Skip to Main Content
Customer story

Tomorrow.io implements Unified Zero Trust Access with 1Password and ZTNA integration

About the company

Tomorrow.io empowers global leaders with advanced space tech, generative AI, and proprietary models to deliver weather intelligence, enabling impact prediction, risk mitigation, and operational resilience in the face of climate challenges.

www.tomorrow.io

The challenge: Limitations of ZTNA in enforcing least‑privilege just‑in‑time access

Network-level access solutions like ZTNA are often too broad and persistent, lacking the granularity needed to enforce strict least-privilege JIT access. ZTNA tools grant access to entire applications or systems instead of specific resources and specific actions, leading to overprivileged access and potential security gaps.

1Password and ZTNA deliver granular, multi-layered controls. The integration of 1Password and our ZTNA provider enables the implementation of Just-in-Time (JIT) access, Just-Enough Access (JEA), and Just-Enough Connectivity (JEC) across our enviroment.

Moshe Belostotsky
Director of Cloud Infrastructure at Tomorrow.io

"This unified approach delivers a comprehensive Zero Trust Solution, providing significant value by enforcing end-to-end least privilege, reducing the attack surface, and streamlining on-demand access" continues Belostosky.

The solution: Just‑in‑time network access with least privilege controls

Using 1Password and their ZTNA provider, Tomorrow.io securely provisions temporary access to specific apps and environments while enforcing least privilege controls—eliminating standing privileges and significantly reducing the attack surface.

Enforce end‑to‑end least privilege

Align network and permissions controls to ensure users access only what they need — no more. Combine just‑enough connectivity with just‑enough access to prevent overexposure.

Enforce time‑bound access with just‑in‑time controls

Grant temporary access permissions and network connectivity only when needed, ensuring limited exposure and automatic revocation, reducing compliance risks.

Gain unified visibility across access and connectivity

Track who requested access, what permissions were granted, and where users connected — for full end‑to‑end auditability, from access approval to real-time system activity.

Before 1Password, we lacked control over standing access to our production environment. Now, just‑in‑time access gives us precise, on-demand control — enhancing security and operational efficiency.

Moshe Belostotsky
Director of Cloud Infrastructure at Tomorrow.io

Ready to get started?

Request a demo to see how 1Password combines workforce identity, application insights, device trust, and enterprise password management in one place.