WorkOS Due Diligence
Run due diligence on WorkOS: check compliance and get alerts when suppliers change.
United States · workos.com · 27 vendors
WorkOS is a modern API platform that enables developers to quickly integrate complex enterprise features such as Single Sign-On (SSO), Directory Sync (SCIM), and Audit Logs into their applications. The company's solutions help software companies become "Enterprise Ready" by meeting the demanding IT and security requirements of larger clients, thereby accelerating their ability to secure enterprise deals.
Resilience scores
- Digital Sovereignty: 96
- Digital Resilience: 6
- Financial Resilience: 5
Technology vendors
- Clearbit — Technology — United States
- Cloudflare, Inc. — Technology — United States
- Postman, Inc. — Technology — United States
- and 24 more
Services catalogue
9 services in catalogue across 3 categories; runs on 27 sub-vendors.
- Directory Sync
- Identity and Access Management
- Dashboard authentication
Insights
Last updated 2026-04-14 · revision 2
27 direct vendors, 249 subvendors
Direct vendors by controlling owner country (sample)
- United States: 26
- Australia: 1
Subvendors by controlling owner country (sample)
- United Kingdom: 4
- Australia: 2
- Sweden: 7
Compliance
5 in-scope frameworks identified; showing 3.
SOC 2 (source) — Evidence found
Evidence: https://workos.com/security
ISO 27001 (source) — No public evidence
ISAE 3000 (source) — No public evidence
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 5/10
WorkOS is a private company and has not publicly disclosed revenue, EBIT, equity, or other detailed financial metrics. As a result, a precise quantitative assessment of financial resilience cannot be made from available public data. The company operates in the enterprise authentication and identity infrastructure space, serving developer-focused B2B SaaS customers, which is a growing and defensible market segment. WorkOS has raised venture capital funding, which provides some runway and financial backing, but the exact amounts, valuation, and burn rate are not publicly confirmed with precision. The reliance on venture funding rather than demonstrated profitability introduces uncertainty around long-term financial sustainability without continued external capital. The company's product focus on SSO, Directory Sync, and Admin Portal targets mid-market and enterprise customers, which typically yields higher contract values and lower churn, supporting revenue quality. However, competition from established identity providers such as Okta, Auth0 (Okta), and Microsoft Entra poses meaningful market risk. Given the absence of disclosed financials, the score of 5 reflects a neutral-to-cautious stance: the business model is sound and the market opportunity is real, but the lack of transparency and dependence on continued venture funding prevent a higher confidence rating.
Key strengths: Venture-backed with external funding providing operational runway, Developer-focused B2B SaaS model with enterprise customers suggesting higher contract values, Growing demand for enterprise authentication and identity infrastructure, Recurring revenue model (SaaS) supports revenue predictability
Risk factors: No publicly disclosed revenue, EBIT, or equity data — financial health unverifiable, Dependence on continued venture capital funding rather than demonstrated profitability, Intense competition from Okta, Auth0, Microsoft Entra, and other identity providers, Private company with limited financial transparency increases uncertainty, Burn rate and cash runway unknown
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.