1Password introduces Unified Access platform and partner API for AI agent security – News

Cybersecurity and password service provider 1Password LLC today announced two related initiatives that are designed to strengthen how organizations manage and enforce access across modern digital environments, which increasingly include artificial intelligence agents and automated systems.

The first announcement today was the introduction of Unified Access, a new platform intended to help companies discover access risks, secure credentials and audit activity across human users, AI agents and machine identities. The second announcement, Users API for Partners, is designed to allow security tools and security operations teams to automate identity enforcement directly inside 1Password during active security incidents.

Unified Access is designed to address a growing challenge in enterprise security as organizations deploy software agents that can access systems and perform tasks autonomously. Traditional identity security models were built around human logins and static permissions, but AI agents and automated workflows now operate continuously and often interact with multiple services and data sources without direct human involvement.

According to 1Password Chief Executive Officer David Faugno, the shift requires a new approach to access control that focuses on real-time authorization rather than onetime authentication. AI agents can invoke application programming interfaces, chain together tools and execute workflows automatically, meaning security systems must verify and control access dynamically as actions occur.

The Unified Access platform works through a three-part model focused on discovery, security and auditing. The system helps organizations identify exposed credentials and agent activity across endpoints, browsers and development environments, secure those credentials in centralized vaults, and provide visibility into how both human and nonhuman identities interact with enterprise systems.

A Unified Access Pro tier is generally available starting today to allow security teams to identify AI-related credential risks, vault exposed secrets and manage human and machine credentials within a single secure environment.

The second release today, Users API for Partners, allows security vendors and automation platforms to integrate directly with 1Password Enterprise Password Manager to enforce access decisions during security incidents.

The API allows for automated workflows that can suspend or restore user access when suspicious activity or security risks are detected. Security teams can also embed those actions into security operations center workflows so that enforcement actions occur automatically as part of incident response processes.

Under the hood, the API uses OAuth 2.0 authentication and scoped tokens as opposed to long-lived credentials. That allows partners to build integrations that can securely list users, suspend access during incidents and restore accounts after remediation.

“It’s no longer enough to simply observe risk, security teams need the ability to adjust authority in the moment, including the credentials and secrets that persist beyond authentication,” explained Chief Business Officer John Torrey. “With Users API for Partners, 1Password becomes an active enforcement point in automated security workflows, enabling teams to orchestrate access changes directly in 1Password.”

1Password says that it is aiming to help organizations move from identity visibility toward real-time identity enforcement across the broader security stack by allowing security orchestration platforms to trigger access changes directly inside 1Password.

The two announcements today, the Unified Access platform and the new partner API, reflect a shift toward continuous identity security, where credentials and secrets are treated as active control points rather than static artifacts.

Image: News/Ideogram