moai-security

What problem does it solve?

This Skill provides comprehensive Auth0 security guidance, helping teams implement robust attack protection, configure multi-factor authentication, secure token handling, enable sender constraining, and verify compliance. It streamlines security configuration across Auth0 deployments, reducing risk and complexity.

Core Features & Use Cases

• Attack Protection guidance: configure bot detection, breached password detection, brute force protection, and IP throttling to reduce credential stuffing and abuse.
• MFA configuration: enable and manage multiple MFA factors, including WebAuthn, OTP, Guardian push, SMS, and adaptive MFA considerations.
• Token security & sender constraining: implement JWT, DPoP, mTLS, and token binding to reduce token theft and ensure legitimate clients.
• Compliance coverage: align with GDPR, FAPI, ISO/SOC2 standards, and licensing requirements for regulated industries.

Quick Start

Start by auditing your Auth0 tenant: enable Bot Detection with medium sensitivity, configure Brute Force Protection thresholds, activate at least one MFA factor, and enable DPoP/mTLS sender constraining.