WorkOS
workos.com
What it is
WorkOS provides APIs and hosted components for SaaS companies adding enterprise capabilities to applications. Its User Management supports SAML and OIDC identity providers, social authentication, and passwordless email codes. Directory Sync handles SCIM provisioning and HRIS integrations for user lifecycle management. Customer IT administrators can configure identity providers and directories in a hosted Admin Portal with custom branding and a custom domain. Developers get REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java. AuthKit includes email and password, magic-code sign-in, MFA, passkeys, organization policies, JIT provisioning, RBAC, and CLI authentication. WorkOS lists API, iOS, and web platforms, plus integrations such as Okta, Microsoft Entra ID, Google Workspace, Salesforce, Slack, and Stripe. Pricing is freemium: free plans exist, while paid products start at $99/mo for Custom Domain and $125/mo for SSO or Directory Sync.
Spec sheet
- What it does
- WorkOS provides APIs and infrastructure that let SaaS applications add enterprise identity and administration capabilities.Read 15 Oct 2026 · workos.com
- Purpose
- WorkOS provides building blocks and APIs for adding enterprise features to applications.Read 10 Oct 2026 · workos.com
- Integrations
- The integration catalog includes SAML and SCIM providers, HR systems, OAuth services, React Native Expo, Supabase, Stripe and Segment.Read 15 Oct 2026 · workos.com
- Security
- WorkOS states it is SOC 2 Type 2 certified, GDPR and CCPA compliant, and undergoes annual third-party penetration tests and external code audits.Read 10 Oct 2026 · workos.com
- Support
- All accounts include email support, in-dashboard web support, API status notifications, documentation, and example apps.Read 10 Oct 2026 · workos.com
- Admin Portal
- The dashboard and Admin Portal provide visual configuration for SSO connections, directories and customer onboarding.Read 15 Oct 2026 · workos.com
- Audit Logs
- Audit Logs lets applications emit compliance events and stream logs to SIEM destinations.Read 15 Oct 2026 · workos.com
- Authentication
- Its User Management offering supports SAML and OIDC identity providers, social authentication, and passwordless email codes.Read 10 Oct 2026 · workos.com
- AuthKit features
- AuthKit includes social auth, email and password, magic-code sign-in, MFA, email verification, organization auth policies, JIT provisioning, passkeys, RBAC, and CLI authentication.Read 10 Oct 2026 · workos.com
- Authorization
- WorkOS documentation lists role-based and fine-grained authorization with custom roles and permissions.Read 15 Oct 2026 · workos.com
- Bot protection
- Radar detects and blocks bots, fraud and abuse, with geo blocking and credential-stuffing protection.Read 15 Oct 2026 · workos.com
- CLI
- The WorkOS CLI installs AuthKit integrations and manages organizations, users, roles, permissions, webhooks, feature flags and other resources.Read 15 Oct 2026 · workos.com
- Company identity
- Crunchbase lists the legal name as WorkOS, Inc., founded by Michael Grinich in 2019 and based in San Francisco.Read 15 Oct 2026 · crunchbase.com
- Company size
- LinkedIn lists WorkOS as a privately held software-development company with 51–200 employees.Read 15 Oct 2026 · linkedin.com
- Developer tools
- WorkOS describes REST APIs, JSON responses, webhooks, and SDKs for Node.js, Ruby, Python, .NET, Go, PHP, and Java.Read 10 Oct 2026 · workos.com
- Directory Sync
- Directory Sync imports and synchronizes users and groups from corporate directories and HR systems, including SCIM-based services.Read 15 Oct 2026 · workos.com
- Documentation depth
- Documentation includes product guides, integration guides, migration material, API objects, webhooks, errors, SDK references, tools and a weekly changelog.Read 15 Oct 2026 · workos.com
- Funding news
- Dealroom reported a $100 million Series C at a $2 billion valuation, led by Meritech and Sapphire, in March 2026.Read 15 Oct 2026 · dealroom.co
- HIPAA
- WorkOS says it can sign business associate agreements for customers on enterprise plans.Read 15 Oct 2026 · workos.com
- Limit: bot false positives
- A G2 reviewer reports Radar occasionally flagged legitimate users and required rule adjustments.Read 15 Oct 2026 · g2.com
- Limit: dashboard complexity
- A G2 reviewer describes the dashboard as potentially overwhelming and another says edge-case troubleshooting may require support.Read 15 Oct 2026 · g2.com
- Limit: integration effort
- Some G2 reviewers say integrations with existing tools required more custom code than expected.Read 15 Oct 2026 · g2.com
- Limit: pricing at scale
- G2 reviewers report that per-connection SSO costs can become expensive or rise quickly as connections increase.Read 15 Oct 2026 · g2.com
- Node requirement
- The current Node SDK requires Node.js 22.11 or newer and installs as @workos-inc/node.Read 15 Oct 2026 · github.com
- Notable release
- WorkOS announced Android and iOS SDK availability in August 2026.Read 15 Oct 2026 · workos.com
- Outage history
- Independent outage tracking records multiple 2026 incidents, including API errors, AuthKit failures, webhook delays and email-delivery delays.Read 15 Oct 2026 · pulsapi.com
- Praise: documentation and support
- G2 reviewers repeatedly praise clear documentation, responsive support and fast SSO or directory-sync implementation.Read 15 Oct 2026 · g2.com
- Praise: predictable pricing
- G2 reviewers describe pricing as predictable and easier to model than opaque enterprise authentication pricing.Read 15 Oct 2026 · g2.com
- Pricing limits
- WorkOS says SSO and Directory Sync are priced per connection, with each enterprise customer using either product counted as one connection.Read 10 Oct 2026 · workos.com
- Public API
- The WorkOS API is REST-based, accepts and returns JSON, uses standard HTTP verbs and status codes, and is hosted at api.workos.com.Read 15 Oct 2026 · workos.com
- Rating on G2
- 4.5 out of 5 from 26 reviews.Read 15 Oct 2026 · g2.com
- Rating on Product Hunt
- 5.0 out of 5 from 21 reviews.Read 15 Oct 2026 · producthunt.com
- Rating on TrustRadius
- 5 out of 10 from 1 review.Read 15 Oct 2026 · trustradius.com
- SDK coverage
- Official open-source SDKs are listed for .NET, Elixir, Go, Java/Kotlin, Laravel, Node.js, PHP, Python, Ruby, Rust, Android and iOS.Read 15 Oct 2026 · workos.com
- SDK license
- The official client libraries are open source, and the WorkOS Node SDK repository is marked MIT licensed.Read 15 Oct 2026 · github.com
- Security certifications
- WorkOS states that it is SOC 2 Type 2 certified, GDPR and CCPA compliant, and undergoes annual third-party penetration tests and external code audits.Read 15 Oct 2026 · workos.com
- Single sign-on
- The SSO product connects applications to SAML and OIDC identity providers through one integration.Read 15 Oct 2026 · workos.com
- Staging environment
- All WorkOS products can be used in a free staging environment without a credit card; a payment method is required for production.Read 15 Oct 2026 · workos.com
- User management
- AuthKit supports hosted or headless authentication, multiple authentication methods, organization policies and real-time Events API updates.Read 15 Oct 2026 · workos.com
- Who it serves
- WorkOS describes its platform as infrastructure for SaaS companies building software for enterprise adoption.Read 10 Oct 2026 · workos.com
Plans and prices
Strong points and limits
Strong points
- SAML and OIDC identity-provider support
- SCIM and HRIS lifecycle provisioning
- SDKs for eight listed languages
- Hosted Admin Portal with custom branding
- Free plans available for several products
Limits
- SSO and Directory Sync charge per connection
- Custom Domain costs $99 a month
- Additional AuthKit users cost $2,500/mo per million
- Annual Credits pricing requires a call
Who it suits
It suits SaaS teams building enterprise-facing software that need identity, provisioning, administration, or authentication components. Developers can use its APIs, webhooks, SDKs, and hosted portal across API, iOS, and web projects.
Verdict
WorkOS combines enterprise identity, directory synchronization, administration, and developer tooling in one platform. Its freemium structure includes free product allowances, while connection-based SSO and Directory Sync costs should be checked against deployment size.
Where Specifiction places it
- Biometric Authentication Software#7 of 458.5
- Authentication Software#8 of 318.5
- Passkey Authentication Software#15 of 558.5
- Identity and Access Management Software#13 of 458.5
- Single Sign-On Software#10 of 348.5