Start Building

Login & Signup Authentication Add user login, signup, or API key validation to your app. Pick this if your app has users or protected endpoints. External provider JWT / OIDC Validate tokens from Auth0, Cognito, Clerk, Firebase, or any OIDC provider. Choose this if you already have an auth provider. Built-in accounts Ory Kratos Full built-in user management with signup, login, and password reset. Choose this if you don't have an auth provider yet. Attack protection WAF (Web Application Firewall) Blocks SQL injection, XSS, path traversal, and command injection attacks. Pick this if your app has forms, search, or any user input. AI safety Prompt injection detection Inspects outbound requests to LLMs for prompt injection patterns. Pick this if your app calls OpenAI, Anthropic, or any AI API. Webhook verification Webhook signature verification Validates incoming webhook signatures to prevent spoofing. Pick this if you receive webhooks from Stripe, GitHub, Slack, or Twilio. Secret vault OpenBao secret management Injects API keys, database credentials, and rotates secrets automatically. Pick this if your app connects to databases or third-party APIs with sensitive keys. IP allowlist / blocklist IP filtering Allow or block traffic by IP address or CIDR range. Pick this if you need to restrict access to specific networks or block known bad actors.