Securing 2M+ accounts & $15B+ in assets, protected & secure
·
B5
Secure™
— per data-element authorization for .NET platforms
B5
Secure
™
Platform
Platform Overview
Never Trust Architecture
AI Agents & Agentic Identity
The Security Pipeline
Features · B1–B5
Advanced Cryptography
Security Extensions · 2026
Architecture Center
Pricing & Editions
Solutions
Solutions Overview
Industries · 13
Agentic Identity
AI Agent Security
Continuous Authorization
Workload Identity
Machine Identity
Zero Trust
Never Trust
Compliance
Financial-Services Security
Post-Quantum Security
Developers
Build with B5 Secure
Documentation, tools, SDKs, guides, and operational references in one developer system.
Open Developer Hub
→
Start building
Build with B5 Secure
Platform Start Here
Test Mode
Quick Start
Documentation
Documentation Home
.NET Getting Started
Implementation Guides
ServiceStack
Releases
Reference & tools
API Reference
Developer Tools
SDKs, Tutorials & Samples
Webhooks & Events
Demos
Trust Center
Trust Center
Compliance & Attestations
Security Controls
Software Supply Chain
Secure Development
Vulnerability Disclosure
Security Research
Post-Quantum Posture
AI Governance
Data Privacy
Status & Uptime
Legal Center
Resources
All Whitepapers · 42
Never Trust Whitepaper
Never Trust Thinking
Compare Platforms · 7
Blog
Newsroom
Media Resources
Company
Company
About B5 Secure
Leadership
Careers
Contact
Customers & Investors
Customers
Partners
Investors
Analyst Relations
Newsroom
Newsroom
Press Releases
Events
Brand & Media
Sign in
Start free
Skip to content
B5 Secure
533 million Facebook users’ personal data have been leaked
Acceptable Use Policy
Accessibility
All the way down to the data.
API & Documentation Terms
Architecture
Consistency Controls
Build with B5 Secure
Start Here
Test Mode
Quick Start
Developer Tools
Use Cases
Step-by-Step Guides
Secure a .NET API
Secure a Mobile Application
Secure an Apple iOS App
Secure a Google Android App
Secure a Chrome Browser Extension
Secure an On-Premises API
Secure a Partner API
API Reference
SDKs and Samples
Webhooks and Events
Enterprise Developer Portal
Buy a B5 Secure license
Careers
Compare
B5 Secure vs Auth0
B5 Secure vs CyberArk
B5 Secure vs Okta
B5 Secure vs OpenFGA
B5 Secure vs Oso
B5 Secure vs Ping Identity
B5 Secure vs SecureAuth
Contact
Cookies Policy
Critical RCE vulnerability in the popular Log4j Java package (Log4Shell)
Data Processing Addendum
Defending against XSS input injection in ASP.NET
Developers
Authority Extension Validator
Authorization Testing
Batch Authorization
Migration Tooling
Polyglot Protocol
Roslyn Analyzers
Runtime Coverage
The OCSF Authority Extension
Five Authorization Decision Samples
The Evidence Format and Offline Verifier
Does It Need Judgment, or Just Rules?
Evaluation Agreement
Gated whitepaper downloads
Getting Started
Governing AI Agents
Industries
Banking
Credit Unions
Critical Infrastructure
Financial Services
Government
Healthcare
Insurance
Retirement Platforms
Software & SaaS
Wealth Management
FinTech
Payments
Integration & Developer License
Legal & Agreements
License Agreement
Media resources
Microsoft
Azure Governance
Entra Agent ID
Entra Mapping
Sentinel and Defender
Mutual NDA
Newsroom
Platform
Decision Evidence Fabric
Policy Control Plane
Policy Simulation and Shadow Mode
B1 · XSS Screening
B2 · Authentication
B3 · IP Firewall & MFA
B4 · Verification & Suspension
B5 · Activity-Data Authorization
Co-Hosted, One Host
Security Extensions
Adaptive Identity Firewall
Co-Hosted, One Host
Granular Authorization
HMAC Request Signing
IP Firewall (Extensions)
Multi-Factor (Extensions)
Policy-Driven Suspension & CAE
Rules-Based Suspension
Activity-based, data-aware authorization (ADA)
The Security Pipeline
Privacy Policy
Production License Agreement
Request Demo
Roadmap
Q4 2026 Roadmap Extensions
Search
Security Glossary
Security Policy & Responsible Disclosure
Sign in
Solutions
Agentic Identity
AI Agent Governance
AI Agent Security
AI Security
API Security
Compliance
Continuous Authentication
Continuous Authorization
Digital Trust Infrastructure
Financial-Services Security
Fraud Prevention
Machine Identity Security
Never Trust
Post-Quantum Security
Supply Chain Security
Third-Party Risk Management
Workload Identity
Zero Trust
Zero Trust Modernization
Start your 30-day free trial.
Terms of Use
The 7 tenets of NIST Zero Trust Architecture (ZTA)
Trademark & Brand Policy
Trust Center
AI Governance
Compliance & Attestations
Document Room
Enterprise Service Management
Post-Quantum Cryptography Posture
Privacy Policy
Public Benchmarks
Secure Development Lifecycle
Security Controls
Software Supply Chain Security
Status & Uptime
Subprocessors
Vulnerability Disclosure & Incident Response
What B5 Secure Protects in Production
Understand Cross-Site Scripting (XSS) by examples
Whitepapers
Who we are
Your private Git repository might have been exposed by Azure App Service
Company
Leadership
Customers
Partners
Investors
Analyst Relations
Security Research
Press Releases
Events
B5 Secure
Media Kit
Brand Guidelines
Blog
Cloud & Data Platform Architecture
Advanced Cryptography
Confidential by Default
FIPS 140-3 Level 3
Multi-Person Control
Field-proven authorization patterns
Features
Account Management
Activity-Data Authorization
Administration
AI Agents & Agentic Identity
AuthCookie
Authentication
Feature Hiding
HMAC
Identities
Integrator Identification
IP Firewall
Key-Leakage Protection
Multi-Factor Authentication
Password / Credential Blocking
Professional Error Handling
Replay & Tamper Protection
Request Integrity & Expiration
Security Notifications
Service-HMAC
Service-Key
Source Packages
Strong Password Hashing
Suspension
User Account Verification
User Management
XSS Protection
Guides
Never Trust Whitepaper
Aggressively Verify Every Request
Assume Breach by Default
Detect Through Continuous Logging
Grant Least-Privilege Access
Limit the Data You Return
Secure the Whole Environment
Never Trust Thinking Series
Pricing
ServiceStack Support
Tutorials & Samples
Documentation
Authentication Schemes
Getting started
Getting started: ASP.NET Core MVC
Getting started: ServiceStack
Get started with source packages
The premium source package
The trial source package
Getting started: ASP.NET Core Web API
Introduction
Key Concepts
License Management
Project Templates
Releases
Source Packages
Suspension
Using the B5 Secure Tools
B5SecurityKit
B5SecurityKit.Authorization
B5SecurityKit.AuthProviders
B5SecurityKit.Net
B5SecurityKit.NetCore
B5SecurityKit.NetCore.Middleware
B5SecurityKit.NetFramework.Mvc
B5SecurityKit.NetFramework.WebApi
B5SecurityKit.ServiceStack
B5SecurityKit.ServiceStack.Validators
B5SecurityKit.Xss
API Reference
B5 Secure
533 million Facebook users’ personal data have been leaked
Acceptable Use Policy
Accessibility
All the way down to the data.
API & Documentation Terms
Architecture
Consistency Controls
Build with B5 Secure
Start Here
Test Mode
Quick Start
Developer Tools
Use Cases
Step-by-Step Guides
Secure a .NET API
Secure a Mobile Application
Secure an Apple iOS App
Secure a Google Android App
Secure a Chrome Browser Extension
Secure an On-Premises API
Secure a Partner API
API Reference
SDKs and Samples
Webhooks and Events
Enterprise Developer Portal
Buy a B5 Secure license
Careers
Compare
B5 Secure vs Auth0
B5 Secure vs CyberArk
B5 Secure vs Okta
B5 Secure vs OpenFGA
B5 Secure vs Oso
B5 Secure vs Ping Identity
B5 Secure vs SecureAuth
Contact
Cookies Policy
Critical RCE vulnerability in the popular Log4j Java package (Log4Shell)
Data Processing Addendum
Defending against XSS input injection in ASP.NET
Developers
Authority Extension Validator
Authorization Testing
Batch Authorization
Migration Tooling
Polyglot Protocol
Roslyn Analyzers
Runtime Coverage
The OCSF Authority Extension
Five Authorization Decision Samples
The Evidence Format and Offline Verifier
Does It Need Judgment, or Just Rules?
Evaluation Agreement
Gated whitepaper downloads
Getting Started
Governing AI Agents
Industries
Banking
Credit Unions
Critical Infrastructure
Financial Services
Government
Healthcare
Insurance
Retirement Platforms
Software & SaaS
Wealth Management
FinTech
Payments
Integration & Developer License
Legal & Agreements
License Agreement
Media resources
Microsoft
Azure Governance
Entra Agent ID
Entra Mapping
Sentinel and Defender
Mutual NDA
Newsroom
Platform
Decision Evidence Fabric
Policy Control Plane
Policy Simulation and Shadow Mode
B1 · XSS Screening
B2 · Authentication
B3 · IP Firewall & MFA
B4 · Verification & Suspension
B5 · Activity-Data Authorization
Co-Hosted, One Host
Security Extensions
Adaptive Identity Firewall
Co-Hosted, One Host
Granular Authorization
HMAC Request Signing
IP Firewall (Extensions)
Multi-Factor (Extensions)
Policy-Driven Suspension & CAE
Rules-Based Suspension
Activity-based, data-aware authorization (ADA)
The Security Pipeline
Privacy Policy
Production License Agreement
Request Demo
Roadmap
Q4 2026 Roadmap Extensions
Search
Security Glossary
Security Policy & Responsible Disclosure
Sign in
Solutions
Agentic Identity
AI Agent Governance
AI Agent Security
AI Security
API Security
Compliance
Continuous Authentication
Continuous Authorization
Digital Trust Infrastructure
Financial-Services Security
Fraud Prevention
Machine Identity Security
Never Trust
Post-Quantum Security
Supply Chain Security
Third-Party Risk Management
Workload Identity
Zero Trust
Zero Trust Modernization
Start your 30-day free trial.
Terms of Use
The 7 tenets of NIST Zero Trust Architecture (ZTA)
Trademark & Brand Policy
Trust Center
AI Governance
Compliance & Attestations
Document Room
Enterprise Service Management
Post-Quantum Cryptography Posture
Privacy Policy
Public Benchmarks
Secure Development Lifecycle
Security Controls
Software Supply Chain Security
Status & Uptime
Subprocessors
Vulnerability Disclosure & Incident Response
What B5 Secure Protects in Production
Understand Cross-Site Scripting (XSS) by examples
Whitepapers
Who we are
Your private Git repository might have been exposed by Azure App Service
Company
Leadership
Customers
Partners
Investors
Analyst Relations
Security Research
Press Releases
Events
B5 Secure
Media Kit
Brand Guidelines
Blog
Cloud & Data Platform Architecture
Advanced Cryptography
Confidential by Default
FIPS 140-3 Level 3
Multi-Person Control
Field-proven authorization patterns
Features
Account Management
Activity-Data Authorization
Administration
AI Agents & Agentic Identity
AuthCookie
Authentication
Feature Hiding
HMAC
Identities
Integrator Identification
IP Firewall
Key-Leakage Protection
Multi-Factor Authentication
Password / Credential Blocking
Professional Error Handling
Replay & Tamper Protection
Request Integrity & Expiration
Security Notifications
Service-HMAC
Service-Key
Source Packages
Strong Password Hashing
Suspension
User Account Verification
User Management
XSS Protection
Guides
Never Trust Whitepaper
Aggressively Verify Every Request
Assume Breach by Default
Detect Through Continuous Logging
Grant Least-Privilege Access
Limit the Data You Return
Secure the Whole Environment
Never Trust Thinking Series
Pricing
ServiceStack Support
Tutorials & Samples
Documentation
Authentication Schemes
Getting started
Getting started: ASP.NET Core MVC
Getting started: ServiceStack
Get started with source packages
The premium source package
The trial source package
Getting started: ASP.NET Core Web API
Introduction
Key Concepts
License Management
Project Templates
Releases
Source Packages
Suspension
Using the B5 Secure Tools
B5SecurityKit
B5SecurityKit.Authorization
B5SecurityKit.AuthProviders
B5SecurityKit.Net
B5SecurityKit.NetCore
B5SecurityKit.NetCore.Middleware
B5SecurityKit.NetFramework.Mvc
B5SecurityKit.NetFramework.WebApi
B5SecurityKit.ServiceStack
B5SecurityKit.ServiceStack.Validators
B5SecurityKit.Xss
API Reference
Search
Search
Search this site.
Every published page, searched as you type.
Search
Scroll to Top
