1Password has acquired Apono and introduced a Credential Broker, moving the company beyond storing credentials into governing who and what can use them across human, machine, and AI agent identities. The combination is built around just-in-time access, granting permissions only for a specific task and revoking them when the task is done, rather than leaving standing access in place after the initial login.
Apono brings the access-governance engine. Its technology provisions access dynamically, scoping permissions to a task and automatically withdrawing them on completion, and it integrates with more than 200 enterprise systems, including tools such as Slack, Jira, PagerDuty, and GitHub. Folding that into 1Password is meant to turn a credential vault into a system that decides, in real time and against policy, whether a given request should be allowed at all.
The Credential Broker, launched in private beta alongside the deal, is the piece that applies this to secrets. It keeps credentials in 1Password’s zero-knowledge vault and releases an approved credential only to a verified requester at the moment it is needed, which is intended to eliminate the long-lived secrets that accumulate in code repositories and automation pipelines. For AI agents, the combined platform adds intent-based access control with behavior monitoring, so an agent’s access can be evaluated against what it is trying to do and traced through a unified audit trail.
“Today’s identity systems govern the entry, but not the stay,” said David Faugno, Chief Executive Officer of 1Password, arguing that companies cannot capture the value of their AI investments when agents reach critical systems through credentials nobody is governing. Rom Carmel, co-founder and Chief Executive Officer of Apono, described standing access as “the quiet liability inside almost every company: permissions granted once and never taken back.”
The deal lands in a market racing to extend identity controls to non-human actors. CrowdStrike recently moved to acquire SGNL for continuous, real-time authorization of AI agent identities, and SailPoint has built an Agentic Fabric for AI and non-human identity governance with zero-standing-privilege and just-in-time tiers, the same access model 1Password is now assembling through Apono.
Financial terms of the acquisition were not disclosed, and the Credential Broker is available in private beta.
Sources: 1Password
–
By the ID Tech Editorial Team
