Subscribe
Sign in
Stytch Fraud & Risk Prevention — Stop bots, fraud, and abuse with industry-leading accuracy
Powerful fingerprinting technology stops bots and fraud from accessing your app. With 99.99% bot detection accuracy, it delivers risk verdicts & actions, features intelligent rate limiting, protects against reverse-engineering, and preserves user privacy.
36
Replies
@annaho2000 yes! We plan to continue identifying opportunities to incorporate ML into the product. Our intelligent rate limiting product does this already, identifying anomalies in traffic patterns and automatically blocking accordingly.
Hi Product Hunt Community! I’m Julianna, founder and CTO of Stytch. We’re a team that wants to make it easier for you to scale your applications and keep them secure.
We’re excited to announce today a radical new approach to protecting applications and users against fraud and abuse.
🚩The Problem: Auth alone is no longer enough
While we’ve spent the last few years focused on building better authentication infrastructure for developers, we’re seeing a worrying trend where threats are becoming more sophisticated and more pervasive - thanks in no small part to AI. Even the strongest methods can fall short and leave your app susceptible to:
- Free tier abuse and programmatic fraud. Your app needs a better understanding of who each user is when they log in, going way beyond self-reported attributes.
- Account takeover. Your app needs to evaluate what specifically a given auth method attests to, and how it interacts with other vectors.
- Account theft. Social engineering, phishing, and session hijacking are all very difficult to mitigate unless your app is collecting low-level sub-signals to understand if the user is really who they claim to be.
🚫 Limitations of Current Solutions
WAF and CAPTCHA only look at parts of the problem. These solutions are either incomplete, not very accurate or use blunt force methods that ruin the user experience. They’re reasonable as a first line of defense but work at a pretty broad level (e.g, IP address range) and can’t evaluate and shape traffic at a granular level. And they’re simply not built for the sophisticated attacks we see today.
🚀 Introducing Stytch Fraud and Risk Prevention
Stytch’s new solution delivers the industry's most accurate and intelligent fingerprint-based solution. It’s completely integrated with our auth platform - or can be used as a standalone security product. It offers the most accurate device fingerprint using a broad collection of standard and proprietary signals from across:
- Software stack and OS version
- Browser sub-signals and capabilities
- Passive network TLS fingerprinting
- User attributes
- Hardware architecture and resources
And to combat advanced fraud, we’ve released these new cutting-edge features:
* Security Rules Engine: For every fingerprinted visitor, Stytch returns a clear verdict of whether that visitor should be allowed, blocked or further challenged before being granted access. These rules are further configurable via either the Stytch dashboard or programmatically via our API.
* Intelligent Rate Limiting: The Stytch solution also supports fine-grained rate limiting. Unlike network-focused solutions, when Stytch identifies a potential vulnerability it can limit the specific device or set of devices that are the offenders. Whereas other bot mitigation solutions might rate limit an entire IP address range, with both good and bad actors.
* ML-Powered Device Detection: While the foundation of our fingerprinting solution is deterministic and rules-based, we’ve also introduced a machine learning model to accelerate device detection and categorization, further improving zero-day threat detection and overall user experience.
Stytch's Fraud and Risk solution offers industry-leading accuracy in detecting bots and bad actors, even when methods like browser automation frameworks or user agent deception are employed. Unlike other fingerprinting solutions, it is resistant to reverse engineering and tampering, natively integrates with authentication, and delivers low latency for a seamless user experience.
We think we’ve created something really special here and we’re eager for feedback from the Product Hunt community!
Super excited to be a part of this launch and get to hear from customers like Replit, Pixels and Hubspot that are already using this product as critical security infrastructure for their app to protect against bots, fraud and abuse
Love this. Really innovative approach to fraud prevention and a great solution for modern threats. Congrats on the launch!
Thanks for sharing, Lenny! Stytch's new solution sounds promising. With online fraud becoming more sophisticated, it's great to see innovations in prevention. I'm curious about how it balances security with user experience - does it add any noticeable friction for legitimate users? Also, that 99.99% bot detection accuracy is impressive if it holds up in real-world use. Might be worth looking into for our app's security upgrade.
@andyroamer thanks for the feedback! The 99.99% is based on real world data, it's from our experience with our early customers where we've seen hundreds of millions of fingerprints.
There's no friction for users, unless you choose to introduce friction for potentially risky interactions in the rare cases you get a challenge verdict from us. But for most users, they don't need to do anything, we'll passively gather all the signals we need to generate the fingerprints.
Hey Julianna and the Stytch team! 🌟 This new Fraud and Risk Prevention solution sounds like a monumental step forward in application security. The range of threats you’re addressing—from free tier abuse to sophisticated account takeovers and theft—is truly impressive. Your device fingerprinting approach, combining software stack insights with ML-powered detection, promises to bring unprecedented accuracy and resilience against even the most advanced attacks. The Security Rules Engine and Intelligent Rate Limiting are particularly exciting features, offering robust protection without compromising user experience. Integrating this seamlessly with your existing auth platform, or as a standalone product, is a fantastic move. Kudos on this game-changing innovation! 🚀🛡️ @jelamb
@kevinyaoooooo Thanks so much! Our solution has a few major UX improvements over traditional CAPTCHAs.
First, our solution can operate invisibly in the background. Visitors can be vetted and identified without any prompts. This means no more unnecessary clicks or frustrating visual challenges disrupting key user flows in your app. You can check out a customer story from Replit here: https://stytch.com/customer-stor...
Second, our solution provides stable identifiers for every visitor, which means you can tailor app-specific "step-up" or "challenge" flows beyond CAPTCHAs. Our new example app showcases how to leverage Stytch to implement Adaptive Multi-Factor Authentication, prompting users for MFA only when logging in from a new or unrecognized device. It demonstrates key use cases including new user login and MFA enrollment, returning users logging in on recognized devices, and MFA prompts for unrecognized devices.
And on the security side, it's no contest. Unlike traditional CAPTCHAs, which can be bypassed by AI or click farms, Stytch uses fingerprinting signals to detect bots or ensures that the same device that requested the challenge completes it.
The blend of advanced fingerprinting technology and intelligent rate limiting is super impressive. Your approach to tackling sophisticated threats with such precision is bound to make a huge difference in app security.
This sounds like a super smart solution to a growing problem! Love how Stytch is going beyond just auth to really address sophisticated threats. Excited to see how the intelligent rate limiting and ML-powered detection works in practice. Congrats on the launch, can't wait to try it out.
Launching soon!
@lenny_rachitsky Kudos on the stellar launch, Stytch Fraud & Risk Prevention team! Your advanced fingerprinting technology is revolutionizing app security with unparalleled bot detection and fraud prevention. It’s exciting to see your focus on both accuracy and user privacy. How do you anticipate your fraud prevention measures influencing user trust and retention? At InterWiz, we’re transforming the hiring landscape with AI-driven evaluations, enabling recruiters to seamlessly identify top talent, thereby fostering more robust and capable teams.
@lenny_rachitsky @haris_gul thanks for your feedback! the implications on user trust are similar to any other fraud detection and prevention product, it's important to ensure your TOS reflects accurately what data is being collected and how you're using that data. ultimately, using Stytch fingerprinting helps to keep users' accounts secure and so is beneficial for them.
Launching soon!
@lenny_rachitsky @jelamb I Love seeing your engagement and insights! If you could hover over the 'Coming Soon' badge next to my name and click 'Notify Me' on InterWiz AI, I'd appreciate your support—excited to hear your thoughts when we launch!
@mitia thanks for the feedback! we'd love to better debug this, our testing on mobile and with low bandwidth connections isn't reproducing this, if you'd be willing to send a screen capture of what you're seeing to support@stytch that would be awesome
This is awesome! I was just thinking the other day, of solutions to prevent bot and fraud traffic from attacking my website. Congratulations on your new solution, I will definitely be digging deeper.
Lenny’s Podcast