Sold by: 1Password
Deployed on AWS
1Password Device Trust Core enforces device health and compliance policies in real time by blocking unhealthy devices from accessing web apps via the browser extension. Device Trust Core walks users through resolving issues at the moment of access, enabling previously unattainable levels of compliance amid an ever-changing security environment.
4.6
Overview
Secure Every Device Before It Touches Your Apps
1Password Device Trust Core helps organizations enforce device compliance and reduce security risk by ensuring every device meets your health requirements before accessing work applications. Rather than relying solely on IT teams to chase down non-compliant endpoints, Device Trust Core empowers employees to self-remediate issues - reducing IT burden while strengthening your security posture.
1Password Device Trust is available in two versions to fit the needs of your business: Device Trust Core and Device Trust Connect.
Note: This product requires 1Password EPM Business.
Key Capabilities
Device Compliance Enforcement
Block access to web applications at the domain level when a device fails a health check. Ensure that only devices meeting your organization's security policies can reach sensitive SaaS applications and internal tools.
125+ Pre-Built Health Checks
Validate critical device attributes including OS version, disk encryption status, firewall configuration, antivirus presence, and more. Need something specific to your environment? Create custom policies using OSquery for full flexibility over your compliance criteria.
Shadow IT and App Visibility
Identify SaaS applications in use across your organization - including unauthorized or unmanaged tools - so administrators can enforce device security policies consistently across every application employees access.
Guided Self-Remediation
When a device fails a health check, employees receive clear, step-by-step guidance to resolve the issue themselves before accessing apps. This reduces the volume of IT support tickets and accelerates time-to-compliance without requiring manual IT intervention.
End-User Privacy Center
Give employees full transparency into what checks are running on their devices and who has access to the resulting data. Build trust with your workforce by making device compliance a collaborative process rather than a surveillance exercise.
Integrations With Your Existing Stack
Device Trust Core works alongside the identity and security tools your organization already relies on. 1Password integrates with SSO providers such as Azure AD, Google Workspace, and Okta, and can stream events to SIEM tools including Splunk, Elastic, Sumo Logic, and Panther. Custom policies leverage OSquery, giving your team the flexibility to define compliance criteria tailored to your environment.
How It Works:
- Define Policies: Set device health requirements using pre-built checks or custom OSquery policies tailored to your organization's security standards.
- Enforce Compliance: Domain-based enforcement blocks access to web applications when devices do not meet your defined health criteria.
- Empower Employees: Non-compliant users receive guided remediation instructions so they can resolve issues independently.
- Gain Visibility: Monitor device health status and SaaS application usage across your organization from a centralized dashboard.
Who Is This For?
Device Trust Core is designed for security and IT teams at organizations that need to enforce endpoint compliance across their workforce - particularly those managing distributed or remote teams where direct device management is challenging. It is well-suited for organizations looking to layer device trust into their existing access controls without deploying a full endpoint detection platform.
Get Started
To evaluate 1Password Device Trust Core for your organization, subscribe through AWS Marketplace. Contact the 1Password sales team to discuss deployment planning, proof-of-concept options, or to learn how Device Trust Core fits alongside your existing security stack.
Highlights
- Simplify Compliance: Enforce device compliance with 125+ pre-built health checks covering OS updates, encryption, firewall status, and more. Build custom checks using Osquery to match your organization's specific security policies. Device Trust Core continuously evaluates every device attempting to access protected web applications, ensuring only compliant endpoints connect to corporate resources.
- Enable Employees With Self-Remediation: When a device fails a health check, employees receive clear, step-by-step guidance to resolve issues on their own before accessing apps. This self-service approach reduces IT support ticket volume and accelerates time to compliance, keeping employees productive while maintaining your security posture without manual IT intervention.
- Discover Shadow IT With App Visibility: Gain visibility into unauthorized and unmanaged applications across your organization. The App Visibility feature surfaces shadow IT so security teams can identify risk, enforce access policies, and maintain a complete inventory of applications in use. Combined with the End-user Privacy Center, employees understand what data is collected while your organization stays protected.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
1Password Device Trust Core | Must be purchased with 1Password Business. Can be purchased at a minimum of 20 seats. | $1,680.00 |
Dimension | Description | Cost/unit |
|---|---|---|
True Up | True Ups/Overuse | $0.01 |
Dimensions summary
This contract prices around two dimensions billed per unit. The 1Password Device Trust Core unit is the base license, sold by seat. You must buy it alongside 1Password Business, with a minimum of 20 seats. Your cost scales with the number of seats you enroll. The True Up unit handles overuse. If you exceed your committed seat count during the term, you pay for the extra usage through True Ups. So the base unit sets your committed capacity, and True Ups cover any seats added beyond that commitment.
Top-of-mind questions for buyers
A seat maps to one enrolled user in your organization. You must license every user whose devices you want checked. Billing starts at a minimum of 20 seats. Device Trust works across company-owned and personal devices running Windows, macOS, Linux, iOS, and Android, but the count is by user, not by device.
True Up charges apply when your active usage passes the seat count you committed to at purchase. You pay for the extra seats added beyond that commitment during the term. The base Device Trust Core unit sets your committed capacity; True Ups cover overuse above it. Charges accrue only for the seats that exceed your commitment.
Yes. Device Trust Core must be purchased alongside 1Password Business. The core license also relies on the 1Password browser extension and the Device Trust agent to run its compliance checks. The extension enforces posture checks on web apps, so both components must be in place for the license to function.
1password.com+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Support URL: https://support.1password.com Support email: support@1password.com Sales / Enterprise inquiries: sales@1password.com
1Password offers 24/7 support via email, forum, and social media. Organizations with 101 or more users receive personalized training and a dedicated Customer Success Manager.
For questions specific to your AWS Marketplace subscription, including subscription management or refund requests, please reach out through the support portal at https://support.1password.com or email support@1password.com .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
1Password Device Trust Connect requires a device to be known, trusted, and compliant before granting access to protected applications, whether managed or unmanaged. Enforce custom compliance Checks, discover AI tools running on endpoints, and let employees self-remediate, all via an IdP integration and the 1Password browser extension.
1Password Business is an enterprise password manager that extends identity security beyond SSO, secures logins, reduces shadow IT, and protects infrastructure secrets to keep your team safe and productive.
1Password Unified Access secures credentials for your workforce, AI agents, and machines in one platform. Discover shadow AI, govern secrets, and audit all access with end-to-end encryption.
1Password SaaS Manager unifies AI and SaaS discovery, access governance, and spend optimization to help IT and security teams reduce risk and control costs.
Customer reviews
Human Resources
Easy to Use, Team Vaults Make Credential Sharing Effortless
Reviewed on Sep 20, 2026
Review provided by G2
What do you like best about the product?
Not only the ease-of-use, but the team vaults have been a huge positive for the CS team at my organization. We're able to easily share credentials and it has been crucial on a number of occasions when covering during PTO or fire drills.
What do you dislike about the product?
Not much to report on this front. We have found 1Password to be straightforward and have never encountered down time.
What problems is the product solving and how is that benefiting you?
Easily handing off credentials to team members for PTO or someone from Europe is asleep!
Denis R.
Seamless DevOps Integration with Centralized Secret Management
Reviewed on Sep 09, 2026
Review provided by G2
What do you like best about the product?
I like that I can easily integrate it into my DevOps workflow and keep secrets stored in a single source, rather than having them scattered across different systems.
What do you dislike about the product?
When you’re using a business account and sharing credentials with one other person, it isn’t really possible to share a single set of credentials indefinitely unless you use a vault.
What problems is the product solving and how is that benefiting you?
The solved problem is the single source of truth for credentials. From an ISO perspective it is really easy and moderately intuitive to manage a large set of people and their vaults.
Eric E.
Easy, Secure, and Speeds Up Form Filling with 1password
Reviewed on Sep 04, 2026
Review provided by G2
What do you like best about the product?
Easy to use and very secure. Sharing sensitive information with family becomes easy with 1password. I can order and fill out forms way faster thanks to 1password.
What do you dislike about the product?
Auto fill at times has issues. Some sites I need to manually copy and fill my information in.
What problems is the product solving and how is that benefiting you?
Storage of sensitive information in a simple way that keeps my data safe but also easy to access.
Non-Profit Organization Management
Secure, Centralized Hub for Sharing Information
Reviewed on Sep 02, 2026
Review provided by G2
What do you like best about the product?
the security and having a central space that can share information with other users
What do you dislike about the product?
not much, I think it has taken me a bit to totally understand the ways in which it can be used and the ins and outs of sharing information
What problems is the product solving and how is that benefiting you?
Managing access to our online presence and access to necessary information
Federico G.
Secure Secret Sharing and Strong Password Generation Made Easy
Reviewed on Sep 02, 2026
Review provided by G2
What do you like best about the product?
It helps me securely share secrets and credentials, and it also lets me generate strong, secure passwords.
What do you dislike about the product?
It’s probably a lack of knowledge on my side, but sometimes the browser extension shows suggestions on login pages and other times it doesn’t.
What problems is the product solving and how is that benefiting you?
Sharing credentials.