Platform > Security # Built-in security. At every step. Auth0 helps you create trusted experiences with layered identity defences that power growth, not friction. - [Get started](https://auth0.com/signup?place=platform-hero&type=button&text=get%20started) - [Talk to sales](https://auth0.com/contact-us?place=platform-hero&type=button&text=talk%20to%20sales) ## How Auth0 does security We handle identity security, so you don’t have to. ### Build trust at every step Built-in identity security helps deliver reliable experiences your customers expect. Turn unknown users into trusted, repeat ones. ### Secure smarter Simplify access for trusted users. Get tougher on threats. Go passwordless, configure adaptive MFA policy for risk, strengthen API security, and much more. ### Save time and resources Automate and orchestrate identity security flows with no-code and pro-code Actions, and deploy faster. ## Protection at every touchpoint Identity is security, and it is more than [SSO](https://auth0.com/features/single-sign-on) or an MFA checkbox. We take a multi-layer approach to securing every stage of the customer journey. ### Before login **Bot Detection** Detect automated attacks like fake signups and credential stuffing using 60+ risk signals, ML-powered detection models, and respond with user-friendly challenges like Auth Challenge. [Learn more](https://auth0.com/docs/secure/attack-protection/bot-detection) **Tenant Access Control List** Stop known threats before they even hit your login flow. Filter suspicious traffic by IP, ASN, fingerprint, geography, or leverage Auth0’s curated threat intelligence lists to protect your apps and respond faster. [Learn more](https://auth0.com/docs/secure/tenant-access-control-list) **Supplemental Signals** Strengthen your security with a multi-layered defense by combining Auth0’s Attack Protection with third-party threat intelligence signals. Gain the granular visibility needed to trigger smarter, risk-based step-up challenges. [Learn more](https://auth0.com/docs/secure/attack-protection/use-akamai-supplemental-signals-actions) ### At login **Brute-Force Protection** Prevent high-velocity attacks on a single user account by detecting repeated failed login attempts, blocking the IP, and alerting the affected user. [Learn more](https://auth0.com/docs/secure/attack-protection/brute-force-protection) **Suspicious IP Throttling** Prevent high-velocity attacks on multiple user accounts. Detect and block traffic from any IP address that rapidly attempts too many logins or signups. [Learn more](https://auth0.com/docs/secure/attack-protection/suspicious-ip-throttling) **Passwordless** Offer more secure and easy alternatives to passwords like phishing-resistant passkeys. Allow users to log in quickly and securely the same way they unlock their mobile devices. [Learn more](https://auth0.com/docs/authenticate/passwordless) **Breached Password Detection** Prevent known breached credentials at sign-up, login, or password reset. Detect use of compromised credentials, block, and notify the user in real-time. [Learn more](https://auth0.com/docs/secure/attack-protection/breached-password-detection) **Credential Guard** This is our advanced version of Breached Password Detection. Detect compromised credentials faster with a dedicated security team and support for 35+ languages and 200+ regions. [Learn more](https://auth0.com/docs/secure/attack-protection/breached-password-detection#detect-breaches-faster-with-credential-guard) **Adaptive MFA** Set up a contextual and step-up MFA policy to assess risk signals like new devices, networks, locations, and untrusted IPs. Use out-of-the-box risk scoring or configure step-up policies to prompt for MFA only when the risk is elevated. [Learn more](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa) ### After login **Continuous Session Protection** Monitor and manage user sessions with custom logic in Actions. Prevent session hijacking and revoke suspicious sessions. Set custom timeouts for session or refresh tokens. [Learn more](https://auth0.com/docs/secure/continuous-session-protection) **Highly Regulated Identity** Step up security and privacy for sensitive customer interactions with Strong Customer Authentication (SCA) and Financial Grade APIs (FAPI). Gain more control over your encryption keys for your compliance requirements with Customer Managed Keys. [Learn more](https://auth0.com/docs/secure/highly-regulated-identity) **Universal Logout** Elevate security for your business customers using Okta Workforce Identity by automatically logging users out of SaaS apps when a logout or deprovisioning event occurs. [Learn more](https://auth0.com/docs/authenticate/login/logout/universal-logout) ## Level up your security posture How resilient is your org? These Auth0 observability tools help you get proactive with protection, and reduce detection and remediation response times for threats. ### Security AI Agent An agent that monitors your Auth0 tenant for identity-based attacks, notifies, and guides your team to a resolution. You approve every action before it’s applied. ### Log Streams Stream relevant Auth0 log activity to third-party SIEM and SOAR tooling for faster detection and response. With custom business logic, automate response to security threats, outages, new sign-ups, and more. [Learn more](https://auth0.com/docs/customize/log-streams) ### Security Center Detect and respond to attacks faster with a dashboard of real-time observation tools. Get intelligent insights into identity events, anomalies, and efficacy. Set custom threshold alerts and receive notifications that easily integrate with SIEM tools. [Learn more](https://auth0.com/docs/secure/security-center) ## Customer Quotes > "If we had to build MFA on our own, or brute-force protection, I think we would have needed five, six, seven developers for running and building the project." > — Alessandro Orru, Senior Engineering Manager, Moneyfarm > [Read more](https://www.okta.com/customers/moneyfarm/) > “[Our engineers] don't have to build all the security around it, they don't have to deal with managing it from our database people's perspective, they don't have to deal with managing any usernames or passwords. It's all taken out of our hands.” > — Scott Scherer, CIO, Jersey Mike's > [Read more](https://www.okta.com/customers/jersey-mikes/) > “Security is a really good commodity we can get from Auth0 rather than building it ourselves. By offsetting that to a product like Auth0, we can accelerate faster and just focus on the core business functionality.” > — Antony Sohal, Head of Data Platforms, Dunelm > [Read more](https://auth0.com/case-studies/dunelm) ## Auth0 Marketplace Security is a team sport. Discover and enable the integrations you need for your security stack. - [Explore Auth0 Marketplace](https://marketplace.auth0.com/) ## Want to learn more? - [Whitepaper: Identity Security 101 Checklist](https://auth0.com/resources/whitepapers/identity-security-checklist) - [Webinar: Identity Security Masterclass](https://pages.okta.com/WBN-OND-Auth0-SecureEveryStage-LP.html) - [Whitepaper: Security from the first click to the long haul](https://auth0.com/resources/whitepapers/security-from-the-first-click-to-the-long-haul/)