Hacker News: grinich

New comment by grinich in "The relay market powering token resellers and fraud"

grinich — Sun, 26 Jul 2026 18:35:42 +0000

This is the problem we've been working on solving with WorkOS Radar. We run it for Cursor and a bunch of other AI companies who have a free trial that gives some free inference to test the product.

It turns out to be a pretty complex program to solve at scale. Token fraud is a lucrative market and the adversaries are surprisingly sophisticated. It's a cat-and-mouse game, accelerated with AI.

https://workos.com/radar

(If you'd like to work on this, we are hiring :))

Auth.md: an open protocol for agent registration

grinich — Fri, 22 May 2026 18:14:29 +0000

Article URL: https://workos.com/auth-md

Comments URL: https://news.ycombinator.com/item?id=48239369

Points: 7

# Comments: 0

New comment by grinich in "From Supabase to Clerk to Better Auth"

grinich — Sun, 10 May 2026 04:22:28 +0000

Custom roles per-org is supported natively with WorkOS. (I'm the founder.)

I think we have the most advanced RBAC system. You can even map roles from custom IdP groups via SCIM.

More info here: https://workos.com/guides/user-provisioning-scim

New comment by grinich in "From Supabase to Clerk to Better Auth"

grinich — Sun, 10 May 2026 04:21:04 +0000

Hi I'm the founder of WorkOS.

We're working on multi-app support. The large majority of our customers only have 1 app (ChatGPT, Claude, Cursor, etc.) but this isn't the case for developers building lots of side projects.

Also working on shipping an agent-friendly Dashboard. Stay tuned :)

Would love to hear any more feedback: mg@workos.com

Handwritten SDKs Are Dead

grinich — Fri, 08 May 2026 16:17:38 +0000

Article URL: https://workos.com/blog/handwritten-sdks-are-dead

Comments URL: https://news.ycombinator.com/item?id=48065204

Points: 5

# Comments: 1

New comment by grinich in "From Supabase to Clerk to Better Auth"

grinich — Thu, 07 May 2026 17:17:12 +0000

WorkOS has a built-in workflow for all the complex SAML/SCIM attribute mapping.

https://workos.com/docs/directory-sync/attributes

Also certificate renewal flows:

https://workos.com/changelog/certificate-renewal-flow

(I'm the founder.)

getadb.com - instant database for agents

grinich — Wed, 22 Apr 2026 20:19:27 +0000

Article URL: https://www.getadb.com/

Comments URL: https://news.ycombinator.com/item?id=47868765

Points: 1

# Comments: 0

WorkOS raises $100M Series C, hits $2B valuation

grinich — Mon, 02 Mar 2026 17:32:21 +0000

Article URL: https://workos.com/blog/series-c

Comments URL: https://news.ycombinator.com/item?id=47221134

Points: 4

# Comments: 0

New comment by grinich in "Ask HN: How Are You Handling Auth in 2026?"

grinich — Fri, 02 Jan 2026 05:21:55 +0000

Docs to migrate from Clerk to WorkOS: http://workos.com/docs/migrate/clerk

Claude Code can often one-shot it. Feel free to reach out if I can help!

New comment by grinich in "Ask HN: How Are You Handling Auth in 2026?"

grinich — Thu, 01 Jan 2026 18:35:42 +0000

WorkOS powers auth for OpenAI, Anthropic, Cursor, Vercel, Perplexity, Clay, Webflow, Granola, and a bunch of others. Free up to 1m users, you pay for enterprise features.

I'm the founder and happy to help. We've differentiated by focusing on "b2b auth" via SAML/SCIM, but today we do everything else. We also have products for feature flags, encryption, bot blocking, MCP auth, etc.

Fun fact, we actually launched on HN in 2020 :) https://news.ycombinator.com/item?id=22607402

New comment by grinich in "Claude Status – Elevated error rates on the API"

grinich — Sun, 23 Nov 2025 16:52:14 +0000

What do you use for RBAC today? Do you have AI rewrite it every time?

New comment by grinich in "Okta's NextJS-0auth troubles"

grinich — Thu, 20 Nov 2025 23:25:29 +0000

If you’re looking for b2b identity, I’m the founder of WorkOS and we power this for a bunch of apps. Feel free to email me, mg@workos.com

New comment by grinich in "Kratos - Cloud native Auth0 open-source alternative (self-hosted)"

grinich — Thu, 13 Nov 2025 23:49:06 +0000

OpenAI uses WorkOS for SSO and SCIM.

https://help.openai.com/en/articles/9627404-openai-chatgpt-s...

New comment by grinich in "Kurt Got Got"

grinich — Thu, 09 Oct 2025 18:00:24 +0000

It's so bad

Here is a major vulnerability we disclosed earlier this year:

https://workos.com/blog/samlstorm

New comment by grinich in "Kurt Got Got"

grinich — Wed, 08 Oct 2025 23:49:43 +0000

I got hit with the same kind of phishing attack a couple months ago

It's pretty incredible the level of UI engineering that went into it.

Some screenshots I took: https://x.com/grinich/status/1963744947053703309

New comment by grinich in "Auth.js is now part of Better Auth"

grinich — Fri, 26 Sep 2025 23:29:39 +0000

They migrated SSO/SAML to WorkOS, and consumer auth to forked open source.

Did Atlassian copy our logo?

grinich — Thu, 18 Sep 2025 15:30:26 +0000

Article URL: https://twitter.com/grinich/status/1968435438990897197

Comments URL: https://news.ycombinator.com/item?id=45290891

Points: 1

# Comments: 0

New comment by grinich in "Vendors that treat single sign-on as a luxury feature"

grinich — Wed, 20 Aug 2025 00:31:11 +0000

(self plug since you asked!)

WorkOS does exactly this. It's "Stripe for enterprise features."

https://workos.com

Our customers include OpenAI, Anthropic, xAI, Cursor, Perplexity, Vercel, Replit, Webflow, Clay, Hex, Carta, Plaid, Drata, Vanta, and many others. If you've used these products, you've used WorkOS!

WorkOS makes it easy to "cross the enterprise chasm." Here's a bit more of the backstory: https://x.com/grinich/status/1841569664465568248

We also launched on HN 5 years ago :) https://news.ycombinator.com/item?id=22607402

New comment by grinich in "Vendors that treat single sign-on as a luxury feature"

grinich — Tue, 19 Aug 2025 23:17:11 +0000

thank you! feedback very welcome if you have any suggestions for things to improve or ideas for what we should build next

New comment by grinich in "Vendors that treat single sign-on as a luxury feature"

grinich — Tue, 19 Aug 2025 21:15:48 +0000

also if anyone wants to go down the rabbit hole about why SAML is hard to implement, this is a pretty interesting writeup of a major 0-day vuln we discovered earlier this year: https://workos.com/blog/samlstorm