All templates

Automated VPN Setup for New Starters

When a new starter is added to your people list, WebRun opens ExpressVPN, checks the subscription has room and reads the current device list, files a per-person setup checklist in Google Drive, posts IT the steps in Slack, and checks back until the new device actually appears on the account.

Runs on WebRun · Strict Lockdown policy
Runs when a new starter is added WebRunorchestrates each step
1 ExpressVPN check seats and devices
2 Google Drive file the setup checklist
3 Slack walk IT through and confirm
In short

How do I get a new starter set up on the company VPN and confirm it works?

When a new starter is added, WebRun opens ExpressVPN, confirms the subscription has a free device slot, and records the current devices. It files a setup checklist in Google Drive, posts the task to IT in Slack, then checks back until the new device appears on the account and marks setup confirmed.

  • No new starter spends week one without the VPN
  • Setup is confirmed against the real device list, not assumed
  • Every onboarding leaves an auditable checklist behind

Built for IT managers · operations teams · remote-first companies · office managers

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens www.expressvpn.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    ExpressVPN - check seats and devices
    expressvpn.com
    WebRun in ExpressVPN: check seats and devices
    WebRun opens ExpressVPN to check seats and devices.
    • Open your ExpressVPN account and read the current subscription and how many device slots are in use
    • List the devices already connected so a new one can be told apart
    • Note which app downloads the starter will need for their laptop and phone
    • On the follow-up run, check whether the new starter's device now shows on the account. WebRun never buys, upgrades, or cancels a plan

    Done when Seat availability is confirmed and the current device list is recorded.

  3. 2
    Google Drive - file the setup checklist
    drive.google.com
    WebRun in Google Drive: file the setup checklist
    WebRun opens Google Drive to file the setup checklist.
    • Create a setup checklist document for the new starter in your IT onboarding folder
    • List the install steps for each device they need covered
    • Leave a line for the date the device was seen on the account
    • Keep one document per starter so onboarding can be audited later

    Done when The starter has their own setup checklist filed in Drive.

  4. 3
    Slack - walk IT through and confirm
    slack.com
    WebRun in Slack: walk IT through and confirm
    WebRun opens Slack to walk IT through and confirm.
    • Post the new starter's setup task to your IT channel with a link to the checklist
    • Say whether the subscription has a free device slot or needs one freed first
    • Follow up in the same thread once the new device appears on the account
    • Chase in the thread if the device has still not appeared after the number of days you set. WebRun posts internally and never emails the new starter directly

    Done when IT has the task in Slack and the thread records the device as confirmed.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
www.expressvpn.com
ScheduleRuns automatically on this cadence
Runs when a new starter is added
DeliveryHow each run's result reaches you
Setup checklist · Slack
OutputWhat each run produces - A per-starter VPN setup checklist plus a Slack thread that records seat availability and the date the new device was confirmed on the account.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it buy more seats if the plan is full?

No. WebRun reports that the subscription has no free device slot and leaves the purchase to you. It never upgrades a plan, adds seats, or charges the card on file.

Does it email the new starter?

No. Everything is posted internally to your IT channel in Slack. If the starter needs instructions, a person sends them, so no credentials or setup links go out unreviewed.

How does it know setup actually finished?

It re-reads the device list on the ExpressVPN account and looks for a device that was not there before, then records the date in the Slack thread. If nothing appears, it chases in the same thread.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.