Published a security advisory on CVE-2025-29927 in Next.js middleware, warning that middleware-based authorization can be bypassed and recommending page-level auth checks and patched Next.js versions.
SourcePublic company, workplace, funding, and market signals
Updated Jul 30, 2026
Stack Auth’s current site is branded Hexclave, but public company profiles and YC still identify it as Stack Auth. It is an open-source, self-hostable developer infrastructure platform for authentication, authorization, and user management, especially for Next.js/React B2B apps. Public sources identify Konstantin Wohlwend and Zai Shi as co-founders; I did not find a separate official CEO page.
Primary product
Open-source authentication and user-management platform for web apps
Founded
2024
Headquarters
San Francisco, California, United States
Team size
1-10
Work style
Flexible
Industry
Software Development
Sub-industry
Authentication, authorization, and user management infrastructure
0 jobs at Stack Auth
Check back later for new openings
Offices
Business model
Stage
Pre-Seed
Total raised
$500K
Latest round
Pre-Seed · Sep 2024
Latest amount
$500K
Sep 2024 · Y Combinator
Investors
Small, agile, and ambitious builder culture that values intellectual curiosity. Public recruiting copy says the team nerds out about AI at lunch, philosophy after dinner, and hackathons on the weekend, with a San Francisco hacker-house base.
Work style
Flexible
Compensation
A public 2026 Summer SWE Intern listing cited $72,000 annual compensation. I did not find a public company-wide salary band or equity policy.
Pricing
Freemium; free self-hosted open-source core with paid cloud tiers
Differentiators
Technology
Customers
Competitors
Published a security advisory on CVE-2025-29927 in Next.js middleware, warning that middleware-based authorization can be bypassed and recommending page-level auth checks and patched Next.js versions.
SourceStack Auth Updates / Beehiiv · Aug 2025
Announced marketing email capabilities, custom email templates, email themes, and public email-sending endpoints.
LinkedIn · Jul 2025
Said the company added an AI agent to support docs questions and reiterated support channels via Discord and team@stack-auth.com.
Stack Auth blog · Mar 2025
Security advisory on CVE-2025-29927, explaining when middleware-based auth could be bypassed and which Next.js versions were patched.
Stack Auth Updates / Beehiiv · Feb 2025
Announced pure React components, a Neon collaboration, and a preview of a local emulator.
Y Combinator · Sep 2024
YC launch introducing Stack Auth as an open-source Auth0 alternative with self-hosting, cloud, B2B orgs, RBAC, React components, dashboard, webhooks, and customizable email triggers.