WorkOS growth playbook

When an account creates its first SSO or Directory Sync connection, the GTM Engineer's pipeline enriches it and routes it to an AE within one business day with context: the account's product, the identity provider their customer uses, and how many organisations they have. The AE's offer is practical: a 20-minute review of the enterprise checklist their next deals will ask for (SCIM, audit logs, admin portal, custom domain).

A company that has just closed its first enterprise customer will close more, and each one is another connection. Reaching it at that moment, with help rather than a pitch, sets up the expansion the Account Manager is hired to run.

Subject: Your first enterprise SSO connection is live

Hi {first_name},

I saw {company} just connected its first customer through {idp}. Congratulations on the enterprise deal.

The next enterprise buyers usually ask for the same few things: user provisioning (SCIM), audit logs, an admin portal for their IT team and your own domain on the login page. If it helps, I can walk your team through that list in 20 minutes and point out what is already switched on.

Pick a time here: {calendar_link}

{ae_name}, WorkOS

• Developers dislike sales contact

  Lead with the checklist review and let the developer choose a time; no calls without consent.

• Too many small accounts

  Route by fit score and send the rest an automated checklist email.

• HiringSales - Account Executive (San Francisco): "WorkOS has a strong bottoms-up, developer-focused GTM motion, and we're growing our lean sales team to complement it"; AEs from 2 to 10 years' experience; "We don't have formal sales segmentation: customer coverage is fluid"; AEs are to "test outreach, messaging, and sales approaches" and "help develop repeatable practices".Source
• HiringProduct Manager - Growth: own "activation, adoption, monetization, expansion, and retention across the platform", "build and scale a product experimentation program", "improve onboarding and reduce time-to-value", "work with Marketing to improve acquisition and attribution" and "partner with Sales to strengthen the product-qualified lead motion and enterprise expansion path".Source
• Your websitePricing: AuthKit is free up to 1 million users, then $2,500 a month per additional million; Single Sign-On and Directory Sync are $125 per connection per month for 1-15 connections, falling to $65 at 51-100; Radar is free for 1,000 checks, then $100 per 50,000; a custom domain is $99 a month; annual credits add discounts and migration help. The page has no H1 heading and no meta description, and its server-rendered calculator text reads "$0 / month vs $100 to build it yourself".Source
• HiringGTM Engineer: maintain "our core enrichment pipeline: the workflows that take a new signup or a conference attendee list and return a fully enriched, scored, and Salesforce-upserted record", built on Cargo, Clay, Snowflake, Apollo, Linkup and Exa; own fit scoring.Source

Add an H1 ("WorkOS pricing"), a meta description that states the free tier and the per-connection price, and server-render a real example (for example 10 SSO connections) so the static text shows a sensible monthly figure and build-it-yourself estimate.

Pricing questions are high intent. A page that reads correctly to machines gets quoted correctly in AI answers and search snippets.

• Example misread as a quote

  Label it as an example with the inputs shown.

• Your websitePricing: AuthKit is free up to 1 million users, then $2,500 a month per additional million; Single Sign-On and Directory Sync are $125 per connection per month for 1-15 connections, falling to $65 at 51-100; Radar is free for 1,000 checks, then $100 per 50,000; a custom domain is $99 a month; annual credits add discounts and migration help. The page has no H1 heading and no meta description, and its server-rendered calculator text reads "$0 / month vs $100 to build it yourself".Source
• Your websiteThe homepage, /pricing, /compare/auth0 and /switch serve no meta description. The homepage announces launches from WorkOS's init() event: Passport, Atlas ("your AI coworker") and Airlock ("Intent-Based Access Control"), alongside auth.md ("User registration for agents") and MCP Auth.Source

Replace the three labels with the company names, add a check to the Webflow publishing step that rejects logo labels containing underscores, hashes or email addresses, and give every logo alt text with the company name.

Small errors on a proof page are what a careful buyer notices. Clean labels also let AI assistants list WorkOS customers correctly.

• None meaningful

  It is a quick fix.

• Your websiteCustomers page: 181 logos, from OpenAI, Anthropic, Cursor, Sierra and Plaid to Snowflake and Vanta, including app-building platforms such as Replit, Bolt and Convex. Three screen-reader labels are file names ("68f7b8469a33c174c66b5f42_physical intelligence", "Privy_Brandmark_Black", "[email removed]"). There are 21 written customer stories (AI21 Labs, Cerkl, Chromatic, Copy.ai, Drata, EnjoyHQ, Gretel, Hopin, Hypercare, incident.io, Indeed, Magical, Netlify, OpenAI, Patch, Perplexity, PlanetScale, Prefect, Tactic, Warp, Webflow); none for Anthropic, Cursor, Sierra or Plaid.Source

Keep one evergreen page per competitor, merge the best content from the duplicates into it, redirect the others, remove years from the URLs, and show a "last reviewed" date on the page instead.

One strong page ranks better than two weak ones, and a review date keeps it fresh without new URLs.

• Temporary ranking dip

  Redirects carry signals over; monitor for a month.

• Your websiteComparison content: three /compare pages (Auth0, Clerk, Frontegg); 37 blog posts titled "<tool> vs WorkOS", many about tools in other categories (Semgrep, Snyk, Promptfoo, HiddenLayer, Google Vertex AI, OpenAI, Nightfall AI); and 12 "alternatives" posts, including both "auth0-alternatives" and "auth0-alternatives-2025", and "the-5-best-clerk-alternatives-in-2024" next to "clerk-alternatives".Source
• Your websiteSitemaps: 1,504 website URLs (1,022 blog posts, 301 changelog entries, 84 guide pages, 32 podcast episodes) plus 845 docs pages. Between 50 and 119 website URLs were last modified in each month of 2026.Source

Add HSTS, X-Content-Type-Options, Referrer-Policy, a Permissions-Policy and a fuller Content-Security-Policy through Cloudflare, test them on staging, and rerun the scan. Add the grade to the trust center.

Security reviewers and prospects run these scans in seconds. For an identity vendor, an F on its own homepage is an easy objection to remove.

• A strict CSP breaks scripts

  Start in report-only mode and tighten over two weeks.

• Your websiteworkos.com responses carry only a frame-ancestors Content-Security-Policy and X-Frame-Options; there is no Strict-Transport-Security, X-Content-Type-Options or Referrer-Policy header. programmable.info reports a Mozilla Observatory grade of F (5/100).Source
• programmable.infoWebflow site with HubSpot and Google Tag Manager; mobile LCP 1.45s and 11% faster than a year ago; DMARC "reject"; YouTube 6,570 subscribers and 352 videos; the authkit GitHub repo has 3,353 stars; the workos PyPI package is at 10.5.0; 75 Hacker News mentions. Its leadership scrape returned a job title as the CEO's name, and its "notable customers" are identity providers (Okta, Azure, OneLogin).Source
• HiringEvery post opens with the same paragraph: "a $100M Series C, valuing the company at $2B", customers "including OpenAI, Cursor, and Perplexity, Sierra, and Plaid", the question "who are your agents, and what are they allowed to do?", and "hundreds of modern software companies". All 29 open roles are in San Francisco or "United States & Canada".Source

Make the pipeline run the night of each event: attendees enriched and scored, high-fit accounts assigned to an AE or BDR with a short note of what they asked or attended, and everyone else sent a useful follow-up (the talk, the slides, a relevant guide) the next morning.

Fast, relevant follow-up is the difference between an event that produces pipeline and one that produces photos.

• Follow-up feels automated

  Personal note from the person they met for high-fit accounts.

• HiringGTM Engineer: maintain "our core enrichment pipeline: the workflows that take a new signup or a conference attendee list and return a fully enriched, scored, and Salesforce-upserted record", built on Cargo, Clay, Snowflake, Apollo, Linkup and Exa; own fit scoring.Source
• HiringDeveloper Relations (San Francisco): "an events-forward DevRel leader" to run meetups, panels and workshops and "support talent and pipeline generation"; Growth Marketing Generalist: developer events, conferences and dinners, newsletter sponsorships and campaign copy, working with the Growth lead.Source
• HiringBusiness Development Representative: outbound into enterprise and mid-market; "use LLMs and AI tooling to research accounts, personalize outreach at scale"; "understand what a company is actually building — their stack, their auth setup, their scaling problems".Source

Ask the Account Manager's top accounts for short stories built around one question each buyer has: how long SSO and SCIM took to ship, how many enterprise customers were onboarded through the Admin Portal, and what the team stopped building. Publish four this quarter.

An AI company evaluating auth trusts what Cursor or Anthropic did more than a feature list. Stories also give the AEs and BDRs reasons to reach out.

• Large customers rarely approve stories

  Offer a quote-only format or a joint engineering blog post.

• Your websiteCustomers page: 181 logos, from OpenAI, Anthropic, Cursor, Sierra and Plaid to Snowflake and Vanta, including app-building platforms such as Replit, Bolt and Convex. Three screen-reader labels are file names ("68f7b8469a33c174c66b5f42_physical intelligence", "Privy_Brandmark_Black", "[email removed]"). There are 21 written customer stories (AI21 Labs, Cerkl, Chromatic, Copy.ai, Drata, EnjoyHQ, Gretel, Hopin, Hypercare, incident.io, Indeed, Magical, Netlify, OpenAI, Patch, Perplexity, PlanetScale, Prefect, Tactic, Warp, Webflow); none for Anthropic, Cursor, Sierra or Plaid.Source
• HiringEvery post opens with the same paragraph: "a $100M Series C, valuing the company at $2B", customers "including OpenAI, Cursor, and Perplexity, Sierra, and Plaid", the question "who are your agents, and what are they allowed to do?", and "hundreds of modern software companies". All 29 open roles are in San Francisco or "United States & Canada".Source
• HiringAccount Manager: own "the expansion of our most complex accounts"; "identify unadopted products and untapped teams"; "drive adoption of the full WorkOS platform — SSO, Directory Sync, AuthKit, Audit Logs, and beyond — across new teams, new products, and new geographies"; run executive business reviews.Source

Tag every account created or configured through the CLI, MCP server or an agent skill, and track its own funnel: install, first sign-in working, first organisation, first SSO connection. Review it monthly alongside the human funnel and fix the steepest drop.

A channel that is measured gets improved. The agent funnel may already be a large share of new accounts and could become the cheapest one.

• Attribution is fuzzy for agents

  Tag what can be seen (CLI, MCP) and survey new accounts for the rest.

• HiringDeveloper & Agent Experience Engineer: "Developers still integrate WorkOS, but increasingly their agents do it for them." The team owns "SDKs in 9 languages, now generated from our API spec; an AI installer CLI that sets up AuthKit in any project; our MCP servers and agent skills", and writes evaluations "to measure whether what you ship actually improves developer outcomes".Source
• HiringProduct Manager - Growth: own "activation, adoption, monetization, expansion, and retention across the platform", "build and scale a product experimentation program", "improve onboarding and reduce time-to-value", "work with Marketing to improve acquisition and attribution" and "partner with Sales to strengthen the product-qualified lead motion and enterprise expansion path".Source
• Your websiteThe homepage, /pricing, /compare/auth0 and /switch serve no meta description. The homepage announces launches from WorkOS's init() event: Passport, Atlas ("your AI coworker") and Airlock ("Intent-Based Access Control"), alongside auth.md ("User registration for agents") and MCP Auth.Source

Define coverage by the number and growth of connections: under five stays product-led with automated help, five to 30 goes to AEs, above 30 or growing fast goes to the Account Manager. Re-score monthly from billing data.

Revenue follows connections. Aligning people to the measure the price is built on puts sellers where the money and the expansion are.

• Fast-growing small accounts missed

  Add a growth trigger (three new connections in a month).

• HiringSales - Account Executive (San Francisco): "WorkOS has a strong bottoms-up, developer-focused GTM motion, and we're growing our lean sales team to complement it"; AEs from 2 to 10 years' experience; "We don't have formal sales segmentation: customer coverage is fluid"; AEs are to "test outreach, messaging, and sales approaches" and "help develop repeatable practices".Source
• Your websitePricing: AuthKit is free up to 1 million users, then $2,500 a month per additional million; Single Sign-On and Directory Sync are $125 per connection per month for 1-15 connections, falling to $65 at 51-100; Radar is free for 1,000 checks, then $100 per 50,000; a custom domain is $99 a month; annual credits add discounts and migration help. The page has no H1 heading and no meta description, and its server-rendered calculator text reads "$0 / month vs $100 to build it yourself".Source
• HiringAccount Manager: own "the expansion of our most complex accounts"; "identify unadopted products and untapped teams"; "drive adoption of the full WorkOS platform — SSO, Directory Sync, AuthKit, Audit Logs, and beyond — across new teams, new products, and new geographies"; run executive business reviews.Source

List accounts with SSO connections but no Directory Sync, Audit Logs or Radar, and run a play: show the account how many of its enterprise organisations already use SCIM-capable identity providers, offer a setup session, and price the bundle on annual credits.

Each extra product attaches to the same enterprise customers, so the upsell sells itself when the data shows those customers are ready.

• Discounting erodes price

  Bundle on annual credits rather than cutting list prices.

• HiringAccount Manager: own "the expansion of our most complex accounts"; "identify unadopted products and untapped teams"; "drive adoption of the full WorkOS platform — SSO, Directory Sync, AuthKit, Audit Logs, and beyond — across new teams, new products, and new geographies"; run executive business reviews.Source
• Your websitePricing: AuthKit is free up to 1 million users, then $2,500 a month per additional million; Single Sign-On and Directory Sync are $125 per connection per month for 1-15 connections, falling to $65 at 51-100; Radar is free for 1,000 checks, then $100 per 50,000; a custom domain is $99 a month; annual credits add discounts and migration help. The page has no H1 heading and no meta description, and its server-rendered calculator text reads "$0 / month vs $100 to build it yourself".Source
• HiringProduct Engineer - Radar: a "real-time identity intelligence layer" for bots, fraud and abuse; "Radar serves some of the fastest-growing AI companies in the world, which gives us one of the richest fraud-and-abuse datasets in the identity space"; work measured "often in the millions of dollars of fraud and abuse we save customers".Source

A twice-yearly report with aggregated, anonymised findings: the share of sign-ups blocked as bots, the most common abuse patterns against AI free tiers, how attacks change after a launch, and what defences work. Release it with a webinar and a short checklist.

Original data earns attention from engineering and security leaders, and it introduces Radar to AI companies that use WorkOS only for SSO.

• Helps attackers

  Publish patterns and defences in aggregate, not detection rules.

• HiringProduct Engineer - Radar: a "real-time identity intelligence layer" for bots, fraud and abuse; "Radar serves some of the fastest-growing AI companies in the world, which gives us one of the richest fraud-and-abuse datasets in the identity space"; work measured "often in the millions of dollars of fraud and abuse we save customers".Source
• HiringEvery post opens with the same paragraph: "a $100M Series C, valuing the company at $2B", customers "including OpenAI, Cursor, and Perplexity, Sierra, and Plaid", the question "who are your agents, and what are they allowed to do?", and "hundreds of modern software companies". All 29 open roles are in San Francisco or "United States & Canada".Source
• Your websitePricing: AuthKit is free up to 1 million users, then $2,500 a month per additional million; Single Sign-On and Directory Sync are $125 per connection per month for 1-15 connections, falling to $65 at 51-100; Radar is free for 1,000 checks, then $100 per 50,000; a custom domain is $99 a month; annual credits add discounts and migration help. The page has no H1 heading and no meta description, and its server-rendered calculator text reads "$0 / month vs $100 to build it yourself".Source

Build /compare pages for the rivals buyers actually weigh (Stytch, Descope, AWS Cognito, Firebase Auth, Better Auth, Keycloak) with a feature table, pricing model and migration notes. Review the off-category posts: rewrite those that explain how WorkOS fits beside the tool as "works with" posts, and remove or noindex the rest.

Comparison pages convert buyers who are already choosing. Off-category comparisons look like content made in bulk, which search engines discount and readers distrust.

• Traffic from removed posts

  Keep and redirect posts with real traffic to the closest relevant page.

• Your websiteComparison content: three /compare pages (Auth0, Clerk, Frontegg); 37 blog posts titled "<tool> vs WorkOS", many about tools in other categories (Semgrep, Snyk, Promptfoo, HiddenLayer, Google Vertex AI, OpenAI, Nightfall AI); and 12 "alternatives" posts, including both "auth0-alternatives" and "auth0-alternatives-2025", and "the-5-best-clerk-alternatives-in-2024" next to "clerk-alternatives".Source
• Your websiteSitemaps: 1,504 website URLs (1,022 blog posts, 301 changelog entries, 84 guide pages, 32 podcast episodes) plus 845 docs pages. Between 50 and 119 website URLs were last modified in each month of 2026.Source
• Competitor researchRivals' own positioning: Auth0, "Secure AI Agent & User Authentication"; Clerk, "Authentication and User Management", "Purpose-built for React, Next.js, Remix"; Stytch, "A better way to build auth"; Frontegg, "the first identity layer for agentic SaaS"; Descope, "Customer and Agentic Identity Platform".See the research Source

A free kit: the 30 questions enterprise security questionnaires ask about identity and access, model answers for a startup that uses WorkOS, a checklist of what to switch on, and a short talk track for the founder's sales call. Gate the editable version behind sign-up.

Founders search for help exactly when the deal is at risk. A kit that wins the deal makes WorkOS the obvious choice for the integration that follows.

• Answers taken as legal advice

  Mark as examples to adapt.

• Your websiteThe homepage, /pricing, /compare/auth0 and /switch serve no meta description. The homepage announces launches from WorkOS's init() event: Passport, Atlas ("your AI coworker") and Airlock ("Intent-Based Access Control"), alongside auth.md ("User registration for agents") and MCP Auth.Source
• Your websiteCustomer logos include companies headquartered outside North America, such as Synthesia, Paddle and Prezi, while all hiring is in the US and Canada. The site has a /startups page, a /switch migration guide and a podcast.Source
• HiringProduct Manager - Growth: own "activation, adoption, monetization, expansion, and retention across the platform", "build and scale a product experimentation program", "improve onboarding and reduce time-to-value", "work with Marketing to improve acquisition and attribution" and "partner with Sales to strengthen the product-qualified lead motion and enterprise expansion path".Source

Extend the calculator: as connections and users rise, show when annual credits beat pay-as-you-go and by how much, with a button to request a credit quote that pre-fills the inputs for sales.

Buyers approaching the threshold are ready to commit. Showing the saving turns a vague "talk to us" into a qualified, pre-sized request.

• Reveals discount levels

  Show a range, not exact contract terms.

• Your websitePricing: AuthKit is free up to 1 million users, then $2,500 a month per additional million; Single Sign-On and Directory Sync are $125 per connection per month for 1-15 connections, falling to $65 at 51-100; Radar is free for 1,000 checks, then $100 per 50,000; a custom domain is $99 a month; annual credits add discounts and migration help. The page has no H1 heading and no meta description, and its server-rendered calculator text reads "$0 / month vs $100 to build it yourself".Source
• HiringProduct Manager - Growth: own "activation, adoption, monetization, expansion, and retention across the platform", "build and scale a product experimentation program", "improve onboarding and reduce time-to-value", "work with Marketing to improve acquisition and attribution" and "partner with Sales to strengthen the product-qualified lead motion and enterprise expansion path".Source
• HiringSales - Account Executive (San Francisco): "WorkOS has a strong bottoms-up, developer-focused GTM motion, and we're growing our lean sales team to complement it"; AEs from 2 to 10 years' experience; "We don't have formal sales segmentation: customer coverage is fluid"; AEs are to "test outreach, messaging, and sales approaches" and "help develop repeatable practices".Source

A monthly dinner of 12 to 15 CTOs and founding engineers from AI companies at their first enterprise deals, with one customer CTO sharing how they handled SSO, SCIM and security reviews. Invite lists come from the first-connection signal and the BDR's target accounts.

Small rooms build relationships that large meetups do not. Peers who just did it are the most credible speakers on enterprise readiness.

• Guests feel sold to

  No pitch; the host talks, WorkOS listens.

• HiringDeveloper Relations (San Francisco): "an events-forward DevRel leader" to run meetups, panels and workshops and "support talent and pipeline generation"; Growth Marketing Generalist: developer events, conferences and dinners, newsletter sponsorships and campaign copy, working with the Growth lead.Source
• HiringBusiness Development Representative: outbound into enterprise and mid-market; "use LLMs and AI tooling to research accounts, personalize outreach at scale"; "understand what a company is actually building — their stack, their auth setup, their scaling problems".Source
• HiringGTM Engineer: maintain "our core enrichment pipeline: the workflows that take a new signup or a conference attendee list and return a fully enriched, scored, and Salesforce-upserted record", built on Cargo, Clay, Snowflake, Apollo, Linkup and Exa; own fit scoring.Source

Turn auth.md into an open, versioned specification for how agents register and are authorised, publish a conformance test suite, invite identity vendors, agent frameworks and AI labs to implement it, and host the reference implementation on GitHub.

Standards decide categories. If agent builders adopt WorkOS's spec, every implementation points back to WorkOS as the easiest compliant choice.

• Competitors ignore it

  Recruit frameworks and labs first; vendors follow developers.

• Your websiteThe homepage, /pricing, /compare/auth0 and /switch serve no meta description. The homepage announces launches from WorkOS's init() event: Passport, Atlas ("your AI coworker") and Airlock ("Intent-Based Access Control"), alongside auth.md ("User registration for agents") and MCP Auth.Source
• Competitor researchRivals' own positioning: Auth0, "Secure AI Agent & User Authentication"; Clerk, "Authentication and User Management", "Purpose-built for React, Next.js, Remix"; Stytch, "A better way to build auth"; Frontegg, "the first identity layer for agentic SaaS"; Descope, "Customer and Agentic Identity Platform".See the research Source
• HiringDeveloper & Agent Experience Engineer: "Developers still integrate WorkOS, but increasingly their agents do it for them." The team owns "SDKs in 9 languages, now generated from our API spec; an AI installer CLI that sets up AuthKit in any project; our MCP servers and agent skills", and writes evaluations "to measure whether what you ship actually improves developer outcomes".Source
• HiringEvery post opens with the same paragraph: "a $100M Series C, valuing the company at $2B", customers "including OpenAI, Cursor, and Perplexity, Sierra, and Plaid", the question "who are your agents, and what are they allowed to do?", and "hundreds of modern software companies". All 29 open roles are in San Francisco or "United States & Canada".Source

Partner with two or three app-building platforms to offer "enterprise-ready" templates with WorkOS pre-wired, a one-click upgrade path from basic auth to SSO, and revenue share or co-marketing. Measure accounts created through each partner.

Distribution inside the build tool reaches developers before they choose auth. Becoming the template is cheaper than winning each comparison later.

• Partners build their own auth

  Position WorkOS for the enterprise features they do not want to maintain.

• HiringDeveloper & Agent Experience Engineer: "Developers still integrate WorkOS, but increasingly their agents do it for them." The team owns "SDKs in 9 languages, now generated from our API spec; an AI installer CLI that sets up AuthKit in any project; our MCP servers and agent skills", and writes evaluations "to measure whether what you ship actually improves developer outcomes".Source
• Your websiteCustomers page: 181 logos, from OpenAI, Anthropic, Cursor, Sierra and Plaid to Snowflake and Vanta, including app-building platforms such as Replit, Bolt and Convex. Three screen-reader labels are file names ("68f7b8469a33c174c66b5f42_physical intelligence", "Privy_Brandmark_Black", "[email removed]"). There are 21 written customer stories (AI21 Labs, Cerkl, Chromatic, Copy.ai, Drata, EnjoyHQ, Gretel, Hopin, Hypercare, incident.io, Indeed, Magical, Netlify, OpenAI, Patch, Perplexity, PlanetScale, Prefect, Tactic, Warp, Webflow); none for Anthropic, Cursor, Sierra or Plaid.Source
• HiringProduct Manager - Growth: own "activation, adoption, monetization, expansion, and retention across the platform", "build and scale a product experimentation program", "improve onboarding and reduce time-to-value", "work with Marketing to improve acquisition and attribution" and "partner with Sales to strengthen the product-qualified lead motion and enterprise expansion path".Source

Measure first: sign-ups, first connections and revenue by customer region, plus the share of connections whose end customers are in Europe. If Europe passes a threshold, run a two-quarter test with one remote AE in a European time zone, a European customer dinner and a localised compliance page, before opening an office.

Data-led expansion avoids building a team for a region that is not ready, and moves quickly where it is.

• Time-zone gap with the team

  Overlap hours and a US-based manager.

• HiringEvery post opens with the same paragraph: "a $100M Series C, valuing the company at $2B", customers "including OpenAI, Cursor, and Perplexity, Sierra, and Plaid", the question "who are your agents, and what are they allowed to do?", and "hundreds of modern software companies". All 29 open roles are in San Francisco or "United States & Canada".Source
• Your websiteCustomer logos include companies headquartered outside North America, such as Synthesia, Paddle and Prezi, while all hiring is in the US and Canada. The site has a /startups page, a /switch migration guide and a podcast.Source
• HiringAccount Manager: own "the expansion of our most complex accounts"; "identify unadopted products and untapped teams"; "drive adoption of the full WorkOS platform — SSO, Directory Sync, AuthKit, Audit Logs, and beyond — across new teams, new products, and new geographies"; run executive business reviews.Source

Pick half of future guests from target accounts (CTOs and heads of platform at companies approaching enterprise sales), give each a great episode, and after it airs, introduce the guest to an AE for an optional architecture review.

Guests become champions, and the episode gives the BDR a warm reason to reach the rest of the guest's team.

• Guests feel used

  The episode stands on its own; the AE intro is optional.

• Your websiteSitemaps: 1,504 website URLs (1,022 blog posts, 301 changelog entries, 84 guide pages, 32 podcast episodes) plus 845 docs pages. Between 50 and 119 website URLs were last modified in each month of 2026.Source
• HiringBusiness Development Representative: outbound into enterprise and mid-market; "use LLMs and AI tooling to research accounts, personalize outreach at scale"; "understand what a company is actually building — their stack, their auth setup, their scaling problems".Source
• HiringSales - Account Executive (San Francisco): "WorkOS has a strong bottoms-up, developer-focused GTM motion, and we're growing our lean sales team to complement it"; AEs from 2 to 10 years' experience; "We don't have formal sales segmentation: customer coverage is fluid"; AEs are to "test outreach, messaging, and sales approaches" and "help develop repeatable practices".Source

A free tool: enter a SaaS domain and see which enterprise sign-in features its login page shows, compared with others in its category, with a checklist to close the gaps. The same scan, run on a target list, tells BDRs which companies lack SSO.

A free tool with a shareable result spreads among founders, and the scan gives outbound a precise reason to reach out.

• Scanning feels intrusive

  Only public login pages, no sign-in attempts, and clear wording about what is checked.

• HiringBusiness Development Representative: outbound into enterprise and mid-market; "use LLMs and AI tooling to research accounts, personalize outreach at scale"; "understand what a company is actually building — their stack, their auth setup, their scaling problems".Source
• HiringGTM Engineer: maintain "our core enrichment pipeline: the workflows that take a new signup or a conference attendee list and return a fully enriched, scored, and Salesforce-upserted record", built on Cargo, Clay, Snowflake, Apollo, Linkup and Exa; own fit scoring.Source
• Your websiteThe homepage, /pricing, /compare/auth0 and /switch serve no meta description. The homepage announces launches from WorkOS's init() event: Passport, Atlas ("your AI coworker") and Airlock ("Intent-Based Access Control"), alongside auth.md ("User registration for agents") and MCP Auth.Source

Add a signal for companies posting first enterprise sales roles or "head of security" roles, and send a same-week email from the BDR with the first-enterprise-deal kit and an offer to review their auth setup.

A first enterprise sales hire is a dated, public sign that SSO will be needed within months.

• Too early in the deal

  Lead with the kit, which is useful before the questionnaire arrives.

• HiringBusiness Development Representative: outbound into enterprise and mid-market; "use LLMs and AI tooling to research accounts, personalize outreach at scale"; "understand what a company is actually building — their stack, their auth setup, their scaling problems".Source
• HiringGTM Engineer: maintain "our core enrichment pipeline: the workflows that take a new signup or a conference attendee list and return a fully enriched, scored, and Salesforce-upserted record", built on Cargo, Clay, Snowflake, Apollo, Linkup and Exa; own fit scoring.Source
• HiringEvery post opens with the same paragraph: "a $100M Series C, valuing the company at $2B", customers "including OpenAI, Cursor, and Perplexity, Sierra, and Plaid", the question "who are your agents, and what are they allowed to do?", and "hundreds of modern software companies". All 29 open roles are in San Francisco or "United States & Canada".Source