Blog

A Zoom zero-click RCE went from discovery to working exploit in a day. The exploit took one day; your sessions last longer than that.

A practical guide to Keychain storage, refresh token rotation, and terminal vs. transient failures on iOS

How an API tells a client that the user needs to authenticate again, why acr_values is only a request while max_age is a requirement, and what the auth_time claim actually proves.

WorkOS Emulate runs the WorkOS API on your own machine, so your tests can seed real data, drive full login flows, and force failures without touching prod.

What it's actually like to join WorkOS as a product designer: transparent context by default, and AI as everyday design tooling.

Abhi Aiyer, co-founder and CTO of Mastra, demoed the company's open source software factory at Agent Night: memory, harness, a rules engine around work.

Irina Nazarova's Agent Night lightning demo: why GitHub, not your docs site, is the path into model training sets, and how Evil Martians measured all of it.

Recap of Agent Night at the Regency Ballroom: why agent permissions break RBAC and least privilege, and a live demo of Airlock, our intent-based access control.

Jaya Gupta, Flo Crivello, and swyx on stage at Agent Night: 5x AI spend, open source getting real, harness engineering, skills, and December predictions.

David Crawshaw of exe.dev showed how two prompts let an agent customize any open source tool you use, then keep those changes rebased on upstream nightly.

Brian Douglas of Paper Compute closed Agent Night with six months of running Pokémon as a self-healing agent: traces, anomalies, dreams, and inceptions.

Your MCP server hands an agent a token that stays valid for hours. Here is how to put a human back in the loop before it does something irreversible.

Derive your coding agent's effective context window from two numbers: the compaction threshold you want, and the response runway the model needs to finish.

Claude Code speaks Anthropic's Messages protocol and so do the major gateways. A small shell wrapper points it at any model, with live rate cards to prove it.

WorkOS is becoming an AI-native organization. The Applied AI Showcase in NYC on July 28th 2026 showed exactly how with live demos and talks from the Applied AI team.