Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Connect a 1Password Environment to the OpenShell runtime and let your agents work with the systems it needs without exposing real credentials to the model. Developers define their environment in 1Password and use the UI to provision an OpenShell credential provider. Secrets are mapped to OpenShell profiles, restricted to specific targets, and given an expiration date.

In 2020, the SolarWinds attack exposed the vulnerability of supply chains worldwide, a problem this episode’s guest, Matt Moore, had already been working to solve for years. In 2021, he co-founded Chainguard to protect supply chains from future breaches. His conversation with 1Password CTO Nancy Wang and Google Gemini’s Dev Tagare covers why the open source trust model is structurally broken and how AI agents have complicated supply chain security, with a live demo demonstrating how standard tools overlook many vulnerabilities.

An auditor asks you to prove that a former employee no longer has access to any workplace credentials. What do you do? With 1Password, you can pull up the Activity Log: deprovisioning timestamped, every access event recorded. The ticket is closed, and the evidence is right there. Controls aren't enough for compliance frameworks, proof is.

As a product leader who went from working on Cursor to OpenAI’s Codex, Rohan Varma got a personal preview of a shift most developers are just beginning to catch up to. His conversation with 1Password CTO Nancy Wang upends the idea that AI helps developers write code faster, reimagines code reviews, and explores how developer skills expand once agents take over implementation. In this episode: Zero-Shot Learning is a builder-to-builder podcast about how AI systems are designed, deployed, and secured. Subscribe for more.

While AI agents are already capable of writing and shipping code that works, standard operating procedure still requires human oversight and review. Cognition President of New Enterprise Jeff Wang is building a future where that’s no longer the case. In this episode, Jeff joins 1Password CTO Nancy Wang and special guest co-host Richard Liu, Head of API Products at Anthropic, for a conversation on cloud-based agents and how their ability to prove their own work could make human code reviews obsolete.

Your.env file has your database password, your AWS keys, and your Stripe secret, all in plaintext, sitting on your laptop. 1Password Developer Watchtower finds it, 1Password Environments secures it, and you keep shipping. See how 1Password discovers plaintext developer credentials, imports them into an encrypted environment, and mounts a virtual protected.env, with no workflow disruption for developers and full fleet visibility for security teams.

When most developers write code, crash recovery logic is at the bottom of their priorities, until crashes and delays force them to incorporate resiliency logic. That’s why Temporal co-founder and CTO Maxim Fateev built a system to turn code into durable execution. In his conversation with 1Password CTO Nancy Wang and VP of Engineering for Developer and AI Jeff Malnick, Maxim explains why the distributed systems thinking that shaped his work is now essential for building reliable AI agents, with a live demo of a durable agent surviving a crash.

The prototype is the new PRD. In 2013, Facebook’s development of React changed the way software engineers build and write code. Today, LLMs are transforming that process again. This episode features Tom Occhino, React co-creator and current CPO at Vercel, whose work sits at the center of both shifts. In conversation with 1Password CTO Nancy Wang and Google’s Dev Tagare, Tom explores the platform changes driven by AI-written code, builds a full-stack app in real time, and sets up a deeper discussion on the security risks of agents building software.

Resources for Setup.

Secure secrets for agentic workflows with 1Password MCP Server and Codex As AI agents write, execute, and ship production code, they need access to systems like databases, APIs, and deployment pipelines. With 1Password Environments MCP Server for Codex, instead of putting credentials directly into prompts or files, we provision a secure runtime environment where secrets are mounted, used, and discarded, with user authentication required at the moment of access.