Core capabilityEncrypted business vaultEncrypted business vault. Verify the supported plan and demonstrated workflow. 3.2 points maximum | Supported3.2 / 3.2 pts Encrypted business vault. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityPassword and passphrase generationPassword and passphrase generation. Verify the supported plan and demonstrated workflow. 3.2 points maximum | Supported3.2 / 3.2 pts Password generation. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkPasskey storagePasskey storage. Verify the supported plan and demonstrated workflow. 4.8 points maximumAsk for a demonstrationDemonstrate passkey storage with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Stored passkeys. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkAuthenticator-code storageAuthenticator-code storage. Verify the supported plan and demonstrated workflow. 4.8 points maximumAsk for a demonstrationDemonstrate authenticator-code storage with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Built-in authenticator codes. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityShared team credentialsShared team credentials. Verify the supported plan and demonstrated workflow. 4 points maximum | Supported4 / 4 pts Business shared folders. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityBrowser and app autofillBrowser and app autofill. Verify the supported plan and demonstrated workflow. 4 points maximum | Supported4 / 4 pts Browser/app autofill. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkGranular vault permissionsGranular vault permissions. Verify the supported plan and demonstrated workflow. 6 points maximumAsk for a demonstrationDemonstrate granular vault permissions with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported6 / 6 pts Folder permission levels; inherited below top level. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkLeaver vault recovery or transferLeaver vault recovery or transfer. Verify the supported plan and demonstrated workflow. 6 points maximumAsk for a demonstrationDemonstrate leaver vault recovery or transfer with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported6 / 6 pts Owner transfer; unavailable over 2,100 items. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityMobile vault accessMobile vault access. Verify the supported plan and demonstrated workflow. 3.2 points maximum | Supported3.2 / 3.2 pts iOS/Android access. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityDesktop vault accessDesktop vault access. Verify the supported plan and demonstrated workflow. 3.2 points maximum | Supported3.2 / 3.2 pts Desktop applications. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkBusiness single sign-onBusiness single sign-on. Verify the supported plan and demonstrated workflow. 4.8 points maximumAsk for a demonstrationDemonstrate business single sign-on with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Enterprise Entra/Okta/AD FS; tier matters. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkDirectory provisioningDirectory provisioning. Verify the supported plan and demonstrated workflow. 4.8 points maximumAsk for a demonstrationDemonstrate directory provisioning with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Enterprise SCIM: Entra ID/Okta user/group lifecycle. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityWeak or exposed credential checksWeak or exposed credential checks. Verify the supported plan and demonstrated workflow. 3.2 points maximum | Supported3.2 / 3.2 pts Business password health and breach checks. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityEnforced security policiesEnforced security policies. Verify the supported plan and demonstrated workflow. 3.2 points maximum | Supported3.2 / 3.2 pts Password and MFA policies. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkAdministrative event historyAdministrative event history. Verify the supported plan and demonstrated workflow. 4.8 points maximumAsk for a demonstrationDemonstrate administrative event history with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Administrative activity history. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkExportable security eventsExportable security events. Verify the supported plan and demonstrated workflow. 4.8 points maximumAsk for a demonstrationDemonstrate exportable security events with a restricted test account. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Enterprise Activity Log API. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityDeveloper secret toolingDeveloper secret tooling. Verify the supported plan and demonstrated workflow. 2.4 points maximum | Not verified0β2.4 / 2.4 pts Not established in the reviewed documentation. Not verified Β· Oct 20, 2026Source β |
|---|
Core capabilityRuntime secrets for AI agentsRuntime secrets for AI agents. Verify the supported plan and demonstrated workflow. 2.4 points maximum | Not verified0β2.4 / 2.4 pts Not established in the reviewed documentation. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkRestricted AI-agent credential scopeRestricted AI-agent credential scope. Verify the supported plan and demonstrated workflow. 3.6 points maximumAsk for a demonstrationDemonstrate restricted ai-agent credential scope with a restricted test account. A scenario to run with the supplier; not a completed product test. | Not verified0β3.6 / 3.6 pts Not established in the reviewed documentation. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkAttributable AI-agent access historyAttributable AI-agent access history. Verify the supported plan and demonstrated workflow. 3.6 points maximumAsk for a demonstrationDemonstrate attributable ai-agent access history with a restricted test account. A scenario to run with the supplier; not a completed product test. | Not verified0β3.6 / 3.6 pts Not established in the reviewed documentation. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkGrant emergency access after a waiting periodDemonstrate: Grant emergency access after a waiting period. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Grant emergency access after a waiting period. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkRecord justified exceptions to credential-risk warningsDemonstrate: Record justified exceptions to credential-risk warnings. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Record justified exceptions to credential-risk warnings. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkStore encrypted files with vault itemsDemonstrate: Store encrypted files with vault items. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Store encrypted files with vault items. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkRestore a previous credential versionDemonstrate: Restore a previous credential version. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Restore a previous credential version. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkControl item exports and disclose enforcement limitsDemonstrate: Control item exports and disclose enforcement limits. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Control item exports and disclose enforcement limits. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkRevoke an active device session remotelyDemonstrate: Revoke an active device session remotely. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Revoke an active device session remotely. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkRead the vault securely without network accessDemonstrate: Read the vault securely without network access. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Read the vault securely without network access. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkRotate managed application passwords automaticallyDemonstrate: Rotate managed application passwords automatically. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. 2.5 points maximumAsk for a demonstrationDemonstrate: Rotate managed application passwords automatically. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|