# cybee and 1Password Device Trust. What each is built for.

> What 1Password Device Trust and cybee are each built for: who may sign in, which Macs are protected, how settings stay safe and what a client can check.

Page: https://cybee.ai/compare/1password/ (cybee vs 1Password Device Trust: Mac security scope)

- [Compare](https://cybee.ai/compare/)

- 1Password Device Trust

compare

Device Trust checks whether a Mac may sign in to your work apps. cybee protects the Mac while it runs, and that protection is free. This page is about Device Trust, not the 1Password password manager.

cybee and 1Password Device Trust vendor pages checked 18.09.2026

In one minute

- 1Password Device Trust looks at a device’s health when someone signs in, and can restrict access to protected apps based on the requirements you set.

- cybee protects the Mac while it runs, checks its safety settings and keeps a dated record. It is free for every Mac.

- cybee does not decide who may sign in, so it does not replace Device Trust.

- If your client asks you to control which Macs reach their work, look at Device Trust first. This page compares jobs, not results.

cybee AG, Zürich Founded by [Hekuran Doli and Kristian Kabashi](https://cybee.ai/about/#founders) [Best of Swiss Apps Hall of Fame 2025](https://cybee.ai/about/#recognition) [The Pitch by Deel, Global Top 100 of about 40,000 startups](https://cybee.ai/about/#recognition)

## Two questions about one Mac. Two different jobs.

May this Mac sign in to a work app? Is it protected while it runs? For a small team, both turn urgent when someone outside the company asks, and the answer they want covers every Mac, with dates.

before a deal

### A client asks who can open their project.

“Which laptops can reach our files?”

Part of that is about access: which Macs may sign in to the apps that hold the work.

at renewal

### Your insurer asks what watches your Macs.

They want to know that protection runs on every Mac, and since when.

on a review

### A partner asks since when a setting has held.

Not how things should be. How they were, on which Mac, since when.

## Who handles each job. As each product describes it.

The 1Password column repeats only what 1Password’s own pages say about Device Trust. Check which of its two paths your company uses, Core or Connect.

What each product does. 1Password details from its own pages, checked 18.09.2026.

| The job | 1Password Device Trust | cybee |
|---|---|---|
| Built for the job it exists to do | Access checks: it uses a device’s health when someone signs in to protected apps. | Protecting the Macs a small team works on, and proving it when a client, an insurer or a partner asks. |
| Who may sign in access to your work apps | Checks device conditions as part of access to protected applications, and can restrict access based on the requirements you set. | cybee does not grant or deny access. It is not a replacement for your identity provider or for a device check at sign in. |
| Protection stops bad software while it runs | Not what Device Trust is built for. It checks a Mac at sign in. | Watches what programs do on supported Macs, checks files against known bad software and stops suspicious activity. Free |
| Safer settings the Mac’s own safety switches | Its checks surface issues and guide people through fixing them. | Checks 118 settings against a public list of the safest Mac settings. The Proof plan sets them and keeps them on. Free Proof plan |
| What your client receives when someone asks for proof | What its checks find serves the access decision, with details about each device. | A dated Trust Passport: which Macs were checked and when, including gaps. Your client can check its seal against cybee’s copy. Proof plan |
| Where it works where the check or the work happens | Two paths: Core, through the browser extension for protected web apps, and Connect, which also works with your identity provider during sign in. | On the Mac, and in your AI assistant: ChatGPT, Claude, Cursor, Codex, Grok or Terminal. cybee has no dashboard. Free |
| How it is sold what you pay for | In editions. Price and Mac support depend on the edition and your quote. | Protection is free for every Mac. The Proof plan costs CHF 9 per Mac per month, or 90 a year, excluding tax. |

**Q:** What is 1Password Device Trust?

### Device Trust, in plain words.

Device Trust is a 1Password product that looks at a device’s health when someone signs in. It can restrict access to protected apps based on the requirements you set, and it helps people fix a failing check themselves. It does more than keep a list of devices.

It is not the 1Password password manager. Its documentation describes two paths, Core and Connect, so check which one your company uses.

[Device Trust, on 1password.com](https://1password.com/product/device-trust)

**Q:** What is an identity provider?

### The service your team signs in with.

An identity provider is the account service your team uses to sign in once and reach its work apps. It decides who gets in.

1Password describes Connect as the Device Trust path that also works with it during sign in. Core uses the browser extension for protected web apps instead. cybee is neither: it protects the Mac and keeps the record.

[Core and Connect, on support.1password.com](https://support.1password.com/device-trust-frequently-asked-questions/)

**Q:** Where do the 118 checks come from?

### Where the checks come from.

Your Mac has many security settings. Some are off, and some get switched off over time.

cybee checks them against the CIS Benchmark, a public, industry maintained list of the safest settings for macOS. Many compliance frameworks accept it as a baseline for secure settings. On the Proof plan, cybee sets them that way and switches them back if anyone changes them.

**Q:** What is a Trust Passport?

### The Trust Passport.

The Trust Passport is a dated record of how your Macs are protected. Your client or insurer opens it through one link and sees what holds, since when, and what cybee could not see. It is not a certification or an audit, and it does not answer for your policies, your people or your cloud. It says so on the page.

Sealed means the record carries a fingerprint, a short code made from its content. Your client can compare it with the copy cybee sealed and see whether anything was changed afterwards. That shows the record was not edited. It does not check the facts a second time.

## Make the decision on one task. The one in front of you today.

a check fails

### A Mac fails the screen lock check at sign in. Three steps, two jobs.

1

Make the access decision.

Check the app’s policy and the Device Trust result.

2

Fix the setting.

Find who owns the setting on that Mac and agree the change with them.

3

Check again.

Read the new setting and the new access result. Keep their dates and sources.

Two separate jobs. The two products do not talk to each other.

Before you add a tool

If the requirement is to control access, look at the Device Trust path that fits your company. If protection or settings kept on are missing, look at those on their own. Write to us and ask 1Password before you run both, and agree which tool sets each policy.

09:41

09:42

Figure: Step 2 with cybee: Mira decides on her own Mac, and the record keeps the time.

## Keep what works. Add only what is missing.

Choose by the job that is still open. One of these four will sound like your team.

Keep Device Trust

### Your client or your own policy says only Macs that pass their checks may sign in to work apps.

That is an access job, and cybee does not do it. Look at the Device Trust path that fits, Core or Connect.

Check first, then decide

### Device Trust flags a setting, but nobody owns the fix, or you cannot show since when it held.

Agree who owns each Mac setting first. If the gap stays open, the Proof plan keeps settings on and dates them. Confirm compatibility before you add a tool.

Start with cybee

### Your Macs need protection and safer settings, and nobody runs security for you.

Protection is free for every Mac, and you run it by asking your AI assistant. Add the Proof plan when someone asks you for proof.

Not cybee alone, yet

### Your team also works on Windows or Linux computers.

cybee covers Macs with an Apple chip (M1 or newer). Windows and Linux are not supported today, so keep what protects those computers.

Where cybee stops

It does not decide who may sign in, and it is not a password manager. It is not a certification or an audit. No security team watches your Macs for you. cybee stops bad software while it runs and sends an alert. A change to a setting waits for a yes from the person who uses that Mac. It runs on Macs with an Apple chip (M1 or newer). Windows, Linux and Microsoft 365 are not supported today.

## Free for every Mac. You pay when you need to prove it.

The protection is free because we want every Mac in a small company protected. We earn money when a company has to prove it.

### Free

Free

Forever. Unlimited Macs and people.

- Stops bad software while it runs

- Alerts in macOS, Slack, Teams and SMS

- 118 safety checks on each Mac

- Apps, extensions and AI agents listed

- “Am I safe?” answers in your AI assistant

- Google Workspace account activity

- Email support within one working day

[Start free](https://cybee.ai/docs/install/)

### Proof plan

CHF 9 per Mac per month, or 90 a year

Everything in Free, plus:

- Weak settings fixed and kept fixed

- The sealed Trust Passport

- Security training, completion recorded

- Incident response plan

- Chat support

[Install, then start the 14 day trial](https://cybee.ai/docs/install/)

The 14 day trial starts in your AI assistant, after cybee is installed. Ask for a Proof plan feature, such as the Trust Passport. The link arrives in the chat and leads to Stripe, the payment service.

Per Mac, excluding tax. The same number in CHF, EUR, USD and GBP. Runs on Macs with an Apple chip, M1 or newer. Macs with an Intel chip are not supported. To check a Mac, open the Apple menu and choose About This Mac. [All plan details](https://cybee.ai/pricing/)

## Before you choose.

**Q:** Is this a comparison with the 1Password password manager?

No. This page is about Device Trust: device health checks and access decisions. A password manager does a different job, and cybee does not replace it.

**Q:** Does cybee replace a device check at sign in?

No. cybee protection, safer settings and records do a different job from the policy that grants or denies access to an app.

**Q:** Can cybee and Device Trust run on the same Mac?

Write to us and ask 1Password first, and agree which tool sets each policy. This page does not promise that every version works together, and it implies no built in connection between the two.

**Q:** What is free, and what does the Proof plan add?

Protection, the settings checks, the list of AI tools on each Mac and Google Workspace visibility are free. The Proof plan adds safer settings kept on, the sealed Trust Passport and security training, with a 14 day trial. It costs CHF 9 per Mac per month, or 90 a year, excluding tax. To try it, ask your AI assistant for the Trust Passport and use the Stripe link it sends. [See the trial and plans](https://cybee.ai/pricing/#trial)

**Q:** What does the Trust Passport show?

Which Macs were checked and when, including gaps. Its seal can be checked against cybee’s copy. It is not an independent audit or a certification. Google Workspace accounts have a separate record.

**Q:** What leaves my Mac?

Detection, checks and fixes run on the Mac. What leaves it is security information: events, which settings are on, which apps, browser extensions and AI agents are installed, what the agents are connected to and what cybee recorded them doing. Never the contents of your files, and never passwords or tokens. cybee AG is a Swiss company, hosted in Europe. [Security and privacy details](https://cybee.ai/security/)

## Check what you buy. Products change.

This comparison rests on 1Password’s own pages, checked on 18.09.2026. Confirm the edition, Mac support and your quote before you decide.

[Device Trust 1Password’s own description of the product.](https://1password.com/product/device-trust) [Core and Connect Its questions page, which explains the two paths.](https://support.1password.com/device-trust-frequently-asked-questions/) [How the checks work Its overview of the Device Trust checks.](https://support.1password.com/device-trust-checks-overview/) [Devices in Device Trust How its documentation describes each device.](https://support.1password.com/device-trust-devices/)

## Where to go next.

[Client questionnaires Turn the facts on your Macs into an answer a client can check.](https://cybee.ai/use-cases/security-questionnaires/) [How cybee works Protection, safer settings and proof, in plain words.](https://cybee.ai/product/) [Pricing Every plan detail, the trial and the arithmetic per Mac.](https://cybee.ai/pricing/) [compare cybee and Jamf Management, protection and who owns each policy.](https://cybee.ai/compare/jamf/) [compare cybee and Iru The platform you run today, and the job still missing.](https://cybee.ai/compare/iru/) [compare All comparisons What other tools are built for, and where cybee fits.](https://cybee.ai/compare/)

## Your next client will ask. Be ready.

`curl -sSf https://get.cybee.dev | sh`

Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.

Free for every Mac with an Apple chip · Asks before it changes your Mac [What it installs](https://cybee.ai/docs/install/#see) [Read the install script](https://get.cybee.dev)