Tell HN: Stytch Login SaaS Unicorn has common auth vulnerabilities
_TL;DR_: Stytch, a Login SaaS Unicorn, has no CRSF-protection in their authentication API and other questionable security practices, coupled with a nonexistent security policy.First of all: Why am I posting this on Hacker News instead of disclosing directly?From experience, a lack of security policies and of communication on existing vulnerabilities implies retaliatory practices when submitting...