{ "video": { "id": "HTzgC3FoYsI", "title": "Let Anyone at Your Company Ship Internal Apps with AI — Garrett Galow, WorkOS", "duration": 1033, "upload_date": null, "channel": "AI Engineer", "source": "AI Engineer", "event_format": "" }, "analysis": { "video_id": "HTzgC3FoYsI", "title": "Let Anyone at Your Company Ship Internal Apps with AI — Garrett Galow, WorkOS", "one_liner": "AI made building internal apps cheap but shipping them is still hard, so WorkOS built Atlas: a platform with its own CLI, called Wow, that gives every employee one-command deploys to Cloudflare behind Okta SSO with secrets in Doppler; 37% of its 60 regularly used apps were built with no engineer in any commit.", "summary": "Garrett Galow argues that tools like Lovable, Claude Code and Codex make it easy for anyone to build an app, but shipping it is still hard: hosting, auth, secrets and getting people access. In practice that still needs engineers. He tells how WorkOS hit this when an account executive's 'Perona GPT' chatbot, built in Lovable, couldn't be used by the CEO, and two applied-AI engineers had to rebuild it. WorkOS's answer is Atlas, an internal platform on Cloudflare's developer platform with the 'wow' CLI on top. Atlas is built on three principles: the infrastructure is invisible, apps are secure by default, and every app is discoverable.", "key_points": [ "Origin story: AE Perona built 'Perona GPT' in Lovable before going on maternity leave. It was a chatbot trained on her sales calls and product knowledge. CEO Michael couldn't open it because he had no Lovable account, so two applied-AI engineers had to rebuild and deploy it as a proper app.", "Building got cheap, but shipping didn't: non-engineers don't have Vercel or Cloudflare accounts, engineers don't want to set deployment up from scratch every time, and internal apps need auth and safe secrets handling so API keys don't get checked into code.", "The 'wow' CLI is pushed to every employee's machine via MDM from day one. 'wow app create' checks for Git, Node, a GitHub login and Doppler, creates a repo in the enterprise GitHub account from a blank Node.js template, and deploys it, so the user can go straight to building in Claude Code or Codex.", "There is also a shared skills repository: anyone can push a useful skill, and everyone can browse what's there and pull skills down.", "Atlas runs on Cloudflare Workers and Cloudflare's developer platform. Every app gets compute and storage (D1 databases, KV) and a hostname under workos.tools. It's protected by Okta SSO, with optional token auth for APIs and Slack bots. All requests are logged and auditable, secrets live in Doppler, and a catalog makes every app discoverable with no sharing step.", "Numbers: 278 apps pushed to the registry, 21 deployed that day, about 3.3M requests in the last week, 60 apps on custom domains, and about 60 apps deployed, maintained or used regularly. 37% of those 60 were built with no engineer in any commit.", "Examples: a newsletter builder that pulls in changelogs and formats them for Slack and email; a changelog-drafting tool that replaces painful Webflow editing and posts drafts to Slack for review; an upload-any-HTML-and-get-a-shared-link host for mocks and diagrams; and Wallaby, a sales tool with an API that other systems, Slack and agents use.", "Company-wide 'Cloud Days' (one-day hackathons) are the feedback loop. Non-engineers are paired with engineers, and the non-engineer has hands on the keyboard while the engineer consults and unblocks.", "Roadmap: granular group- and role-based permissions per app, more one-step data integrations (e.g. 'I want to add Snowflake' with no API-key handling), and a Slack app installed automatically for each deployed app." ], "takeaways": [ "Treat shipping, not building, as the bottleneck for internal AI-built apps. Give everyone a paved road that handles hosting, auth, storage and secrets so engineers aren't pulled in to re-platform prototypes.", "Make the infrastructure invisible behind one CLI command, so you can swap the deployment target (Cloudflare, Vercel, AWS) without builders noticing.", "Put SSO in front of every internal app by default, log every request, and manage secrets centrally (e.g. Doppler) rather than trusting each builder to handle them.", "Make apps discoverable through a registry or catalog and default company-wide access, so a link shared in Slack just works.", "Run hackathons where non-engineers drive and engineers coach, and measure success by the share of apps built with no engineer in any commit." ], "topics": [ "internal tools", "platform engineering", "citizen developers", "ai coding", "deployment", "security", "developer experience" ], "tools": [ "WorkOS", "Atlas", "Wow CLI", "Lovable", "Claude Code", "Claude", "Codex", "Opus", "Vercel", "Cloudflare", "Cloudflare Workers", "Cloudflare D1", "Cloudflare KV", "AWS", "Doppler", "Okta", "GitHub", "Git", "Node.js", "MDM", "Webflow", "Snowflake", "Slack", "Wallaby" ], "quotes": [ { "text": "And so building things got cheap, right?", "at": "02:31", "url": "https://www.youtube.com/watch?v=HTzgC3FoYsI&t=151s" }, { "text": "But shipping it, making it available, even internally to your company, hasn't really gotten that much easier, right?", "at": "02:48", "url": "https://www.youtube.com/watch?v=HTzgC3FoYsI&t=168s" }, { "text": "out of these 60 apps, 37% of them have been built without any engineers in any of the commits.", "at": "14:57", "url": "https://www.youtube.com/watch?v=HTzgC3FoYsI&t=897s" }, { "text": "For us, AI solved the build problem, but we needed more in order to make this a ubiquitous platform", "at": "16:36", "url": "https://www.youtube.com/watch?v=HTzgC3FoYsI&t=996s" } ], "words": 3879 }, "summary_url": "/#HTzgC3FoYsI", "transcript": { "html": "/transcripts/HTzgC3FoYsI.html", "txt": "/transcripts/HTzgC3FoYsI.txt", "vtt": "/transcripts/HTzgC3FoYsI.vtt" } }