This might already exist, but a user management as a service provider focused on security. I'm afraid that if I do a website and it is breached, all the users

This might already exist, but a user management as a service provider focused on security. I'm afraid that if I do a website and it is breached, all the users would suffer. Therefore I'd rather someone made a service that kept all sensitive user info, like email and password, separate from my webapp. The only way to access it would be via api over a unique user ID. Then I could worry about doing the website instead of about security. EDIT: Also, one teamt would fix bugs such as heartbleed, and everyone using the service would be secure. It would eliminate the security risks of leaving an old side project running.