SecurityBlog on 1Password BlogJul 30 2mo2 months agoScaling security reviews at 1Password: Solving the context and nondeterminism problemsIn our last post, we shared how we began to scale our security code review process with SAGE. We discussed how we gathered historical Product Security (ProdSec) review records to create a 1Password-specific ruleset, the three-stage...1PasswordRead
AI and agentsBlog on 1Password BlogJul 30 2mo2 months agoThe 1Password Environments MCP Server is now on Cursor MarketplaceAI coding agents such as Cursor are becoming an integral part of software development. They help developers set up projects, write code, and run tasks, but the applications developers build still need credentials to connect to APIs...1PasswordRead
Product and companyBlog on 1Password BlogJul 28 2mo2 months agoYour business runs on credentials IT did not provisionRight now, in one of your employee's personal vaults, there's a login for a vendor portal your team has been using for three years. Whoever set it up no longer works at the company. The password has never been rotated.1PasswordRead
Developer toolsBlog on 1Password BlogJul 28 2mo2 months agoSecure developer secrets with 1PasswordNo developer wants to be responsible for causing a catastrophic breach. But security best practices are often incompatible with the expectation that developers constantly write and ship code, and that velocity is massively accelerating...1PasswordRead
AI and agentsBlog on 1Password BlogJul 28 2mo2 months ago1Password's research finds AI agent adoption is outpacing governanceSummary and key findings 1Password surveyed 500 American IT and security professionals and 500 developers to learn how organizations are adopting and governing AI for their most technical workers.1PasswordRead
Product and companyBlog on 1Password BlogJul 28 2mo2 months ago1Password Credential Broker is now in public previewEvery security team has tried to trace a credential access event back to a specific workload, and received nothing but a "service account." That service account probably had access to an entire vault, and its audit trail doesn’t tell you...1PasswordRead
Product and companyBlog on 1Password BlogJul 28 2mo2 months agoIntroducing 1Password Privileged Access: Zero standing privileges for every identityHere's a moment that comes up in nearly every compliance review: a security engineer pulls a list of IAM roles in the AWS environment. The list is long.1PasswordRead
SecurityBlog on 1Password BlogJul 24 3mo3 months agoA college student's guide to better digital securityDo you prefer a short flight or a long drive? Do you have an undiscovered love for esports? Do you look good with bangs and, if not, do you look good in hats?1PasswordRead
Data engineeringBlog on 1Password BlogJul 22 3mo3 months agoThe data platform 1Password needed didn't exist. So we built itConsider a few tasks that take place across every business, every day: A product team ships a feature and wants to know if customers are using it successfully. A finance team needs customer and account information for planning.1PasswordRead
AI and agentsBlog on 1Password BlogJul 21 3mo3 months agoDelegated authority, running locally: Give an agent on your machine an identity you can trustPart 3 of our agent-identity series: a reference architecture showing how a locally running AI agent, like the coding assistant in your editor or the copilot in your browser, can borrow a human's authority in a scoped, short-lived...1PasswordRead
AI and agentsBlog on 1Password BlogJul 16 3mo3 months ago1Password for Claude: Give Claude access without giving up your credentials1Password for Claude enables secure agentic access without exposing your credentials to the model. It’s available now for Mac users.1PasswordRead
Product and companyBlog on 1Password BlogJul 14 3mo3 months agoThe tokenmaxxing bill is due: Take control of AI spend with SaaS ManagerA nasty shock is hitting finance leaders across every industry right now: AI token bills that run ten, twenty, even a hundred times over what they forecasted, blowing holes straight through quarterly budgets.1PasswordRead
AI and agentsBlog on 1Password BlogJul 14 3mo3 months agoMercor's CEO: Why agents that pass tests fail in productionZero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the complex...1PasswordRead
Product and companyBlog on 1Password BlogJul 9 3mo3 months agoHow IT can reduce credential risk across every departmentNote __This blog is a recap of 1Password’s recent webinar, “The credential sprawl tour: Is your department leaking secrets?” [Head here](https://1password.com/webinars/secure-every-credential) to watch the complete webinar recording.__...1PasswordRead
Developer toolsBlog on 1Password BlogJul 9 3mo3 months agoDon’t bring exposed developer credentials to Black HatBlack Hat is where the security industry gathers to compare notes on current cybersecurity topics. It brings together a diverse group of security experts, from C-suite executives to black-hat hackers.1PasswordRead
Blogsby Ibis