Modernize your SAML SSO security.
Secure your stack from SAML vulnerabilities and assertion exploits with SAML Shield. Open source, protocol-aware, and production-ready.
Keep your existing SAML stack.
Compatible with any language or system.
Zero changes to your IdP.
Modernize your SAML SSO security.
Secure your stack from SAML vulnerabilities and assertion exploits with SAML Shield. Open source, protocol-aware, and production-ready.
Get StartedKeep your existing SAML stack.
Compatible with any language or system.
Zero changes to your IdP.
Drop-in protection that works for any stack.
Embed SAML Shield directly.
Validate assertions before they hit your application’s code with open source and Stytch-managed options.
Or protect your stack via proxy.
Stay protected from the latest CVEs without relying on SaaS providers making timely updates.
Protect against SAML exploits at the source.
SAML's permissive specification and XML-based design make it vulnerable to a range of attacks.
XML signature wrapping
Replay attacks
Entity injection
Unsigned assertions
Block assertions in real time.
Stop attacks before they reach your app.
SAML Shield sits as a protocol-aware security layer on top of your SAML stack.
Validates all incoming assertions in real time and stops malicious ones before they hit application code.
Centralized logging and backtesting support coming soon!
Cross-stack protection.
Multiple CVEs, one fix.
Stop chasing patches against the same exploit that resurfaces across ecosystems.
Blocks known protocol-level exploits across Python, Ruby, Node.js, and more.
Hardened rulesets evolve with new CVEs so you don’t have to.
Security with a simple API call.
Compatible with any language or system.
Easy-to-implement without any code rewrites to your identity provider or existing SAML setup.
Easy to integrate into your existing stack, without rewrites.
Works with your application, edge proxies, or gateways.
Flexible deployment,
uncompromising protection.
Open source for full control, or use our managed option for zero-maintenance security.
Open source
Free, open source Node.js library.
Drop into your existing SAML stack with no rewrites.
Inspects assertions for exploit patterns before they're processed.
Managed
Integrate in any language with a simple API call.
Secure any SAML route via proxy: NGINX, Istio, and more.
Backtesting support—check if exploits were attempted as new vulnerabilities are discovered (coming soon).
Automatically receive the latest updates—no need to update dependencies and redeploy.
© 2025 Stytch. All rights reserved.