1Password

Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the decisions it takes to ship with AI. Ankur Goyal, Founder and CEO of Braintrust , which bills itself as “the AI observability platform,” joined Zero-Shot Learning to talk about the problem every team shipping AI eventually faces, you can build something that works and then watch it quietly become something that doesn't. Braintrust sits in the iteration loop for AI products, helping teams trace production events, turn behavior into eval datasets, compare prompt or model changes, and catch regressions before they reach users. For teams building agents, quality depends on whether the system’s behavior remains useful and safe as prompts, models, tools, and user inputs change. In this episode, what begins as a conversation about evaluation frameworks and production feedb

The developers and engineers here at 1Password are always working to improve our products. With all the active development to introduce features, fix bugs, and enhance the overall user experience, numerous code changes go into every release. We strive to ensure each iteration is better than the last and that new code doesn’t introduce vulnerabilities. A key part of this process is our Product Security (ProdSec) team’s review of all code changes that may have security implications. In the past, security engineers gathered on calls several times per week to go through all the PRs in the queue that required ProdSec eyes. While incredibly important, this review process was arduous and consumed countless people hours every month, especially when the engineers were flagging the same patterns over and over. And our team did this for years . These manual security reviews worked when 1Password was a smaller company with one product. But as 1Password grew in size and expanded its product line, t

This is the second post in a series that follows 1Password’s response to NIST’s call for input on how those principles should apply to agents. In our last post on agent identity , we introduced why the ability to reason makes agents fundamentally different from traditional machine workloads, why it breaks the assumptions traditional identity and access management was built on, and why real-time attestation establishes agent identity at runtime. This post maps those principles to production agent profiles The agents running in your environment aren’t all the same and neither are the risks they carry. A CI/CD pipeline runner and a long-running autonomous coding agent have fundamentally different access needs, threat surfaces, and identity requirements. Traditional IAM has been successful at governing login for humans and machine workloads with predictable behavior, but controlling non-deterministic agentic systems require unique authority models that a single identity architecture cannot

For years, our Pride Employee Resource Group (ERG) has been building something that goes far beyond a single month on the calendar: a community rooted in connection, visibility, and belonging for employees and allies across 1Password. This Pride Month, we're spotlighting Chris Houckham-West, a Customer Success Leader based in EMEA and a leader within our Pride ERG. In his time at 1Password, Chris has built a high-performing Customer Success team, earned recognition as part of President's Club, and helped bring our very first in-person Pride event in EMEA to life. What stands out most about Chris beyond his accomplishments is the way he leads: with openness, authenticity, and a genuine belief that when people feel like they belong, everyone does better work. We sat down with Chris to talk about his career journey, his philosophy on building inclusive teams, and why creating spaces for connection and belonging remains as important as ever. Can you walk us through your career journey and

Today we're shipping a new capability directly into 1Password Device Trust that lets admins query their fleets faster, without needing to be SQL experts. Now you can describe what you want to investigate in plain English, and Device Trust generates a ready-to-run SQL query you can execute across your devices in a single click. What Device Trust does 1Password Device Trust gives IT and security teams visibility and control over every device accessing company resources. It continuously checks devices against your security policies, surfacing issues like outdated software, disabled firewalls, and missing encryption, and blocks access when a device falls out of compliance. Under the hood, it uses both osquery and additional proprietary information that collect real-time data directly from endpoints, giving admins a live, queryable view across their devices. That last part is where this new capability comes in. The pain with writing queries today Osquery is powerful, but writing correct, pe

When 1Password announced we were having an AI-themed Hackathon, my first thought was that the content design team had to be involved. Over the last few months, our content design team saw massive changes not only in tech but also in our ways of working. It felt like everything was shifting to AI all at once: how we designed, prototyped, built new features, and collaborated across teams. I didn’t want our team watching from the sidelines. Content designers often do great work, but in the margins of larger design projects. This felt like the perfect moment to show how words can shape a great UX experience. And ironically, being the anointed “wordsmiths” of 1Password’s products is just a fraction of what we do. Content designers shape page structure, look at the information architecture, create journey maps, and are systems thinkers at heart. We look at: what users need to know, when they need to know it, how information shows up, and how each action builds towards the best possible outco

Recognized for Completeness of Vision and Ability to Execute 1Password has been recognized as a leader in the 2026 Gartner® Magic Quadrant™ for SaaS Management Platforms . SaaS Manager gives IT and security teams visibility into unapproved AI use and every app, AI tool, and dollar spent across their organization. This foundation lets teams identify real-time AI token overruns before mid-year budget surprises hit, cut wasted license spend, and reduce friction for employees requesting access. The platform closes the access gaps that happen outside of SSO, governing human access across the full employee lifecycle and enabling AI agents to automate governance workflows through an MCP Server. We believe our placement in the Gartner® Magic Quadrant™ reflects our vision that with the right controls, SaaS management can help a business move faster. Get the full analysis [Read the Gartner® Magic Quadrant™ for SaaS Management Platforms](https://1password.com/resources/gartner-magic-quadrant-saas

AI agents now write code, fix bugs, and ship to production. But in order to do useful work, agents require credentials. At 1Password, one of our core AI security principles is that raw credentials should never be directly exposed to LLMs, but all too often, that’s exactly what happens: most teams sacrifice security for speed and hand agents secrets in plaintext. The shortcuts behind that tradeoff predate agentic development: secrets packed into an .env file, a script with hardcoded keys, a config file committed to a repo. But agentic development exponentially increases the blast radius of an exposed or misused credential, since anything in an agent's context window can be logged, echoed into output, or surfaced by an agent that's been manipulated into revealing it. Solving this tension means giving agents the access they need without directly exposing credentials to the model context. Today we're expanding the 1Password MCP Server to Kiro , making 1Password the trusted access layer for

At 1Password, we regularly invite outside experts to challenge our assumptions and strengthen our security. We encourage security researchers to participate in our bug bounty programs , and have spent years building a collaborative research environment. We also believe in the benefit of open source software and standards, which raise the bar for the industry as a whole, while ultimately benefiting our 1Password customers. That’s why we funded an independent security assessment of the open source library Snow , worked closely with the maintainer on remediation, and are making the results publicly available for anyone to review. Where to read the report The results of the independent security assessment are available now for anyone who wants to learn more. Read the report Why we invested in Snow Snow is a Rust implementation of the Noise Protocol Framework , a system for building secure channels using customizable cryptographic handshake patterns based on Diffie-Hellman key exchange . We

One of the less surprising findings of the 2026 Verizon Data Breach Incident Report (DBIR) is the fact that incidents targeting the Financial and Insurance sector are on the rise. As they put it, “This sector continues to be a favorite among attackers, which isn’t surprising given that its core business is handling money.” For small-to-medium businesses (SMBs) in the financial services sector, the DBIR paints an even more dire picture. The report notes that SMBs face the same threats and breach patterns of larger organizations, but are also disproportionately impacted by attacks; 96% of ransomware victims were SMBs. In short: businesses in the financial services industry who are still building their foundation, or who possess limited security resources, are caught between a rock and a hard place. They operate within one of the most heavily targeted sectors for cyberattack, and are held to enterprise-level security standards by regulators and clients alike, but they’re operating with st

"The hardest thing in security is always the chaos," according to Travis McPeak, Head of Security at Cursor. He shared this with Nancy Wang, CTO of 1Password, and Dev Tagare, Senior Director of Engineering at Google, on a recent episode of Zero-Shot Learning, the podcast about how AI gets built, secured, and deployed. "We're always going to have more that we have to be doing than we can actually do." Travis has worked within that constraint in security roles at Netflix and Databricks and now at Cursor, the AI-native IDE, where agents write production code for a rapidly growing base of developers worldwide. Agents in the development pipeline introduce a new kind of actor. They are non-deterministic, have access to tools, are exposed to untrusted input, and often operate near credentials, source code, and production systems. All with no guarantee that past behavior predicts future actions. Unlike developers who earn trust through accountability and predictability, age