Back to Home

Security Analysis Results

stytch.com

Comprehensive domain security and infrastructure analysis

Live Website Preview

website screenshot of https://stytch.com

No Security Risks Detected

This domain appears to be safe and secure

100%
Score

Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.

Scan Information

Last checked:May 3, 2026 02:34:57
Target URL:https://stytch.com
Scan Complete

Refresh page after 10 minutes
for updated results

Page Information

Target URL
https://stytch.com
Page Title
Stytch - A better way to build auth
stytch.com faviconSite Favicon
Status
Active

Host Information

Domain
stytch.com
Server
N/A
Country
United States
IP Address
3.165.160.62
ASN Information
16509
AMAZON-02

Technologies

Sanity logo
Sanity
CMS
Node.js logo
Node.js
Programming languages
React logo
React
JavaScript frameworks
Amazon Web Services logo
Amazon Web Services
PaaS
Vercel logo
Vercel
PaaS
Next.js logo
Next.js
JavaScript frameworks
+14 more technologies detected

SSL Certificate

HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2026-05-02 02:35:02
Valid Until
2027-05-03 02:35:02
Subject Name
stytch.com

Performance Statistics

143
Total Requests
18
Domains
18
IP Addresses
2.77 MB
Transfer Size
Content Size12.34 MB

HTTP Headers

Cache-Control
private, no-cache, no-store, max-age=0, must-revalidate
Connection
keep-alive
Content-Encoding
gzip
Content-Type
text/html; charset=utf-8
Date
Sun, 03 May 2026 02:35:02 GMT
Referrer-Policy
origin-when-cross-origin
Strict-Transport-Security
max-age=63072000; includeSubdomains; preload
Transfer-Encoding
chunked
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
Via
1.1 e4104070519e32472f90baff69e3761c.cloudfront.net (CloudFront)
X-Amz-Cf-Id
CXYNiy53Qd5V5iugpHcVUL65_qMPbjL4Oxj5F6PsM_4r5MOTsQqoTw==
X-Amz-Cf-Pop
SFO53-P9
X-Cache
Miss from cloudfront
X-Content-Type-Options
nosniff
X-Powered-By
Next.js
X-XSS-Protection
1; mode=block
content-security-policy
default-src 'self'; script-src 'self' 'nonce-ZjcyN2MwMGQtNTU0Ny00NzEzLWE5MjEtMWI1MzE4YWI3ODQ2' 'strict-dynamic' https://static.stytch.com https://js.stytch.com https://*.hubspot.com https://js.hscollectedforms.net https://js.hsadspixel.net https://*.hs-scripts.com https://forms.hsforms.com https://tag.unifyintent.com https://elements.stytch.com/telemetry.js https://elements.staging.stytch.com/telemetry.js https://www.googletagmanager.com https://js.stripe.com https://js.verygoodvault.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.google-analytics.com https://www.gstatic.com https://snap.licdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://dc.ads.linkedin.com https://p.adsymptotic.com https://accounts.google.com https://js.hs-scripts.com/22036619.js https://js.hs-analytics.net https://js.hs-banner.com/22036619.js https://js.hscollectedforms.net/collectedforms.js https://www.redditstatic.com/ads/pixel.js https://*.ads-twitter.com https://js.hs-banner.com https://*.usemessages.com https://stytch.chilipiper.com https://*.trustarc.com; style-src 'self' 'unsafe-inline' https://static.stytch.com fonts.googleapis.com https://accounts.google.com; img-src 'self' blob: data: https://static.stytch.com https://*.hsforms.com https://*.hubspot.com https://*.hubspotusercontent-na1.net https://s3.us-west-2.amazonaws.com/secure.notion-static.com/ https://prod-files-secure.s3.us-west-2.amazonaws.com/ https://cdn.sanity.io https://stytch.com https://www.google.com https://googleads.g.doubleclick.net https://public-assets.stytch.com https://px.ads.linkedin.com https://customer-public-assets.stytch.com https://test-customer-public-assets.stytch.com https://www.google-analytics.com https://forms.hsforms.com https://track.hubspot.com https://t.co https://analytics.twitter.com https://*.reddit.com https://i.postimg.cc/fLDsw-Dhy/Dog2a.png https://www.googletagmanager.com https://*.trustarc.com; font-src 'self' https://static.stytch.com fonts.gstatic.com fonts.googleapis.com https://stytch.com https://*.trustarc.com; object-src 'none'; manifest-src 'self' ; worker-src blob: ; base-uri 'self'; form-action 'self' https://forms.hsforms.com; frame-src https://js.stytch.com https://*.hubspot.com https://forms.hsforms.com https://app.svix.com/ https://js.stripe.com https://hooks.stripe.com https://js.verygoodvault.com https://api.stytch.com https://api.stytch.com https://bid.g.doubleclick.net https://www.google.com https://accounts.google.com https://stytch.chilipiper.com https://www.youtube.com https://td.doubleclick.net https://www.googletagmanager.com https://www.loom.com https://*.trustarc.com; frame-ancestors 'self' https://stytch-web.sanity.studio/ https://www.sanity.io/@oEOb93N4D/; connect-src 'self' https://static.stytch.com https://*.hubspot.com https://*.hubapi.com https://forms.hscollectedforms.net https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://unifyintent.com https://telemetry.stytch.com https://telemetry.staging.stytch.com https://login.stytch.com https://api.stytch.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://*.google.com https://google.com/* https://*.google.com/* https://api.stripe.com https://webto.salesforce.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://web.stytch.com https://web.stytch.com https://accounts.google.com https://*.launchdarkly.com https://forms.hubspot.com https://api.chilipiper.com https://analytics.twitter.com https://*.reddit.com https://browser-intake-datadoghq.com https://stats.g.doubleclick.net https://analytics.google.com https://px.ads.linkedin.com wss://api.inkeep.com/graphql https://api.inkeep.com https://api.management.inkeep.com/graphql https://stytch.chilipiper.com https://*.sanity.io https://*.trustarc.com; upgrade-insecure-requests;
link
<https://static.stytch.com/web/_next/static/media/0d88537b187a9934-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZjcyN2MwMGQtNTU0Ny00NzEzLWE5MjEtMWI1MzE4YWI3ODQ2"; type="font/woff2", <https://static.stytch.com/web/_next/static/media/409477ea9dd55cb2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZjcyN2MwMGQtNTU0Ny00NzEzLWE5MjEtMWI1MzE4YWI3ODQ2"; type="font/woff2", <https://static.stytch.com/web/_next/static/media/86a4519c88efbac0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZjcyN2MwMGQtNTU0Ny00NzEzLWE5MjEtMWI1MzE4YWI3ODQ2"; type="font/woff2", <https://static.stytch.com/web/_next/static/media/cd4552eeffec99bd-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZjcyN2MwMGQtNTU0Ny00NzEzLWE5MjEtMWI1MzE4YWI3ODQ2"; type="font/woff2", <https://static.stytch.com/web/_next/static/media/dfbd1d15a72a5743-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZjcyN2MwMGQtNTU0Ny00NzEzLWE5MjEtMWI1MzE4YWI3ODQ2"; type="font/woff2", <https://static.stytch.com/web/_next/static/css/2c0eda2a95915f7f.css>; rel=preload; as="style"; nonce="ZjcyN2MwMGQtNTU0Ny00NzEzLWE5MjEtMWI1MzE4YWI3ODQ2"
18 headers detected

Technology Stack Analysis

Sanity

Sanity

CMS

Sanity is a platform for structured content. It comes with an open-source, headless CMS that can be customized with Javascript, a real-time hosted data store and an asset delivery pipeline.

Node.js

Node.js

Programming languages

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

React

React

JavaScript frameworks

React is an open-source JavaScript library for building user interfaces or UI components.

Amazon Web Services

Amazon Web Services

PaaS

Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.

Vercel

Vercel

PaaS

Vercel is a cloud platform for static frontends and serverless functions.

Next.js

Next.js

JavaScript frameworksWeb frameworks

Next.js is a React framework for developing single page Javascript applications.

Express

Express

Web frameworksWeb servers

Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.

Very Good Security

Very Good Security

Security

Very Good Security (VGS) is a data security and compliance platform that enables developers to securely handle sensitive data by encrypting, tokenising, and transmitting it through an intermediary service.

Twitter Ads

Twitter Ads

Advertising

Twitter Ads is an advertising platform for Twitter 'microblogging' system.

TrustArc

TrustArc

Cookie compliance

TrustArc provides software and services to help corporations update their privacy management processes so they comply with government laws and best practices.

Sendgrid

Sendgrid

Email

SendGrid is a cloud-based email delivery platform for transactional and marketing emails.

Linkedin Insight Tag

Linkedin Insight Tag

Analytics

LinkedIn Insight Tag is a lightweight JavaScript tag that powers conversion tracking, website audiences, and website demographics.

Linkedin Ads

Linkedin Ads

Advertising

Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.

HSTS

HSTS

Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Google Tag Manager

Google Tag Manager

Tag managers

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

Google Analytics

Google Analytics

Analytics

Google Analytics is a free web analytics service that tracks and reports website traffic.

Amazon S3

Amazon S3

CDN

Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.

Amazon CloudFront

Amazon CloudFront

CDN

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.

Webpack

Webpack

Miscellaneous

Webpack is an open-source JavaScript module bundler.

DocuSign

DocuSign

Miscellaneous

DocuSign allows organisations to manage electronic agreements.

Website Cookies 12

_ga

.stytch.com

Value
GA1.1.179825655.1777775707
Expires:6/7/2027

_ga_MJC82DS8T9

.stytch.com

Value
GS2.1.s1777775706$o1$g0$t1777775706$j60$l0$h0
Expires:6/7/2027

_gcl_au

.stytch.com

Value
1.1.1101231181.1777775705
Expires:8/1/2026

_gid

.stytch.com

Value
GA1.2.1630106909.1777775707
Expires:5/4/2026

_twpid

.stytch.com

Secure Strict
Value
tw.1777775706498.502247584916416680
Expires:5/28/2027

stytch-theme

stytch.com

Value
default
Expires:Session

TAsessionID

.stytch.com

Secure Lax
Value
[TAsessionID redacted]
Expires:5/3/2026

_gat_UA-192479833-3

.stytch.com

Value
1
Expires:5/3/2026

IndrXzVwRlN5RXZSX0hLenFHYkNDbVJ5YVNOV1FhTG80aEZuWjV3WmM1SkJSX2Fub255bW91c1VzZXJJZCI%3D

.stytch.com

Value
ImVmZjg5YWUxLTRhOTYtNDIyYy1iM2JjLTlhMDc5MWZiZDVjNyI=
Expires:5/3/2027

_dd_s

stytch.com

Strict
Value
aid=a315646b-4084-4330-9f04-61c5b060636c&rum=2&id=2164c4f2-da77-4348-ac1d-c28407f01312&created=1777775703698&expire=1777776603698
Expires:5/3/2026

stytch.com

Value
lax
Expires:Session

notice_behavior

.stytch.com

Secure Lax
Value
implied,eu
Expires:Session

External Links 8

See all frameworks

github.com

Analyze
Target URL
https://github.com/stytchauth

B2B Next.js

github.com

Analyze
Target URL
https://github.com/stytchauth/stytch-b2b-node-example

B2B React

github.com

Analyze
Target URL
https://github.com/stytchauth/stytch-b2b-react-quickstart-example

Consumer Next.js

github.com

Analyze
Target URL
https://github.com/stytchauth/stytch-nextjs-app-router-example

Product roadmap

stytch.productlane.com

Analyze
Target URL
https://stytch.productlane.com/roadmap

Slack community

stytch.slack.com

Analyze
Target URL
https://stytch.slack.com/join/shared_invite/zt-3aqo03e10-afWXyLzRIAlzGWJyF_~zHw

Terms of use

www.twilio.com

Analyze
Target URL
https://www.twilio.com/en-us/legal/tos

Privacy Policy

www.twilio.com

Analyze
Target URL
https://www.twilio.com/en-us/legal/privacy

Requested Domains 18

analytics.twitter.com

Unknown Type
No category information available

api.stytch.com

Unknown Type
No category information available

browser-intake-datadoghq.com

Unknown Type
No category information available

cdn.sanity.io

Unknown Type
No category information available

consent.trustarc.com

Unknown Type
No category information available

googleads.g.doubleclick.net

Unknown Type
No category information available

js.hsforms.net

Unknown Type
No category information available

px.ads.linkedin.com

Unknown Type
No category information available

snap.licdn.com

Unknown Type
No category information available

static.ads-twitter.com

Unknown Type
No category information available

static.stytch.com

Unknown Type
No category information available

stytch.com

Apex domain
Categories
TechnologyTechnology

t.co

Unknown Type
No category information available

telemetry.stytch.com

Unknown Type
No category information available

unifyintent.com

Unknown Type
No category information available

www.google-analytics.com

Unknown Type
No category information available

www.google.com

Unknown Type
No category information available

www.googletagmanager.com

Unknown Type
No category information available
LinkCheck

© 2026 LinkCheck. Secure domain analysis you can trust.