WorkOS

WorkOS has become default identity infrastructure for the defining companies of the AI era — OpenAI, Anthropic, xAI, Cursor, Perplexity, Replit, Vercel, and Webflow all run on it — which is why a business that sells SSO and directory sync could raise a $100M Series C in March 2026 at a $2B valuation (led by Meritech and Sapphire) with roughly $30M ARR and under 100 employees. The extraordinary revenue-per-employee is the story: founded in 2019 by solo founder Michael Grinich (previously of Nylas), WorkOS turned enterprise readiness — SSO across SAML/OIDC, SCIM directory sync, audit logs, fine-grained authorization, and the AuthKit hosted auth layer — into a clean developer API that a startup can ship in days instead of rebuilding over quarters. The strategic genius is where it sits: WorkOS is the on-ramp that lets fast-growing AI startups sell into the enterprise, so it rides the single steepest growth curve in software (AI-native companies racing upmarket) as a pick-and-shovel supplier, capturing value from the whole cohort regardless of which individual AI app wins. AuthKit lets a team start with consumer-style login and progressively flip on the enterprise features large customers demand, so accounts expand naturally as customers scale. With 1,000+ paying customers, the AI industry's marquee logos, and a capital-efficient model, WorkOS is compounding on the most durable tailwind in tech.

WorkOS is priced at a $2B valuation on roughly $30M ARR — a ~67x multiple that bakes in years of flawless execution and leaves no margin for the growth curve to bend. The AI-company customer concentration that makes the story so compelling is also its sharpest risk: a large share of the momentum tracks a specific cohort of AI-native startups whose own growth is unproven and whose spend could contract sharply if AI funding cools, and any consolidation, failure, or in-housing among those marquee accounts hits WorkOS directly. The product category is, at its core, replicable and contested: Auth0/Okta, Microsoft Entra, Stytch, Clerk, Frontegg, and open-source options all sell overlapping SSO, directory-sync, and auth functionality, and the enterprise-readiness features WorkOS packages are exactly the kind of infrastructure a well-funded rival — or the platform giants — can bundle or undercut. The deepest structural threat is disintermediation from above: the identity providers WorkOS integrates with (Okta, Microsoft) and the cloud platforms could decide that the enterprise-connector layer is strategic and absorb it, collapsing WorkOS's value proposition into a native feature. Solo-founder dependency and a deliberately tiny team, while capital-efficient, concentrate execution and key-person risk as the company scales into enterprise support obligations. At 67x ARR, WorkOS is priced as though the AI boom and its own dominance both continue uninterrupted — a valuation that is itself the bear case.