1Password acquires Apono to control what AI agents do in enterprises

What happened?

On Monday, 1Password, the well-known password management company based in Toronto, announced the acquisition of Apono, an Israeli startup that provides a real-time access governance platform. According to The Next Web, Apono's technology decides what each identity — human, machine, or AI agent — can touch within corporate systems, offering dynamic, contextual control. The price was not disclosed, although Israeli media Calcalist reported that the startup had raised $5.3 million in seed funding.

Why is it important?

This acquisition reflects a key trend in enterprise security: the rise of AI agents that act autonomously, accessing data and systems without direct human oversight. Traditionally, identity management focused on people, but with the proliferation of bots, APIs, and intelligent agents, the security perimeter has blurred. 1Password, which already managed human credentials, now seeks to fill the gap for non-human identities (NHIs) and the temporary permissions required by AI agents.

According to Gartner, by 2028, 40% of interactions with enterprise systems are expected to be performed by autonomous agents. Without proper control, these agents could become attack vectors or cause inadvertent data leaks. Apono's solution allows defining granular policies such as "this AI agent can read sales reports but not modify them," and automatically revoke access when the task ends.

Consequences for the market and users

For enterprises, this integration promises to simplify access governance in hybrid and multicloud environments. 1Password plans to incorporate Apono's capabilities into its Privileged Access Management (PAM) platform, offering a unified dashboard to control human and non-human identities. Direct competitors like CyberArk, Okta, or HashiCorp are also developing similar features, but 1Password bets on ease of use and integration with its existing password vault.

For end users, the change will be transparent: IT and security administrators will be able to define access policies for AI agents without needing separate tools. However, the question of privacy arises: what data will Apono collect to decide permissions? The company claims it operates on a "least privilege" model and that decisions are made in real-time based on context (user, device, location, time).

What readers should know

• The acquisition is not a surprise: 1Password had already shown interest in non-human identities. In 2023, it launched its Secrets Automation product to manage API keys and certificates.
• The price has not been disclosed, but Apono had raised $5.3 million, suggesting a typical acquisition valuation for early-stage startups (between $20 and $50 million).
• Integration will take months: Apono's features are expected to be available on the 1Password platform by late 2025.
• This is not the only move: In February, 1Password also acquired Trelica, a SaaS application access management platform, reinforcing its bet on access governance.

Historical context

1Password, founded in 2005, has evolved from a simple password manager to a comprehensive identity security platform. The purchase of Apono follows the trail of other acquisitions in the sector, such as Okta's acquisition of Auth0 (2021) or CyberArk's purchase of Idaptive in 2020. The difference is that 1Password focuses on a specific segment: AI agents, an emerging market that promises exponential growth.

Speculations and unconfirmed points

It has not been confirmed whether Apono's technology will integrate with third-party AI assistants (such as Microsoft Copilot or ChatGPT Enterprise). Nor is it known whether 1Password will offer a standalone product for agent governance or package it as a premium module. Finally, Apono's team (founded by former members of the Israeli Unit 8200) will join 1Password, but specific roles have not been detailed.

Conclusion

1Password's acquisition of Apono marks a milestone in the evolution of enterprise security toward a model where non-human identities are as important as human ones. Enterprises deploying AI agents will need to adopt similar governance tools to avoid risks. As 1Password CEO Jeff Shiner said: "Zero trust is no longer just for humans."