CISO Tribune

Vendor comparison · 2 companies

1Password vs CyberArk

1Password sells software that secures human, machine, and agent credentials used in a business. 1Password Unified Access Platform contains Enterprise Password Manager, Device Trust, SaaS Manager, Credential Broker and Privileged Access. CyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security. CISO Tribune files both under Privileged access management and Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • 1Password
  • CyberArk
1Password vs CyberArk: Products, Customers and Funding Compared
1Password1Password sells software that secures human, machine, and agent credentials used in a business. 1Password Unified Access Platform contains Enterprise Password Manager, Device Trust, SaaS Manager, Credential Broker and Privileged Access.1password.comCyberArkCyberArk sells the Idira Identity Security Platform, which brings together modern privileged access management (PAM), machine identity security and agentic identity security.cyberark.com
What it sells
  • Privileged Access[3][4][5]Replaces standing privileges for humans and AI agents with access provisioned on request.
  • Enterprise Password Manager - MSP Edition[11]Password management for MSPs, with a dedicated MSP console for client management.
  • Modern PAM[12]Provides discovery of privileged access and dynamic privileged access for human identities.
  • Secrets Management[1][3][12]Secures machine identities from secrets to workloads.
  • Agentic identity security[12]Discovers, controls and governs agentic identities at scale.
Categories
Headquarters
Toronto, Canada[1]Petach-Tikva, Israel[4]
Founded
2005[2]1999[4]
Ownership and funding
Not stated on its pagesOwned by Palo Alto Networks since 2026[1][14]
Named customers
Not stated on its pages
  • Northern Trust[5]
  • Healthfirst[6]
  • Carnival Corporation[7]
  • Aflac[8]
  • Webster Bank[9]
Recent news
  • October 22, 20261Password announced 1Password for Agents, a platform that lets personal AI agents use stored credentials for approved tasks without seeing or storing them.[15]
  • June 2, 2026Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined.[10]
  • May 12, 2026Palo Alto Networks launched Idira, an identity security platform built on CyberArk's privileged access products, adding new capabilities for existing CyberArk customers.[11]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen October 24, 2026[14]
Who it fits
From its own pages, 1Password sells mainly to businesses that need to secure credentials used by people, machines and AI agents. Managed service providers are a stated audience, since Enterprise Password Manager - MSP Edition is available to all MSPs. Small businesses are addressed with password management aimed at getting everyone on a team to use strong passwords. IT or Security teams may install Device Trust automatically for users.From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform. It names customers such as a group of dental practices, a government services organization and an organization with vault sprawl to control. Its pages address existing CyberArk customers moving to Idira.
Last verified
November 2, 2026September 27, 2026

Where they overlap

  • 1Password and CyberArk are both filed under Privileged access management and Non-human identity security.

Where they differ, field by field

  • 1Password's primary category is Password and secrets vaults for people; CyberArk's is Privileged access management.
  • 1Password is also filed under SaaS security posture. CyberArk is also filed under Identity governance and administration.
  • 1Password lists Privileged Access and Enterprise Password Manager - MSP Edition. CyberArk lists Modern PAM, Secrets Management and Agentic identity security.
  • 1Password is headquartered in Toronto, Canada. CyberArk is headquartered in Petach-Tikva, Israel.
  • 1Password was founded in 2005. CyberArk was founded in 1999.
  • CyberArk is owned by Palo Alto Networks, since 2026.
  • CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.

What it sells: 1Password

What Privileged Access does[3][4][5]
Privileged Access provisions access on request, scoped to the task, and removed when the work is done. A lightweight connector provisions just-in-time, just-enough access to Cloud Infra, K8s, databases, SSH, RDP, and more. Privileged Access provisions access directly in the target system's native policy layer: AWS IAM, K8s RBAC, or a scoped database account.
What Enterprise Password Manager - MSP Edition does[11]
Enterprise Password Manager - MSP Edition is available to all MSPs. The MSP solution includes multi-tenancy client management accessible from a dedicated MSP console. MSP pricing is consumption-based per user.

What it sells: CyberArk

What Modern PAM does[12]
Modern PAM provides discovery with continuous visibility and AI-driven analytics. It eliminates always-on standing privileges. A unified command center streamlines deployment through automation and embeds threat detection directly into privileged workflows.
What Secrets Management does[1][3][12]
The Idira platform includes discovery, risk analytics and modern secrets management. It includes governance and reporting for all vaults and workloads.
What Agentic identity security does[12]
Idira secures agentic identities alongside human and machine identities. Machine and agentic identities are often referred to as nonhuman identities.

Questions about 1Password and CyberArk

What do 1Password and CyberArk sell?
1Password sells Privileged Access and Enterprise Password Manager - MSP Edition. CyberArk sells Modern PAM, Secrets Management and Agentic identity security.
Are 1Password and CyberArk in the same category?
They share Privileged access management and Non-human identity security. 1Password's primary category is Password and secrets vaults for people and CyberArk's is Privileged access management.
Where are 1Password and CyberArk headquartered?
1Password is headquartered in Toronto, Canada. CyberArk is headquartered in Petach-Tikva, Israel.
When were 1Password and CyberArk founded?
1Password was founded in 2005. CyberArk was founded in 1999.
Who owns 1Password and CyberArk?
CyberArk is owned by Palo Alto Networks, since 2026.
Which customers do 1Password and CyberArk name?
CyberArk publicly names Northern Trust, Healthfirst, Carnival Corporation, Aflac and Webster Bank.
Who are 1Password and CyberArk sold to?
From its own pages, 1Password sells mainly to businesses that need to secure credentials used by people, machines and AI agents. From its own pages, the company sells mainly to organizations that want to secure human, machine and agentic identities on one platform.
What have 1Password and CyberArk announced recently?
October 22, 2026: 1Password announced 1Password for Agents, a platform that lets personal AI agents use stored credentials for approved tasks without seeing or storing them. June 2, 2026: Palo Alto Networks reported fiscal third quarter 2026 revenue of $3.0 billion, including $388 million from CyberArk and Chronosphere combined.

About 1Password

1Password sells software that secures human, machine, and agent credentials used in a business. 1Password Unified Access Platform contains Enterprise Password Manager, Device Trust, SaaS Manager, Credential Broker and Privileged Access. Enterprise Password Manager vaults credentials and secrets. Credential Broker delivers those credentials and secrets to workloads at runtime. Privileged Access governs what identities are permitted to do in the systems those credentials connect to, when they can do it, and for how long.[3][4][5]

Credential Broker verifies AI agents and machine workloads at runtime, then delivers only the credentials each is authorized to receive. SaaS Manager is used to discover, secure access, and optimize spend on AI tokens and SaaS apps. Privileged Access enforces zero standing privilege through just-in-time, and just-enough access.[4][5]

Privileged Access policy decisions draw from Entra, Okta, PagerDuty, asset context, and sensitivity. A lightweight connector provisions just-in-time, just-enough access to Cloud Infra, K8s, databases, SSH, RDP, and more. Agents connect to Privileged Access via MCP. Privileged Access provisions access directly in the target system's native policy layer: AWS IAM, K8s RBAC, or a scoped database account. Dynamic Guardrails factor in who's requesting, what they need, and the risk of that action. Privileged Access logs every request, approval, and access event automatically. Every request, decision, and revocation is captured with context and surfaced through the audit log and SIEM integration.[5]

1Password Device Trust was previously named Kolide. The Device Trust agent allows Mac, Windows and Linux devices to communicate with the Device Trust service. The Apps feature of Device Trust helps administrators discover and protect work-related web applications used by employees across their organization. With 1Password Extended Device Compliance, the 1Password browser extension works with Kolide to make sure a device is healthy before the user can access company web applications. AI Insights helps an organization understand how AI tools are being used, without collecting the contents of AI conversations. Device Trust inventories MCP server configurations for supported AI tools. The Kolide mobile app is intended for use with iPhones, iPads, and Android-based mobile devices.[6][7][8][9][10]

1Password Enterprise Password Manager - MSP Edition is available to all MSPs, enabling them to protect the sensitive information of their clients and improve cybersecurity hygiene. The MSP solution includes multi-tenancy client management accessible from a dedicated MSP console. MSPs can add new clients or link existing 1Password client accounts and access those instances directly from the MSP console. MSP pricing is consumption-based per user, and MSPs select a region based on data compliance needs. Managed client invoices are consolidated into one invoice per billing period via consumption-based billing. Technicians are required to periodically verify their identity through enhanced multi-factor authentication (MFA) when performing client account administrative actions. The MSP solution integrates with the existing services and applications of clients, like single sign-on (SSO) providers and security information and event management (SIEM) platforms.[11]

Watchtower flags weak passwords and other security problems to team members. Administrators get a unified dashboard to monitor password health, potential data breaches, user access, and more. 1Password offers integrations with Okta, Entra ID, OneLogin, Duo, and more. 1Password lets organizations place new hires in custom groups with access to shared vaults, and revoke access when people leave. 1Password provides granular controls to protect credentials, add vault permissions, and audit access events and actions. 1Password uses a two-key derivation model that combines an account password and Secret Key.[4][5][12][13][14]

1Password on the record

Sources

1Password full record

  1. [1]Press1Password · 1password.com · undated page, accessed November 2, 2026 · Tier A
  2. [2]Company1Password · 1password.com · undated page, accessed November 2, 2026 · Tier A
  3. [3]1password.com1Password · 1password.com · undated page, accessed November 2, 2026 · Tier A
  4. [4]Password Manager, Secrets, and Access Management | 1Password1Password · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cloud Privileged Access Management | 1Password1Password · undated page, accessed November 10, 2026 · Tier A
  6. [6]Removal instructions | 1Password Support1Password Support · published November 4, 2026 · Tier A
  7. [7]Admins | 1Password Support1Password Support · published November 4, 2026 · Tier A
  8. [8]Get started using 1Password Extended Device Compliance to access web apps | 1Password Support1Password Support · undated page, accessed November 10, 2026 · Tier A
  9. [9]Data collection and privacy | 1Password Support1Password Support · undated page, accessed November 10, 2026 · Tier A
  10. [10]Mobile app | 1Password Support1Password Support · published November 4, 2026 · Tier A
  11. [11]MSP Password Management: Protect your clients | 1Password1Password · undated page, accessed November 10, 2026 · Tier A
  12. [12]Password Management for Teams & Small Business | 1Password1Password · undated page, accessed November 10, 2026 · Tier A
  13. [13]About the security of using Touch ID or Apple Watch to unlock 1Password for Mac | 1Password Support1Password Support · published October 6, 2026 · Tier A
  14. [14]Setting up your device | 1Password Support1Password Support · published November 4, 2026 · Tier A
  15. [15]1Password for Agents Launches as the Trust Layer for Personal AI Agents | 1Password1Password · published October 22, 2026 · Tier A
  16. [16]1Password Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

CyberArk full record

  1. [1]Palo alto networks completes acquisition of cyberark to secure the ai eraPalo Alto Networks · paloaltonetworks.com · published February 11, 2026 · Tier A
  2. [2]CyberArk is now Idira Frequently Asked QuestionsCyberArk (Idira Team) · community.cyberark.com · published September 21, 2026 · Tier A
  3. [3]IdiraPalo Alto Networks · paloaltonetworks.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Zk2532806CyberArk Software Ltd. via SEC EDGAR · sec.gov · undated page, accessed May 1, 2025 · Tier A
  5. [5]Northern trustPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]HealthfirstPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]Carnival corporationPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]AflacPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]Webster bankPalo Alto Networks · paloaltonetworks.com · undated page, accessed October 10, 2026 · Tier A
  10. [10]Palo alto networks reports fiscal third quarter 2026 financial resultsPalo Alto Networks · paloaltonetworks.com · published June 2, 2026 · Tier A
  11. [11]Palo alto networks introduces idira the next generation identity security platform built for the ai enterprisePalo Alto Networks · paloaltonetworks.com · published May 12, 2026 · Tier A
  12. [12]Idira | The Identity Security Platform - Palo Alto NetworksCyberArk · undated page, accessed October 24, 2026 · Tier A
  13. [13]CyberArk Introduces First Identity Security Solution Purpose-Built to Protect AI Agents with Privilege ControlsBusiness Wire · published November 4, 2025 · Tier A
  14. [14]Palo Alto Networks (CyberArk) Reviews - GartnerGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C

Spot a factual error? Request a correction.