Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

1Password

The 1Password Environments MCP Server is now on Cursor Marketplace

Jul 30, 2026 By Dennis Kromhout van der Meer and Scott Lougheed In 1Password
AI agents are doing more than just generating code. Increasingly, they are working autonomously on complex coding challenges, touching production APIs, databases, and infrastructure across development environments, often without thorough human review. To perform these operations and access multiple systems, agents rely on developer secrets and non-human identities (NHI). But often, developers lack a secure way to share these secrets, leading to overprivileged, invisible access.
Read Post
1Password

Scaling security reviews at 1Password: Solving the context and nondeterminism problems

Jul 30, 2026 By Megan Barker In 1Password
In our last post, we shared how we began to scale our security code review process with SAGE. We discussed how we gathered historical Product Security (ProdSec) review records to create a 1Password-specific ruleset, the three-stage Finder/Critic/Judge pipeline, and the limitations of our v1 implementation.
Read Post
1Password

1Password Credential Broker is now in public preview

Jul 28, 2026 By Jeff Malnick In 1Password
Every security team has tried to trace a credential access event back to a specific workload, and received nothing but a "service account." That service account probably had access to an entire vault, and its audit trail doesn’t tell you which repo triggered the request, which specific credential was accessed, or whether the workflow still has access. When an auditor asks, or an incident occurs, that's not a good place to be.
Read Post

Secrets Off Disk: How 1Password Secures Developer Workflows

Jul 28, 2026 By 1Password In 1Password
Your.env file has your database password, your AWS keys, and your Stripe secret, all in plaintext, sitting on your laptop. 1Password Developer Watchtower finds it, 1Password Environments secures it, and you keep shipping. See how 1Password discovers plaintext developer credentials, imports them into an encrypted environment, and mounts a virtual protected.env, with no workflow disruption for developers and full fleet visibility for security teams.
View Video

Distributed systems in disguise with Maxim Fateev from Temporal | Zero-Shot Learning

Jul 28, 2026 By 1Password In 1Password
When most developers write code, crash recovery logic is at the bottom of their priorities, until crashes and delays force them to incorporate resiliency logic. That’s why Temporal co-founder and CTO Maxim Fateev built a system to turn code into durable execution. In his conversation with 1Password CTO Nancy Wang and VP of Engineering for Developer and AI Jeff Malnick, Maxim explains why the distributed systems thinking that shaped his work is now essential for building reliable AI agents, with a live demo of a durable agent surviving a crash.
View Video
1Password

Delegated authority, running locally: Give an agent on your machine an identity you can trust

Jul 21, 2026 By Horia Culea In 1Password
Part 3 of our agent-identity series: a reference architecture showing how a locally running AI agent, like the coding assistant in your editor or the copilot in your browser, can borrow a human's authority in a scoped, short-lived, auditable way, anchored in an app the user already trusts.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.