Postmark
SendGrid
Stripe
AlmanacThe agent with a second brain“WorkOS gives Almanac secure authentication and organization management that works from day one.”
AuthenticationMaker says so · source ↗
WorkOS
Auth and enterprise-readiness APIs: AuthKit user management, SSO, directory sync, audit logs.
Works with AI agents:llms.txtMCPAsk your AI about this, with this page as the source:ChatGPT ↗Claude ↗Perplexity ↗
WorkOS sells the identity features that B2B software needs when larger companies start buying it. AuthKit handles everyday sign-in, and separate APIs cover enterprise single sign-on, SCIM directory sync, roles and permissions, audit logs, bot and fraud detection (Radar) and encrypted secret storage (Vault).
With AuthKit's hosted UI your app redirects users to a WorkOS-hosted sign-in page, gets back an authorization code, and exchanges it for a user object, a JWT access token and a refresh token. Your backend validates the access token on each request against WorkOS's JWKS and swaps the refresh token for a new one when it expires; the Next.js, Remix and other AuthKit SDKs do this for you. You can skip the hosted page and build your own UI against the API. Backend SDKs exist for Node, Python, Go, Ruby, PHP, Java, .NET and Elixir, plus Laravel, React, Astro, TanStack Start, iOS and Android packages.
Useful for a small team: users and organizations are first-class, with one user per email and automatic identity linking; an Admin Portal lets a customer's IT admin set up SSO and directory sync without your help; and domain verification ties a company's email domain to its organization. WorkOS is a hosted service only, fronted by Cloudflare.
Its data model and most of its paid APIs are built around organizations and their IT departments, so a consumer app with no business customers uses only the basic sign-in part. There is no self-hosted option.
Where it fits
How WorkOS itself is built
3 tools, from its own code, website and Product Hunt page.
Who uses it
19 makers' products, each linked to the source that shows it, and 11 open-source projects that declare it in their code.
AlmanacThe agent with a second brain
VeloAI video infrastructure to explain, train, and sell faster“We chose WorkOS because it's straightforward to integrate and easy to work with. It let us add the features we needed without unnecessary complexity.”
AuthenticationMaker says so · source ↗
GAIAYour Personal AI assistant for email, calendar, tasks & more“Really simplified integration of auth”
AuthenticationMaker says so · source ↗
ParagonIntegrate with your users' other SaaS apps - 7x faster.“WorkOS made it extremely easy for us to add auth to our ActionKit playground - we also use them for SSO for our core product as well.”
AuthenticationMaker says so · source ↗
UnitPayPrice, bill, and prove value for your AI product“SSO, SCIM, and org management so we could say yes to enterprise deals on day one.”
AuthenticationMaker says so · source ↗
QuerriThe AI Data Analyst for Everyone“Querri is built for everyone, including the enterprise. WorkOS gives us fast, robust and secure authentication that we love.”
AuthenticationMaker says so · source ↗“Most secure way for users while making it easy to implement! Thanks!”
AuthenticationMaker says so · source ↗
Flipt CloudFeature flags. Powered by Git“WorkOS made it dead simple to add authentication to Flipt Cloud. Integrating with WorkOS allows us to have social authentication like GitHub and Google out of the box, along with enterprise-ready features like Single Sign On, SAML, and SCIM Directory Sync. WorkOS handles the auth, allowing us to focus on building a great product.”
AuthenticationMaker says so · source ↗
oqoqoBuild evals and custom benchmarks for real-world tasks“A lot of auth features came out of the box and we didn't have to stress about setting them up.”
AuthenticationMaker says so · source ↗
TellaScreen and webcam recorder with a built-in editor for making tutorial, course and produc…“WorkOS handles all authentication needs for our Tella users and teams, ensuring enterprise-level security and readiness. This is a recent switch, the migration also went very smooth.”
AuthenticationMaker says so · source ↗
TragAI code review tool that checks every pull request against rules written in plain Englis…AuthenticationMaker says so · source ↗
FluencyAutomatically generate step-by-step documentation“Way better than Auth0 (in our opinion)”
AuthenticationMaker says so · source ↗
HardenA security layer for AI coding agents“We use WorkOS for the enterprise identity pieces of Harden, so customers can get the access controls they need without us building that layer from scratch.”
AuthenticationMaker says so · source ↗
GlueAgentic, MCP-powered team chat turns talk into action“We were able to integrate with the WorkOS platform for SSO and directory sync in just weeks, where it would've taken us months on our own. Their docs, API, and support team are world-class.”
AuthenticationMaker says so · source ↗
Lunen.aiBuild AI agents your whole team can run, and control“Not only has WorkOS built in all the standard expectations you'd have for an Auth provider, they go beyond by making b2b features like organization separation, vault storage with BYOK, and go above and beyond with their customer support model. Really enjoy working with them.”
AuthenticationMaker says so · source ↗
HubbleRetrieve medical records other APIs can't“Accelerate SSO & organization management”
AuthenticationMaker says so · source ↗
MastraTypeScript framework for building AI agents, workflows, and RAG applications with memory…AuthenticationIn its code · source ↗
OpenStatusOpen-source, self-hostable status page and uptime/API monitoring tool, defined as code.AuthenticationIn its code · source ↗Open source: a project that declares WorkOS as a dependency in its public code — verifiable, but not necessarily a live product.
What makers say
12 makers on why they use WorkOS, in their own words on Product Hunt.
WorkOS made it dead simple to add authentication to Flipt Cloud. Integrating with WorkOS allows us to have social authentication like GitHub and Google out of the box, along with enterprise-ready features like Single Sign On, SAML, and SCIM Directory Sync. WorkOS handles the auth, allowing us to focus on building a great product.
Flipt CloudSep 2026 ↗We use WorkOS for the enterprise identity pieces of Harden, so customers can get the access controls they need without us building that layer from scratch.
HardenSep 2026 ↗We chose WorkOS because it's straightforward to integrate and easy to work with. It let us add the features we needed without unnecessary complexity.
VeloSep 2026 ↗WorkOS made it extremely easy for us to add auth to our ActionKit playground - we also use them for SSO for our core product as well.
ParagonSep 2026 ↗Querri is built for everyone, including the enterprise. WorkOS gives us fast, robust and secure authentication that we love.
QuerriSep 2026 ↗Loved and watch-outs
Themes that recur in makers' words and Hacker News comments, each linked to what it summarises, with how Product Hunt tags its reviews.
Most loved
- Enterprise SSO, SAML and SCIM directory sync arrive ready-made, integrated in weeks instead of months, so teams can close enterprise deals. PHHN
- Organization separation and B2B features come built in alongside standard social login. PH
- The free tier is permissive, and it works well even for B2C apps that skip enterprise features. HNHN 2HN 3
- Auth flows stay flexible enough for custom logic, with solid OAuth support for MCP servers. HNHN 2
Watch-outs
- When WorkOS has an outage, logins fail for every app that depends on it. HNHN 2
- SCIM integrations have broken for customers, and it withholds SAML and SCIM configs and password hashes, creating hard lock-in. HN
- Pricing is confusing and gets expensive as enterprise connections grow. HNHN 2
- A single shared development sandbox drifts out of sync with each engineer's local auth data. HN
On Product Hunt 5.0★ · 21 reviews
easy authentication integration 5quick onboarding 4enterprise-level security 3single sign-on 3minimal integration effort 2robust platform 2SAML support 2
Read the reviews on Product Hunt ↗Reliability and open issues
Incidents on its status page24 in the last 90 days, 11 major · 50+ in the last year
- minor Elevated errors for Audit Logs Oct 2026
- major Elevated API Errors Sep 2026
- major Elevated Admin Portal Errors Sep 2026
Who switches
Public pull requests on GitHub since Oct 2024 whose title says "X to Y" — real code changes moving a project from one tool to another, by developers in general. Open a row to see the pull requests.
Clerk → WorkOS6 PRs
- feat: migrate auth from Clerk to WorkOS AuthKitddelvalfraire/poc-workout-tracker · 2026-08-20
- feat(auth): migrate from Clerk to WorkOS AuthKitthefappybird/gallurio · 2026-06-13
- Migrate auth from Clerk to WorkOS + nav & pricing improvementshimayat-commits/growth-hub · 2026-05-16
- attempt to convert from clerk to workosNathanGrace/barely-my-sveltekit-template · 2026-03-29
- attempt to convert from clerk to workosdavis7dotsh/my-sveltekit-template · 2026-03-29
- feat: Migrate authentication from Clerk to WorkOS AuthKitZapdev-labs/zapdev · 2025-11-28
Auth0 → WorkOS5 PRs
- Move login from Auth0 to WorkOS AuthKitzagrajmy/ludamus · 2026-09-25
- Migrate authentication from Auth0 to WorkOSerauner/toolbridge-api · 2025-11-22
- Migrate from Auth0 to WorkOS AuthKit (generic OIDC)erauner/toolbridge-api · 2025-11-20
- Remove Auth0 references and switch to WorkOSRise-Republic/Websets · 2025-07-25
- feat: change enterprise login provider from auth0 to workOScrewAIInc/crewAI · 2025-05-21
Better Auth → WorkOS3 PRs
- feat(auth)!: migrate from Better Auth to WorkOS AuthKit (hybrid) [DEC-038]drshailesh88/caseflow · 2026-07-06
- [codex] migrate auth from better auth to workos authkitludicroushq/vertex · 2026-04-03
- Migrate from better auth to workos for SSO integrationAFAskar/Governance-Agent · 2026-02-04
WorkOS → Clerk4 PRs
- Migrate auth from WorkOS to ClerkFRC4392/DeceptiveHours · 2026-07-07
- Migrate auth from WorkOS to Clerkdanielnogueira8/LinkedInViralPostsSwipeFile · 2026-05-20
- feat: Migrate auth from WorkOS to ClerkShimizu-Technology/cornerstone-payroll · 2026-02-24
- Refactor: Migrate from WorkOS to Clerk authflyweightdev/convex-paddle · 2026-02-09
Alternatives to WorkOS
All alternatives by situation →Better AuthTypeScript apps that want users and sessions in their own database, at no cost.Compare with WorkOS →ClerkDropping prebuilt sign-in, profile and organization UI into a React or Next.js app.Compare with WorkOS →
Supabase
Firebase
Keycloak
Hexclave (Stack Auth)
SuperTokensOn Product Hunt, people weigh it against: Clerk, Auth0, PropelAuth, Stytch, BoxyHQ, Kinde, Descope, Hexclave (Stack Auth), Logto.
Questions makers ask about WorkOS
Which languages and frameworks have SDKs?
Official SDKs cover Node, Python, Go, Ruby, PHP, Java, .NET, Elixir and Rust, with AuthKit packages for Next.js, React, React Router, Remix, Astro, TanStack Start, Laravel, iOS and Android. source ↗
Do I have to use WorkOS's hosted sign-in page?
No. The hosted AuthKit UI is the fastest path and handles sign-up, password reset, SSO routing, MFA and bot blocking with your branding and domain, but the same features are exposed through the API so you can build your own sign-in UI. source ↗
How do sessions work?
After sign-in you receive a JWT access token, which you store in a secure cookie and verify on each request, and a refresh token you use to get a new access token when it expires. Refresh tokens can rotate, so always store the newest one. source ↗
Can I import users from Auth0, Clerk, Firebase or another provider?
Yes. WorkOS publishes migration guides for Auth0, AWS Cognito, Better Auth, Clerk, Descope, Firebase, Stytch and Supabase Auth, plus a generic path that imports email, name, verification status and password hash from your own data store. source ↗
How do my customers' IT admins set up SSO?
Through the Admin Portal, a WorkOS-hosted setup flow with step-by-step instructions per identity provider. You send them a link from the dashboard or open it from a button in your app, and they configure SSO, directory sync and domain verification themselves. source ↗
Is WorkOS SOC 2 and GDPR compliant, and will it sign a HIPAA BAA?
WorkOS is SOC 2 Type 2 certified and GDPR and CCPA compliant, with annual third-party penetration tests. It signs HIPAA business associate agreements for customers on enterprise plans. source ↗
What are the API rate limits?
The general limit is 6,000 requests per 60 seconds per API key, in staging and production alike, with lower limits on a few endpoints such as directory user listing. source ↗
Is WorkOS free?
Yes — there is a free tier a small product can run on; paid use starts at $125 per connection/mo. source ↗
Is WorkOS open source or self-hostable?
Not open source, and hosted only.
Can AI coding agents work with WorkOS?
It serves an llms.txt docs index; it has an official MCP server (com.workos/mcp).
Who uses WorkOS?
19 makers' products we track, each with a source, and 11 open-source projects declare it in their code. source ↗