BTW, I've been working on building a security framework for .NET web apps (site not yet launched so not linking here) – it comes with several enterprise-grade security mechanisms (like automatic record/property-level permit checks for request data, entity suspension etc.).

We're fully supporting ServiceStack (both .NET Core and Framework).

Would you be open for some sort of collaboration?