A non-intrusive alternative to 1Password XAM

XFA verifies every device at login without admin rights or invasive permissions. Built for teams who want device trust that also covers personal and contractor devices.

See XFA next to 1Password for your team

We can help you compare based on your team's needs.

Securing devices for leading organizations like

What is XFA?

XFA is the device security solution that identifies every device used by people in your organization, informs users about risks, and verifies compliance with your security policy at login, without needing to manage or control the device. It runs standalone: no identity provider migration, no manual device enrollment.

What is 1Password XAM?

1Password is a password manager that helps users and organizations securely store and manage passwords, credentials, and other sensitive information. 1Password's platform includes multiple additional services, including 1Password XAM (Extended Access Management, formerly known as 'Kolide'), which aims to make sure that every device used for signing in to applications is secure. We will compare this specific feature with XFA.

XFA vs 1Password, feature by feature

IncludedNot included
XFA
1Password

Device trust

OS version, disk encryption and screen lock checks

Included
Included

Jailbreak and root detection

Included
Included

Browser kept up to date

Included
Included

Active antimalware verified

Included
Included

Device last-reboot check

Included
Included

BYOD

Works for company-owned devices

Included
Included

Made for self-install

Included
IncludedYes, but people have to give it administrator access to their own device.

Installs without admin rights on the device

Included
Not includedNo. 1Password XAM needs administrator access to the device to install.

Discovers every device through SSO, no install required

Included
Not includedThe 1Password device inventory lists a device once the agent or mobile app is installed on it.

Setup & admin

Centralized admin dashboard

Included
Included

Per-device CVE insight from OS and browser versions

Included
Not included1Password checks that the OS and browsers are up to date, without listing CVEs per device.

Warns users before they are blocked at login

Included
Included

Ecosystem

Supports SSO / identity provider integration

Included
Okta, Entra ID, Google

Standalone product, not part of a platform

Included
Not included1Password XAM is part of 1Password.

Why teams choose XFA over 1Password XAM

Three differences that decide it for most teams.

No admin rights needed

XFA installs without admin or system-level permissions, so it fits personal and contractor devices too.

Discovers every device first

XFA finds every device in use through your identity provider's sign-in logs, before anyone installs anything.

Warns users by email

XFA proactively emails users, even on devices without the app installed. Users know about security issues before logging in and can fix them early, without being unexpectedly interrupted.

See the difference in your own environment.

Start free.

Simple per-user pricing with unlimited devices, and no migration from your current setup required.

See the difference in your own environment.

What our customers say

"I think it's a good balance between being lightweight, non-intrusive, and transparent. Transparent in the sense of what you are looking at. The only way for me to get adoption was actually giving people access to the dashboard and showing what I'm looking at. Other solutions we tested didn't make it that transparent."
Read the full testimonial →
Gus Fune
Gus FuneChief Technology Officer
G24.9/5 on G2