: The future of SaaS development
  15. B2B SaaS applications: A comprehensive overview
  16. What is SaaS integration and why should developers consider it?
  17. What is attribute-based access control (ABAC)
  18. Keycloak alternatives for enterprise authentication and identity management
  19. How to securely implement M2M authentication and authorization in Node.js using Stytch
  20. What is a reverse proxy?

2023 30

  1. Scalper bots: The box office boom no one wants
  2. Apply by API: Making job applications developer-focused
  3. Beating back bot fraud in 2024
  4. Introducing Passkeys authentication
  5. Log in with Passkeys: an example app using React and Stytch’s frontend SDK
  6. What is a common indicator of a phishing attempt?
  7. One-Time Password (OTP) bots: what they are and how to stop them
  8. What is fraud prevention?
  9. What is SIM-swap scam, and how can you protect your users against one?
  10. So you want to write an Engineering career ladder?
  11. Extending authorization code flows with PKCE
  12. What is an enumeration attack?
  13. Generating "humanlike" code for our backend SDKs
  14. The journey to ISO 27001 certification
  15. An engineer’s guide to mobile biometrics: Android Keystore pitfalls and best practices
  16. Introducing B2B Authentication
  17. An engineer's guide to mobile biometrics: event- vs result-based
  18. Stytch Talks with Enzo Avigo: Building a high-performing B2B sign up flow
  19. IdP- vs SP-initiated SSO
  20. What is SOC 1 Type 2?
  21. Authentication vs. authorization: what you need to know
  22. Foundations of scalable B2B auth
  23. Argon2 vs bcrypt vs. scrypt: which hashing algorithm is right for you?
  24. What is passwordless authentication?
  25. What are one-time passcodes (OTPs)?
  26. Balancing security and adoption: Preventing account takeover fraud with multi-factor authentication
  27. TOTP vs SMS: Which one is better for two-factor authentication (2FA)?
  28. JWTs vs. sessions: which authentication approach is right for you?
  29. Stytch honored with BuiltIn's 2023 Best Places to Work award
  30. What is Security Assertion Markup Language (SAML) and how does it work?

2022 41

  1. What is OpenID Connect (OIDC)?
  2. Securing AI against bot attacks
  3. Stytch + Cerbos + FastAPI: Flexible authentication meets decoupled role and access management
  4. SSO protocols: SAML vs. OIDC
  5. Designing Passwords in the Stytch SDKs
  6. Engineering the engineering team
  7. Introducing B2B Auth School
  8. Anatomy of a strong password
  9. Do passkeys live up to the hype?
  10. Stytch Q3 wrap-up
  11. The importance of investing in unphishable authentication
  12. Go big or go home: why it’s never too early to think about enterprise
  13. How we (re)made Passwords for next-generation auth
  14. How compromised passwords lead to data breaches
  15. What is TOTP and why does it matter?
  16. Step-up versus multi-factor authentication (MFA)
  17. How to prevent account takeover (ATO) and improve user authentication
  18. A founder’s guide to raising your seed round
  19. How Apple’s passkeys just brought us one step closer to a passwordless internet
  20. It's a Stytchiversary! Meet Shane O'Neill!
  21. Landing Email Magic Links in your user's inbox
  22. Vessel + Ratio: making crypto accessible
  23. Behind the scenes with Vessel: designing a brand for the first-ever passport for the internet
  24. Introducing Vessel, powered by Stytch
  25. It's a Stytchiversary with Cass Roulund!
  26. Web3 and the future of data portability: rethinking user experiences and incentives on the internet
  27. FinanceNow demo app - powered by Argyle, Unit, and Stytch
  28. It's a Stytchiversary with Jeremy Kaplan!
  29. Stytch’s new Javascript SDK
  30. Build a custom client portal on Airtable using Sequin, Stytch and Next.js
  31. Introducing Log in with Ethereum
  32. Auth0 pricing (and four other reasons to choose Stytch)
  33. What is WebAuthn?
  34. It's a Stytchiversary! Meet Nikhil Dilip, software engineer
  35. Build vs. buy: what to consider when setting up an auth flow
  36. 5 Lessons for founding designers: what I’ve learned in my first year at Stytch
  37. We've moved!
  38. What is the purpose of a refresh token?
  39. SDK vs. API: What's the difference?
  40. 10 common cyber attacks
  41. Bingrui Tang

2021 10

  1. An introduction to WebAuthn
  2. Announcing Stytch's $90M Series B at a $1B Valuation
  3. Engaging users with embedded authentication
  4. Nathan Chiu
  5. Grace Baelen-King
  6. Now, route-based models are making it easier for apps to verify users without compromising engagement.
  7. A founder's guide to hiring engineers
  8. Announcing our SOC 2 Type II
  9. The rise of cool APIs
  10. Announcing our seed round

Undated 138

  1. What is scim and how does it work
  2. Ai agent fraud
  3. Single sign on sso
  4. What is unphishable mfa
  5. Web scraping
  6. Remote dev 1
  7. Embedded auth vs universal login
  8. Integrating saml sso with python okta stytch
  9. What is password hashing
  10. Choosing a b2b auth provider
  11. Enveloop stytch
  12. Agent ready ep4 cloudflare deploying remote mcp at the edge
  13. Stytch talks with brian hale
  14. Session management best practices
  15. Derek st onge
  16. Danny thomson
  17. What does compiler theory have to do with auth
  18. Scim protocol explained
  19. What is oauth 2 0
  20. Drop in ui support for web3 logins in the stytch sdk
  21. Making auth your growth lever
  22. Adding passwordless to passwords
  23. What is password salting
  24. Bot mitigation software
  25. What is browser fingerprinting
  26. Stytch planetscale integration
  27. Guide to choosing ciam
  28. What are webhooks
  29. Stytch named top authentication provider by cybernews
  30. Ai agent authentication guide
  31. Stytch talks with jaren glover
  32. Why switch to stytch
  33. Designing for dark mode
  34. Identity and access management
  35. Stytch talks jordan burris mfa
  36. Single sign on example
  37. Announcing our 30 million series a
  38. Prevent enumeration attacks
  39. The complete guide to m2m auth
  40. Understanding jwks
  41. Passkey authentication the cure for password dependency
  42. Whaling phishing attacks
  43. Agent ready ep1 langflow rag workflows and agent development
  44. Passkey vs password
  45. How to block ai web crawlers
  46. Introducing saml shield
  47. Stytch admin portal
  48. The age of agent experience
  49. Onboarding the next web3 wave with crossmint stytch
  50. Biometrics step by step
  51. Stytch vs amazon cognito
  52. Leading with user centered design at stytch
  53. Prevent contact form spam
  54. Log in with username
  55. Meet aiden forrest ovadia harary
  56. Introducing log in with solana
  57. Top 10 password cracking techniques
  58. Stytch postmortem 2023 02 23
  59. Agent ready ep8 anthropic cloudflare arcade agent architecture
  60. Jwt claims
  61. Feathery stytch
  62. Meet allison chuang
  63. Its a stytchiversary meet spyri karasavva
  64. Auth0 alternatives
  65. Protect against password spraying
  66. Open sourcing sqx a way to build flexible database models in go
  67. Remote mcp stytch cloudflare
  68. Webhooks vs apis
  69. Save time save the planet
  70. Canvas fingerprinting
  71. Stytch connected apps
  72. User agent spoofing
  73. Stytch orb securing and pricing ai products
  74. The age of agent experience now with mcp servers
  75. Guide to passwordless authentication solutions by vertical
  76. Alex zaldastani
  77. Creating a closed source framework for spm
  78. The ultimate guide to building user authentication into your next js application
  79. Stytch vs auth0 bot detection
  80. Strong captcha announcement
  81. Rbac vs pbac vs abac
  82. Mcp security
  83. Bot mitigation for iam
  84. How to enforce multi factor authentication with node js
  85. Developer conferences
  86. Stytch guide to passwordless authentication
  87. All about biometrics
  88. How to use references in your hiring process
  89. Best authentication services
  90. Improving conversion with google one tap
  91. Forget the password reset flow as you know it
  92. Agent ready ep4 stytch identity auth and consent for ai agents
  93. What is voice biometric authentication
  94. What is rbac
  95. What is a json web token
  96. 4 ways to use stytchs embeddable magic links
  97. Detecting ai agent use abuse
  98. User linking and provider failover with stytch
  99. Scim api explained
  100. Bears mice and moles aren t enough a better approach for preventing fraud
  101. The making of an ooh campaign
  102. Mary gruen
  103. Bot detection how to detect bot traffic
  104. Introducing passwords
  105. Spotlight dennis huang
  106. What is captcha
  107. Protect against captcha fraud
  108. Securing identity apis against ssrf
  109. Organization tenancy
  110. Announcing new pricing and self serve options
  111. Stytch cli connected apps
  112. Which mfa is right for your business
  113. Introducing totp authentication
  114. Account abuse prevention in 2024
  115. What is a bot
  116. The api economy can transform your business
  117. Api rate limiting
  118. Ai didnt defeat auth single factor did
  119. Optimizing dbs at scale
  120. Mfa solutions and providers
  121. Password reuse is a cybersecurity threat
  122. Stytch multi tenant example apps
  123. Fido passwordless authentication
  124. Upleveling sql for dbt query speeds
  125. Stytch log streaming
  126. Adaptive mfa
  127. Auth0 rules and hooks deprecation disadvantages
  128. What is credential stuffing
  129. Introducing jwts for session management
  130. Saml vs oauth
  131. Major updates to stytch b2b authentication
  132. Building the future of authentication
  133. Passwordless authentication solutions
  134. Stytch self serve pricing
  135. Captcha vs recaptcha whats the difference
  136. What is a passkey
  137. Combating ai threats stytchs device fingerprinting
  138. What is mfa