compare
cybee and 1Password Device Trust. What each is built for.
Device Trust checks whether a Mac may sign in to your work apps. cybee protects the Mac while it runs, and that protection is free. This page is about Device Trust, not the 1Password password manager.
Two questions about one Mac. Two different jobs.
May this Mac sign in to a work app? Is it protected while it runs? For a small team, both turn urgent when someone outside the company asks, and the answer they want covers every Mac, with dates.
-
before a deal
A client asks who can open their project.
“Which laptops can reach our files?”
Part of that is about access: which Macs may sign in to the apps that hold the work.
-
at renewal
Your insurer asks what watches your Macs.
They want to know that protection runs on every Mac, and since when.
-
on a review
A partner asks since when a setting has held.
Not how things should be. How they were, on which Mac, since when.
Who handles each job. As each product describes it.
The 1Password column repeats only what 1Password’s own pages say about Device Trust. Check which of its two paths your company uses, Core or Connect.
| The job | 1Password Device Trust | cybee |
|---|---|---|
| Built forthe job it exists to do | Access checks: it uses a device’s health when someone signs in to protected apps. | Protecting the Macs a small team works on, and proving it when a client, an insurer or a partner asks. |
| Who may sign inaccess to your work apps | Checks device conditions as part of access to protected applications, and can restrict access based on the requirements you set. | cybee does not grant or deny access. It is not a replacement for your identity provider or for a device check at sign in. |
| Protectionstops bad software while it runs | Not what Device Trust is built for. It checks a Mac at sign in. | Watches what programs do on supported Macs, checks files against known bad software and stops suspicious activity. |
| Safer settingsthe Mac’s own safety switches | Its checks surface issues and guide people through fixing them. | Checks 118 settings against a public list of the safest Mac settings. The Proof plan sets them and keeps them on. |
| What your client receiveswhen someone asks for proof | What its checks find serves the access decision, with details about each device. | A dated Trust Passport: which Macs were checked and when, including gaps. Your client can check its seal against cybee’s copy. |
| Where it workswhere the check or the work happens | Two paths: Core, through the browser extension for protected web apps, and Connect, which also works with your identity provider during sign in. | On the Mac, and in your AI assistant: ChatGPT, Claude, Cursor, Codex, Grok or Terminal. cybee has no dashboard. |
| How it is soldwhat you pay for | In editions. Price and Mac support depend on the edition and your quote. | Protection is free for every Mac. The Proof plan costs CHFEURUSDGBP 9 per Mac per month, or 90 a year, excluding tax. |
What is 1Password Device Trust?
Device Trust, in plain words.
Device Trust is a 1Password product that looks at a device’s health when someone signs in. It can restrict access to protected apps based on the requirements you set, and it helps people fix a failing check themselves. It does more than keep a list of devices.
It is not the 1Password password manager. Its documentation describes two paths, Core and Connect, so check which one your company uses.
What is an identity provider?
The service your team signs in with.
An identity provider is the account service your team uses to sign in once and reach its work apps. It decides who gets in.
1Password describes Connect as the Device Trust path that also works with it during sign in. Core uses the browser extension for protected web apps instead. cybee is neither: it protects the Mac and keeps the record.
Where do the 118 checks come from?
Where the checks come from.
Your Mac has many security settings. Some are off, and some get switched off over time.
cybee checks them against the CIS Benchmark, a public, industry maintained list of the safest settings for macOS. Many compliance frameworks accept it as a baseline for secure settings. On the Proof plan, cybee sets them that way and switches them back if anyone changes them.
What is a Trust Passport?
The Trust Passport.
The Trust Passport is a dated record of how your Macs are protected. Your client or insurer opens it through one link and sees what holds, since when, and what cybee could not see. It is not a certification or an audit, and it does not answer for your policies, your people or your cloud. It says so on the page.
Sealed means the record carries a fingerprint, a short code made from its content. Your client can compare it with the copy cybee sealed and see whether anything was changed afterwards. That shows the record was not edited. It does not check the facts a second time.
Make the decision on one task. The one in front of you today.
a check fails
A Mac fails the screen lock check at sign in. Three steps, two jobs.
- 1
Make the access decision.
Check the app’s policy and the Device Trust result.
- 2
Fix the setting.
Find who owns the setting on that Mac and agree the change with them.
- 3
Check again.
Read the new setting and the new access result. Keep their dates and sources.
Two separate jobs. The two products do not talk to each other.
Mira’s MacBook Air26.09.2026
- Disk lockedFileVaultOn
- Only known apps openGatekeeperOn
- Screen locks when you leaveScreen lockOff
- 09:41
cybee asks Mira to turn on screen lock.On her Mac, in plain words. Nothing changes yet.
- 09:42
Mira says yes. Screen lock is on.118 of 118 checks hold. dated record r-0926-0942
Keep what works. Add only what is missing.
Choose by the job that is still open. One of these four will sound like your team.
-
Your client or your own policy says only Macs that pass their checks may sign in to work apps.
That is an access job, and cybee does not do it. Look at the Device Trust path that fits, Core or Connect.
-
Device Trust flags a setting, but nobody owns the fix, or you cannot show since when it held.
Agree who owns each Mac setting first. If the gap stays open, the Proof plan keeps settings on and dates them. Confirm compatibility before you add a tool.
-
Your Macs need protection and safer settings, and nobody runs security for you.
Protection is free for every Mac, and you run it by asking your AI assistant. Add the Proof plan when someone asks you for proof.
-
Your team also works on Windows or Linux computers.
cybee covers Macs with an Apple chip (M1 or newer). Windows and Linux are not supported today, so keep what protects those computers.
Free for every Mac. You pay when you need to prove it.
The protection is free because we want every Mac in a small company protected. We earn money when a company has to prove it.
Free
Free
Forever. Unlimited Macs and people.
- Stops bad software while it runs
- Alerts in macOS, Slack, Teams and SMS
- 118 safety checks on each Mac
- Apps, extensions and AI agents listed
- “Am I safe?” answers in your AI assistant
- Google Workspace account activity
- Email support within one working day
Proof plan
CHFEURUSDGBP9per Mac per month, or 90 a year
Everything in Free, plus:
- Weak settings fixed and kept fixed
- The sealed Trust Passport
- Security training, completion recorded
- Incident response plan
- Chat support
The 14 day trial starts in your AI assistant, after cybee is installed. Ask for a Proof plan feature, such as the Trust Passport. The link arrives in the chat and leads to Stripe, the payment service.
Per Mac, excluding tax. The same number in CHF, EUR, USD and GBP. Runs on Macs with an Apple chip, M1 or newer. Macs with an Intel chip are not supported. To check a Mac, open the Apple menu and choose About This Mac.All plan details
Before you choose.
Is this a comparison with the 1Password password manager?
No. This page is about Device Trust: device health checks and access decisions. A password manager does a different job, and cybee does not replace it.
Does cybee replace a device check at sign in?
No. cybee protection, safer settings and records do a different job from the policy that grants or denies access to an app.
Can cybee and Device Trust run on the same Mac?
Write to us and ask 1Password first, and agree which tool sets each policy. This page does not promise that every version works together, and it implies no built in connection between the two.
What is free, and what does the Proof plan add?
Protection, the settings checks, the list of AI tools on each Mac and Google Workspace visibility are free. The Proof plan adds safer settings kept on, the sealed Trust Passport and security training, with a 14 day trial. It costs CHFEURUSDGBP 9 per Mac per month, or 90 a year, excluding tax. To try it, ask your AI assistant for the Trust Passport and use the Stripe link it sends. See the trial and plans
What does the Trust Passport show?
Which Macs were checked and when, including gaps. Its seal can be checked against cybee’s copy. It is not an independent audit or a certification. Google Workspace accounts have a separate record.
What leaves my Mac?
Detection, checks and fixes run on the Mac. What leaves it is security information: events, which settings are on, which apps, browser extensions and AI agents are installed, what the agents are connected to and what cybee recorded them doing. Never the contents of your files, and never passwords or tokens. cybee AG is a Swiss company, hosted in Europe. Security and privacy details
Check what you buy. Products change.
This comparison rests on 1Password’s own pages, checked on 18.09.2026. Confirm the edition, Mac support and your quote before you decide.
Where to go next.
Your next client will ask. Be ready.
curl -sSf https://get.cybee.dev | shPress Command and C to copy.
Run it in Terminal, a chat, your IDE or a CLI. Keep working where you started.