May 22, 2026
3 minutes read
606 WordsFrom growing startup to Twilio integration
Stytch and Latacora worked side by side to ensure that the developers and end users relying on Stytch’s platform benefited from a security program built for the sensitivity and criticality of the data involved. This journey, which began in February 2021, saw Stytch grow from an ambitious startup building passwordless authentication infrastructure into a mature platform, ultimately acquired by Twilio.
Security was central to Stytch’s business from day one. They’re selling auth infrastructure, and their customers are trusting them with the front door. As we conclude our partnership, we want to reflect on what we built together to protect that trust.
Securing the foundation
Stytch focused from the start on developer-friendly authentication infrastructure: passwordless login, MFA, and the plumbing that makes auth work at scale. Latacora joined early as an extension of the team, doing architecture reviews, threat modeling, and vendor assessments to make sure security was built in before Stytch shipped to customers, not retrofitted after.
Scaling securely was the theme of these early years. Latacora worked closely with Stytch leadership and engineering to ensure the security program could keep pace with a rapidly growing customer base, with protections in place before implementation rather than catching up to it.
Expanding security protections
As Stytch grew, Latacora stood up a full detection and response program, including a SIEM, MDR, and IR capability, to expand what Stytch could detect and respond to internally and on behalf of customers. This meant 24/7 monitoring, fine-tuned detections, and documented workflows prepared well in advance of any incident. Knowing Stytch’s environment deeply was what made the difference: signals got surfaced, not buried.
Latacora and Stytch also worked together to protect Stytch’s services against the 2025 SAML vulnerabilities and persistent supply chain attacks, hardening against new variants before they emerged.
Navigating the acquisition
In late 2025, Twilio formally acquired Stytch. Keeping security coverage uninterrupted through an acquisition required deliberate planning: new personnel, new tooling integrations, new organizational expectations, all without dropping the ball on ongoing monitoring.
Operations continued without interruption as Twilio personnel were onboarded into the shared security environment, including detection and response tooling and communication channels used for real-time alert triage, monitoring, detection, and incident response. Zero alerts went unreviewed, no coverage windows lapsed, and the security controls protecting Stytch customers and end users remained fully in force throughout. Because Latacora maintains a rigorous set of internal security practices designed to support clients as they mature their own security capabilities, accounts and licenses are provisioned to ensure clients can seamlessly take ownership of these tools. For Stytch customers, the transition was invisible by design.
Partnership lessons
Strong security programs, including the one we built with Stytch, aren’t the work of any one team or tool. They’re built by the right combination of domain expertise and security specialization, with a shared definition of what success actually looks like.
For us, that definition was consistent throughout: a customer building on Stytch’s platform should benefit from a security program as rigorous as the service they’re consuming. The team felt empowered to reach out for advice at any stage, and our recommendations consistently tracked with where Stytch wanted to go.
What remains
The sign of a successful partnership is what’s still standing when it winds down: mature programs, embedded practices, and customer protections that keep running regardless of who operates them. That’s what this collaboration produced: a security foundation that carried Stytch through growth, scale, and into Twilio’s ecosystem without missing a step. We’re proud of what we built together, and proud of what it means for the customers who trust Stytch.