1Password named a leader in the GigaOm Radar for Enterprise Password Management

Identity and access have changed drastically in the past decade. To meet the needs of the modern enterprise perimeter, Enterprise Password Managers (EPM) have evolved far beyond traditional workplace password storage. 

The GigaOm Radar: Enterprise Password Management charts this evolution of the category. As the report states, “...evaluation now turns on what surrounds the vault: passwordless login paths, machine and AI-agent credential delivery, breach intelligence, and the administrative machinery to govern all of it at scale.”

As such, it’s an honor to announce that GigaOm Radar positions 1Password as a Leader and Disruptive Pioneer among Enterprise Password Management platforms. This is the fifth year running that 1Password has been named a leader in EPM. Read on to learn more about the Radar’s analysis and criteria for EPM platforms, and how 1Password’s solutions are built to manage the complex access needs of modern companies.

Why GigaOm declared 1Password a leader in Enterprise Password Management

GigaOm’s report analyzes 23 EPM vendors according to how well they meet essential enterprise password management requirements, such as strong cryptography and the ability to manage developer secrets. It also analyzes emerging critical capabilities within enterprise password management, such as managing credential and secrets access for AI agents.

The report calls attention to how EPM platforms serve various security and management needs across the “Tech Buying Triad” of CIOs, CTOs, and CISOs. 

Across the core capabilities for these buyers, 1Password EPM ranked highly on several distinct criteria. These include, among others:

• Browser and application coverage

• Developer API ecosystem

• Identity integration extensibility

• Passwordless and passkey support

• Secrets management integration

• Compliance certifications

• Vault cryptography architecture

1Password’s strength is depth on two axes, developer tooling and identity integration. The developer surface carries published OpenAPI specifications, maintained Go, JavaScript and Python SDKs, a Terraform provider, a Kubernetes operator, and an explicit version-support and compatibility statement. Identity integration backs it up: OIDC Unlock with SSO participates in key management, with device-key-encrypted credential bundles and IdP policy evaluated at every unlock…For an organization that wants its vault wired into identity and developer workflow rather than sitting alongside it, 1Password is built for the job.”

–Paul Stringfellow, GigaOm Radar: Enterprise Password Management

AI-agent and non-human identity governance with 1Password EPM

AI agents and other non-human identities (NHIs) are increasingly used in enterprise environments to access applications, APIs, infrastructure, and sensitive data. An agent may need credentials to complete a specific task, but their access needs differ from human employees. To prevent credentials from becoming permanently accessible through the agent’s context, that access should be scoped, time-bound, individually revocable, and audited separately from the human who initiated the work.

Critically, GigaOm’s report also highlights 1Password as a leader in its “Disruptive Pioneer” category, referring to organizations that leverage emerging technologies to redefine authentication and access management.

In particular, they ranked 1Password highly in their criteria for “Agentic non-human identity credential governance.”

If AI agents will access credentials in your environment, they should have their own identities. These should be scoped, expiring, individually revocable, and audited separately from their human sponsors. A vault that allows an agent to use only its owner’s identity may make it harder to establish exactly who, or what, performed an action during an audit.”

–Paul Stringfellow, GigaOm Radar: Enterprise Password Management

Governing access for AI agents and NHIs is a critical capability in the modern enterprise. 1Password’s own research has found that while 65% of developers say they’re expected or encouraged to use AI agents, only 33% have a secure way to do so.

GigaOm echoes these findings, stating that “Agentic and non-human identity governance is the youngest capability in this evaluation and one of its weakest field-wide… The gap between the front and the floor is wider here than on any established criterion.”

In short, capabilities like agentic autofill make 1Password truly unique among EPM offerings, with a singular strength in our platform’s ability to manage credential access for agents and NHIs. 

Innovation built on a strong foundation

The modern enterprise faces continuous evolution in how we define credentials and identities, and EPM platforms need to straddle this divide. For example, passwordless authentication is critical to modern security, but few would argue that it means we can stop securing traditional passwords. 

1Password has been named a leader in GigaOm’s EPM Radar for the fifth year running; for an EPM to be effective, it needs to evolve to meet modern enterprise access needs, while still providing essential security controls. GigaOm’s report this year illustrates that 1Password EPM is a leader on both fronts. 

AI agents and NHIs present security leaders with new credential and access challenges. The GigaOm Radar for Enterprise Password Management makes it clear that 1Password is uniquely able to manage this new access perimeter, built on a security model that provides the strongest foundation for credential and secrets management.