Executive Summary
As SaaS adoption accelerates across enterprises, the need for dedicated management solutions has become impossible to ignore. Organizations face mounting pressure to optimize software, SaaS, cloud, and AI spending while reducing compliance, audit, and operational risks and costs. Despite widespread SaaS portfolio growth, consistent operational practices for managing the SaaS estate remain underdeveloped across the industry. With tech budgets under pressure, visibility and control over software spending are critical. SaaS management solutions can address this gap by accelerating decision-making, improving operational efficiency, reducing threat surface, and helping organizations continually govern an increasingly complex, AI-influenced software 1
1Password’s AI and SaaS Manager is a SaaS management platform that can help IT, security, and finance teams discover, govern, and optimize AI and software-as-a-service (SaaS) applications across an organization and can automate associated user lifecycle workflows. It can uncovers sanctioned and unsanctioned (“shadow IT” and “shadow AI”) applications via single sign-on, identity providers, finance systems, and browser extensions.
1Password commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study and examine the potential return on investment (ROI) enterprises may realize by deploying 1Password AI and SaaS Manager.3 The purpose of this study is to provide readers with a framework to evaluate the potential financial impact of AI and SaaS Manager on their organizations.
Key Statistics
197%
Return on investment (ROI)
$3.0M
Benefits PV
$2.0M
Net present value (NPV)
To better understand the benefits, costs, and risks associated with this investment, Forrester interviewed six decision-makers with experience using AI and SaaS Manager. For the purposes of this study, Forrester aggregated the experiences of the interviewees and combined the results into a single composite organization, which is a global organization with 3,000 employees and over 1,000 paid and unpaid SaaS subscriptions in use across business units.
Interviewees said that prior to using AI and SaaS Manager, their organizations had limited visibility into the number and usage of SaaS applications across the enterprise, as well as limited ability to detect and respond to risk. Their fragmented and largely manual means of tracking this information resulted in overspending on licenses, wasted time for IT team members tasked with managing SaaS applications, and potential security risks to their organizations.
After the investment in AI and SaaS Manager, interviewees reported that their organizations benefited from faster service to employees, less recurring administration, more reliable lifecycle processes, and increased capacity for higher-value work. They agreed that they also reduced their security risk by ensuring better role-based access to SaaS tools. Importantly, the interviewees’ organizations saw continuing improvements in productivity and SaaS application spending control on an ongoing basis even after the original rationalization project.
Key Findings
Quantified benefits. Quantified benefits for the composite organization include:
-
Optimized SaaS license spending, which saves $2.3 million over three years. The composite organization reduces SaaS costs in Year 1 by identifying unused, duplicate, and overprovisioned licenses and in ensuing years by automating license optimization workflows, improving renewal negotiations, and enabling continued right sizing of the SaaS portfolio.
-
Increased employee productivity, which saves over 3,000 hours in engineering time to be used for high-value initiatives and almost 4,000 hours of onboarding/offboarding time for end users. AI and SaaS Manager increases IT team productivity for the composite organization by automating onboarding, offboarding, license management, audit preparation, and renewal analysis, reducing manual administrative work and enabling IT staff to focus on higher-value strategic initiatives. It also gets new employees onboard faster and saves all end users time on administrative tasks and issues. This provides $690,000 in present value to the organization.
-
Reduced compliance-related security risk, which avoids projected incident costs of $67,000. The composite organization realizes a reduction in compliance-related security risk by using AI and SaaS Manager to automate user access removal, identify unmanaged and dormant accounts, strengthen role-based access governance, and provide centralized visibility into SaaS applications, users, and permissions to improve security control and audit readiness.
Unquantified benefits. Benefits that provide value for the composite organization but are not quantified for this study include:
-
Improved business user experience and self-service management. AI and SaaS Manager can accelerate onboarding and access provisioning while enabling application owners and business stakeholders to independently manage software visibility, usage, and costs, reducing reliance on IT support.
-
Enhanced governance and software standardization. AI and SaaS Manager can centralize visibility into applications, ownership, licensing, and renewals, helping the composite organization enforce technology standards, reduce tool sprawl, and strengthen SaaS governance.
-
Better data-based decision-making. AI and SaaS Manager can be a trusted source of SaaS usage, spending, ownership, and licensing data, enabling more informed procurement, renewal, governance, security, and technology investment decisions.
Quantified costs. Quantified costs for the composite organization include:
-
Licensing fees for 1Password AI and SaaS Manager, which total $940,000 in present value over three years. The composite organization pays an annual licensing fee of $360,000 to cover the 3,000 identities using SaaS applications.
-
Planning, deployment, and administration, which add $81,000 in internal costs over three years. The composite organization’s employees invest a moderate amount of internal time upfront in planning, integrating, and deploying AI and SaaS Manager, but devote only minimal time to ongoing administration.
The financial analysis that is based on the interviews found that a composite organization experiences benefits of $3.0 million over three years versus costs of $1.0 million, adding up to a net present value (NPV) of $2.0 million and an ROI of 197%.
Benefits (Three-Year)
Spotlight: Enterprise Password Manager And AI And SaaS Manager Work Together
Interviewees’ organizations frequently managed SaaS visibility and credential security through separate processes, creating a gap between the applications employees use and the credentials that provide access to them. Interviewees whose organizations used both 1Password Enterprise Password Manager and AI and SaaS Manager described complementary roles for the products: AI and SaaS Manager helped identify actual application usage, while Enterprise Password Manager helped secure and govern credentialed access. Together, these capabilities gave interviewees’ organizations a more connected foundation for understanding application access, strengthening lifecycle controls, and managing SaaS and credential risk. Forrester found the following synergistic benefits:
-
More complete visibility into and control of application access. Interviewees said AI and SaaS Manager helped identify which applications employees actually accessed, including applications outside established identity systems, while Enterprise Password Manager helped secure and govern credentials stored within the platform. Connecting application-use data with credential visibility gave IT and security teams a more complete understanding of where access existed and how it was managed. The CIO at a professional services organization explained, “The combined visibility improves because we can see both the credentials a user has and the applications they actually use.”
-
Stronger access lifecycle management. The combined visibility was particularly valuable during employee offboarding. AI and SaaS Manager helped surface applications that employees used even when their credentials were not stored in Enterprise Password Manager, while Enterprise Password Manager helped govern known credentials and shared access. This reduced the risk that accounts or credentials remained active because IT did not know they existed. The CIO at a professional services organization said, “You could not achieve the same deprovisioning results with only one of the products. The combination is what gives us confidence.”
-
Simplified portfolio expansion and vendor management. For some interviewees, their organizations had an existing relationship with 1Password, which made AI and SaaS Manager easier to evaluate, procure, and manage alongside Enterprise Password Manager. One interviewee described the products as operationally distinct but said the broader relationship improved the commercial case through vendor consolidation and bundled pricing. The CISO at an e-commerce organization explained: “When we evaluated SaaS management tools, our existing relationship with 1Password was a factor. It improved the business case and helped move AI and SaaS Manager to the top of the list.”
Forrester’s analysis of interviewees’ experiences indicated that Enterprise Password Manager and AI and SaaS Manager could operate as complementary layers of a broader access-governance strategy. Together, they helped the interviewees’ organizations connect application visibility with credential governance, providing greater confidence in access visibility, lifecycle management, and SaaS oversight. An established relationship with 1Password also simplified product evaluation, procurement, and portfolio management for some interviewees’ organizations. The study does not independently quantify incremental value attributable specifically to deploying the two products together.
Forrester also evaluated the Total Economic Impact™ of 1Password Enterprise Password Manager as a standalone solution. While the value described in this spotlight relates specifically to how AI and SaaS Manager and Enterprise Password Manager complement one another, interviewees also reported independent benefits from Enterprise Password Manager related to a lift in IT operational efficiency, improved employee productivity, increased developer productivity, and reduced credential-related security risk. Additional quantified findings for those capabilities are detailed in the separate study: The Total Economic Impact™ Of 1Password Enterprise Password Manager.
To see the full study, please register below.
The 1Password AI and SaaS Manager Customer Journey
Drivers leading to the AI and SaaS Manager investment
Interviews
| Role | Industry | Region | SaaS Application End Users |
|---|---|---|---|
| Senior manager, enterprise applications | Automotive | Global | 900 |
| Head of enterprise applications and identity | Healthcare | Global | 4,400 |
| Senior manager, IT asset management | Home services | North America | 3,000 |
| CIO | Travel and hospitality | North America | 5,000 |
| CISO | E-commerce | Global (headquarters: North America) | 2,400+ |
| CIO | Professional services | Global (headquarters: North America) | 1,200+ |
Key Challenges
Before implementing AI and SaaS Manager, the interviewees’ organizations relied largely on manual processes, spreadsheets, disconnected systems, and incomplete data to manage their SaaS environments. They lacked centralized visibility into what applications were in use, who owned them, who had access to them, how much was being spent, and whether licenses were actually being utilized. As a result, these organizations struggled with duplicate and overlapping applications, shadow IT, licenses assigned to terminated or inactive users, cumbersome onboarding and offboarding processes, difficult software renewal analyses, and time-consuming compliance and audit activities. Some of the challenges the interviewees most frequently and consistently described included:
-
Shadow IT and unsanctioned application adoption. Before AI and SaaS Manager, interviewees lacked complete visibility into the applications being used across their organizations, making it difficult to identify software that employees or departments had adopted outside established IT processes. Without a centralized inventory of SaaS applications and ownership information, their IT teams struggled to understand their true software footprint and ensure that technology purchases aligned with governance standards. The CIO of a travel and hospitality company noted that before gaining visibility into the SaaS portfolio, their organization could not easily answer whether a requested application already existed elsewhere in the business, leading to unnecessary application proliferation and inconsistent governance.
-
Duplicate application subscriptions and redundant spending. Interviewees reported difficulty identifying overlapping applications and duplicate purchases because software information was scattered across departments, vendors, and spreadsheets. As a result, business units sometimes purchased tools that provided capabilities already available elsewhere in their organization. Reflecting on the situation before AI and SaaS Manager, the CIO of a travel and hospitality company explained that business units were not consistently asking, “Hey, do we have something already in the cloud that we can reuse?” This lack of visibility contributed to redundant software spending, fragmented application portfolios, and missed opportunities to consolidate contracts and standardize on approved tools.
-
Poor license management and wasted licenses. Prior to deploying AI and SaaS Manager, the interviewees’ organizations not only had limited visibility into which applications the business used, but also into who was actually using the software and whether they were using the licenses appropriately. Interviewees described discovering a significant number of licenses assigned to former employees and inactive users after implementing the solution. The senior manager of enterprise applications at an automotive company recalled, “We were able to find a ton of licenses that were still assigned to terminated employees.” Without automated monitoring and reclamation capabilities, these organizations accumulated unnecessary license costs and lacked reliable mechanisms for keeping license inventories current.
-
Time-consuming and unreliable onboarding, offboarding, employee position change, renewal, audit, and governance processes. Interviewees consistently described managing SaaS operations through manual processes, spreadsheets, and disconnected systems before AI and SaaS Manager. Routine activities, such as provisioning users, removing access, preparing for renewals, collecting audit evidence, and tracking application ownership, required significant manual effort, creating inefficiencies, increasing the risk of errors, and limiting the IT team’s ability to focus on more strategic work.
-
Security and compliance risks from unmanaged access. Before AI and SaaS Manager, interviewees’ organizations faced challenges ensuring that user access remained aligned with employment status and business need. Manual offboarding processes increased the possibility that terminated employees could retain access to business applications, while fragmented application management made access reviews and compliance activities more difficult. Interviewees’ organizations also lacked the centralized visibility and governance needed to consistently enforce role-based access controls, monitor application ownership, and demonstrate compliance during audits.
Composite Organization
Based on the interviews, Forrester constructed a TEI framework, a composite company, and an ROI analysis that illustrates the areas financially affected. The composite organization is representative of the interviewees’ organizations, and it is used to present the aggregate financial analysis in the next section. The composite organization has the following characteristics:
-
Description of composite. The composite organization is an enterprise with global operations that employs 3,000 people across multiple regions. Its employees use over 1,000 SaaS applications, including both paid and free, and authorized and unauthorized apps. The composite organization has an asset management team of 10 technicians who are responsible for these applications, among other asset management duties. Before deploying 1Password AI and SaaS Manager, the composite organization has no reliable, centralized repository of SaaS applications, instead relying on a combination of spreadsheets, IT and procurement team records, and the collective knowledge of subscribers in various business units.
KEY ASSUMPTIONS
-
Global organization
-
3,000 employees
-
10 engineers managing software assets
-
Over 1,000 SaaS applications in use
Analysis Of Benefits
Quantified benefit data as applied to the composite
Total Benefits
| Ref. | Benefit | Year 1 | Year 2 | Year 3 | Total | Present Value |
|---|---|---|---|---|---|---|
| Atr | Optimized SaaS license spending | $637,500 | $892,500 | $1,275,000 | $2,805,000 | $2,275,075 |
| Btr | Increased employee productivity | $277,440 | $277,440 | $277,440 | $832,320 | $689,952 |
| Ctr | Reduced compliance-related security risk | $26,992 | $26,992 | $26,992 | $80,976 | $67,124 |
| Total benefits (risk-adjusted) | $941,932 | $1,196,932 | $1,579,432 | $3,718,296 | $3,032,151 |
Optimized SaaS License Spending
Evidence and data. Interviewees consistently reported that AI and SaaS Manager helped optimize SaaS license spending by improving visibility into software usage, identifying inactive and duplicate licenses, consolidating overlapping applications, preventing unnecessary purchases, supporting vendor negotiations, automating license reclamation, and enabling more informed renewal decisions. Interviewees said that their organizations, which range from approximately 1,200 employees to more than 5,000, experienced savings ranging from tens of thousands to millions of dollars annually. Interviewees told Forrester that they used AI and SaaS Manager to not only discover and recover existing waste, but also sustain that improvement through continuous reclamation, renewal decisions, and workflows that prevented unnecessary expenditure. As a result, they saw the solution as an integral part of their ongoing asset management programs and one that continued to deliver increasing financial benefits over time. The interviewees also noted the following benefits that led to savings:
-
Improved visibility into SaaS utilization and spend. A foundational benefit cited by all interviewees was gaining visibility into what applications exist across the enterprise, who uses them, and what the organization is paying for them. Prior to AI and SaaS Manager, interviewees’ organizations often relied on spreadsheets, manual tracking, or disconnected systems that made software spending difficult to manage. The CIO of a travel and hospitality company explained, “From a licensing perspective, just getting visibility into how much we were paying I think was a big return on investment.” Similarly, the head of enterprise applications and identity at a healthcare concern noted: “It helped us understand the unit cost per employee as a new hire. What we are spending per employee on the software that we procure.” This visibility enabled the interviewees’ organizations to identify waste, track ownership, understand utilization, and make data-driven decisions regarding renewals and license allocations both upfront and on an ongoing basis.
-
Eliminated unused licenses and reclaiming waste. Several interviewees described finding large numbers of licenses assigned to inactive or departed users. The senior manager of enterprise applications at an automotive company reported that AI and SaaS Manager uncovered substantial waste, noting, “We were able to find a ton of licenses that were still assigned to terminated employees.” The same interviewee said their organization also discovered many licenses assigned to employees who had not used the software for years, stating, “There were a lot of licenses where the users hadn’t even logged into the platform for well over two years.” The head of enterprise applications and identity at a healthcare firm noted that they now use the product’s automated workflows to continuously reclaim unused licenses, saying, “If somebody’s not using a license within so many weeks or months, we will pull it and then assign it to somebody else who needs it.” The senior manager of IT asset management at a home services company echoed that approach, noting, “If someone hasn’t had an event in [the app] in 90 days, it just removes their license.” Interviewees emphasized that ongoing automated reclamation prevented license counts from growing unnecessarily between renewals and helped maintain a right-sized software portfolio, providing continued financial benefits for their organizations.
-
Consolidated duplicate applications. Interviewees said another common source of savings came from identifying overlapping applications and reducing redundant software purchases. The CIO of the travel and hospitality company relayed that AI and SaaS Manager increased visibility into existing applications so departments could reuse approved platforms rather than purchase new ones, reporting, “When someone wants to bring on a new app, the first question we ask is ‘Hey, do we have something already in the cloud that we can reuse?’” This interviewee attributed substantial savings to avoiding duplicate purchases and consolidating similar tools, saying, “We’ve seen somewhere between $400,000 to $600,000 in savings from either avoiding duplication or retiring something that’s not anymore in use.” Similarly, the senior manager of enterprise applications at an automotive company stated that consolidation was one of the largest drivers of value for them.
-
Strengthened renewal and vendor negotiation outcomes. Interviewees told Forrester that AI and SaaS Manager improved negotiations with vendors by providing accurate utilization data and making overlicensing visible before renewals. The senior manager of enterprise applications in the automotive sector reported, “It’s helped us with all of our contract negotiations.” They described vendors reacting when the company could finally demonstrate actual utilization, saying, “[Some of our vendors] got nervous because they were thinking ‘Uh-oh, they found out that we’ve been overcharging them for so long!” At the home services provider, the senior manager of IT asset management related that AI and SaaS Manager enabled procurement teams to begin negotiations earlier and with greater confidence: “It actually speeds up our negotiation process with vendors, which gives us better leverage with them. In [one] example, we ended up cutting our contract in half. Out of a $60,000 contract that was $30,000 in savings.” The CIO at the travel and hospitality company noted that the improved visibility AI and SaaS Manager provided gave them improved discounts because they were able to consolidate software and come to a single vendor with a larger order, saying, “Having a bigger negotiation, having a bigger order, we got a better discount.”
-
Right-sized entitlements and license tiers. Interviewees reported that AI and SaaS Manager helped their organizations match users with the correct license level, reducing premium-license waste. This was an especially important factor in helping these organizations to continue getting financial benefit from the solution in the years since its initial deployment. The senior manager of IT asset management in home services explained that AI and SaaS Manager exposed entitlement data that was difficult to obtain directly from the application vendor: “That allowed me to figure out where we had people who were over licensed. Not necessarily people who needed to be removed from [the app] entirely, but people who had more expensive licenses than they necessarily needed. On another enterprisewide app, I found that we had a fairly colossal amount of waste, and we saved about $150,000 there.”
-
Prevented future overspending through automation. Interviewees explained that rather than relying solely on periodic audits, their organizations used AI and SaaS Manager workflows to continuously enforce optimization policies and avoid unnecessary spending even after the initial rationalization work. The head of enterprise applications and identity at a healthcare company described how their organization adjusted windows based on cost and usage patterns: “We have it set up so that [people lose their licenses] with certain applications in as little as 30 days. And then on other applications, we’ll give them six months.” They reported savings of $50,000 to $85,000 annually from ongoing license optimization alone, after larger initial savings from workflow consolidation.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
-
There are 3,000 employees who each use one or more SaaS applications.
-
The organization invests approximately $2,000 per user on the SaaS applications that help them do their jobs productively.
-
Through a combination of license rationalization, more effective offboarding, stronger negotiating position, and elimination of duplication, the organization reduces this annual investment to $1,750 per employee in Year 1 after its initial rationalization and then to $1,650 in Year 2 and $1,500 in Year 3 as a result of continuous reclamation and workflows that prevent unnecessary spending.
Risks. The scale of this benefit may vary from organization to organization based on:
-
The size of the organization and number of employees/users.
-
The number and cost of SaaS applications in place before deploying 1Password.
-
The degree of visibility and control the organization achieves over its SaaS applications before deploying 1Password.
Results. To account for these risks, Forrester adjusted this benefit downward by 15%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $2.3 million.
$500
SaaS application spending savings per user by Year 3
Optimized SaaS License Spending
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| A1 | SaaS application users | Composite | 3,000 | 3,000 | 3,000 | |
| A2 | SaaS application spending per user before AI and SaaS Manager | Composite | $2,000 | $2,000 | $2,000 | |
| A3 | SaaS application spending per user with AI and SaaS Manager | Interviews | $1,750 | $1,650 | $1,500 | |
| A4 | Savings per user | A2-A3 | $250 | $350 | $500 | |
| At | Optimized SaaS license spending | A1*A4 | $750,000 | $1,050,000 | $1,500,000 | |
| Risk adjustment | ↓15% | |||||
| Atr | Optimized SaaS license spending (risk-adjusted) | $637,500 | $892,500 | $1,275,000 | ||
| Three-year total: $2,805,000 | Three-year present value: $2,275,075 | |||||
Increased Employee Productivity
Interviewees consistently described AI and SaaS Manager as a productivity platform as much as a SaaS governance solution, reporting that it increased IT team productivity by replacing manual application management processes with centralized visibility, automation, workflow orchestration, and self-service governance capabilities. Interviewees described reducing time spent on onboarding and offboarding, license administration, renewal preparation, audit support, compliance activities, software discovery, and application portfolio management. Several interviewees also noted that AI and SaaS Manager allowed their IT teams to shift effort away from repetitive administrative work and toward higher-value strategic initiatives. Finally, the same reduced onboarding time benefited new employees by getting them to work faster, while automated workflows saved all end users time and frustration related to access, renewals, updates, and other administrative processes. Other employee productivity benefits included the following:
-
Eliminated manual application and application security administration. Before implementing AI and SaaS Manager, interviewees’ organizations often relied on spreadsheets, manual reviews, and disconnected systems to manage application inventories and software access. By centralizing application, license, contract, ownership, and usage information, AI and SaaS Manager provided these organizations with a single system of record that reduced the effort required to locate and validate information across multiple platforms. Interviewees noted that this significantly decreased administrative overhead and allowed their teams to respond more quickly to operational requests.
-
Automated onboarding and offboarding activities. Interviewees said a major source of productivity gains came from automating user provisioning and deprovisioning processes. Interviewees explained that workflow automation eliminated large numbers of manual clicks, account modifications, group assignments, and application-level provisioning activities that IT staff previously performed by hand. The CIO at the travel and hospitality company described substantial time savings from AI and SaaS Manager workflows that automated previously manual provisioning tasks: “They have just been able to automate that provisioning and get it done very quickly. That alone has saved the equivalent of one person’s time annually on my team.” Similarly, the head of enterprise applications and identity at the healthcare company said they use AI and SaaS Manager workflows to automate application access provisioning and removal across numerous systems.
-
Replaced recurring audits with continuous automation. Interviewees emphasized that AI and SaaS Manager reduced the need for periodic manual audits by continuously monitoring licenses and usage patterns. The senior manager of IT asset management in the home services industry explained that one of their license management processes previously required “two or three days every four to six months.” They reported that, after building the workflow on AI and SaaS Manager once, “now it just runs in perpetuity on its own.” They highlighted an additional benefit of this automation, stating, “It’s more accurate because it’s happening with a higher degree of frequency.”
-
Accelerated software renewal and licensing processes. Interviewees noted that centralizing usage and entitlement information dramatically reduced the effort required to analyze license utilization and prepare for software renewals, saving IT teams from repeatedly accessing individual vendor consoles, exporting reports, and manually reconciling license data. The senior manager of IT asset management in the home services industry recalled how the process worked before deploying AI and SaaS Manager: “I would have downloaded all those [vendor reports] and I would have done the analysis by hand. Instead, now all that data is visible to me fairly immediately. It not only saves me time, but it speeds up our negotiation process with vendors.”
-
Streamlined compliance and audit preparation. Interviewees also reported meaningful productivity gains associated with governance, compliance, and audit readiness. By maintaining access records, workflow histories, and application ownership information automatically, AI and SaaS Manager reduced manual evidence collection and compliance tracking activities at the interviewees’ organizations. The CIO in the travel and hospitality industry pointed out, “It helped us address some of the findings around role-based access and around cutting people’s access.” They further noted that their cybersecurity team also realized similar productivity gains from automated audit trails, compliance reporting, and access reviews.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
-
Ten technical employees manage the SaaS estate (among other assets).
-
The automation of onboarding and offboarding workflows allows the team to redeploy the equivalent of one technical employee (2,080 hours) to other critical tasks or projects.
-
The automation of governance and audit workflows, along with automated audit trails, reporting, and access reviews, frees up an additional one-quarter of an FTE (520 hours) on the asset management team and another one-quarter of an FTE (520 hours) on the cybersecurity team to take on other high-value work.
-
The average fully burdened salary for these team members is $129,200.4
-
Automated onboarding workflows allow approximately 300 new employees per year to get to work 8 hours faster.
-
Improved management and maintenance of SaaS licenses saves all 3,000 SaaS application end users a half an hour (assuming 50% productivity recapture on 1 hour of time saved).
-
The average fully burdened hourly wage for all employees at the composite organization is $34.5
Risks. The scale of this benefit may vary from organization to organization based on:
-
The size of the organization.
-
The size of the team managing SaaS applications before deploying 1Pasword.
-
The average fully burdened pay rates of the employees affected.
Results. To account for these risks, Forrester adjusted this benefit downward by 15%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $690,000.
15%
IT time redeployed to high-value projects
Increased Employee Productivity
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| B1 | IT team members | Composite | 10 | 10 | 10 | |
| B2 | IT FTEs saved onboarding/offboarding | Interviews | 1 | 1 | 1 | |
| B3 | IT/security FTEs saved on governance/audit and security tasks | Interviews | 0.50 | 0.50 | 0.50 | |
| B4 | Fully burdened annual rate for an IT team member | Research data | $129,200 | $129,200 | $129,200 | |
| B5 | Average new employees per year | Composite | 300 | 300 | 300 | |
| B6 | Average hours saved onboarding | Interviews | 8 | 8 | 8 | |
| B7 | Total SaaS application end users | Composite | 3,000 | 3,000 | 3,000 | |
| B8 | Average productive hours saved from improved SaaS estate management | Interviews | 0.5 | 0.5 | 0.5 | |
| B9 | Average fully burdened hourly rate for an employee | Research data | $34 | $34 | $34 | |
| Bt | Increased employee productivity | ((B2+B3)*B4)+(B5*B6*B9)+(B7*B8*B9) | $326,400 | $326,400 | $326,400 | |
| Risk adjustment | ↓15% | |||||
| Btr | Increased employee productivity (risk-adjusted) | $277,440 | $277,440 | $277,440 | ||
| Three-year total: $832,320 | Three-year present value: $689,952 | |||||
Reduced Compliance-Related Security Risk
Evidence and data. Interviewees told Forrester that AI and SaaS Manager reduced compliance-related security risk by improving visibility into application access, automating user offboarding, supporting role-based access controls, maintaining more accurate user inventories, and providing centralized governance over SaaS applications. Interviewees emphasized that the platform ensures former employees did not retain access to corporate systems, strengthened audit readiness, and enabled more consistent enforcement of security and compliance policies.
-
Automated user deprovisioning and access removal. A primary risk-reduction benefit cited by interviewees was the ability to automatically remove access when employees depart or change roles. The head of enterprise applications and identity in healthcare opined that AI and SaaS Manager automated offboarding across applications they might otherwise miss, noting, “It’ll start and remove access from all those applications that your typical workflows may not do.” This reduced the likelihood that former employees retained access to business-critical SaaS applications after termination or transfer.
-
Improved visibility into SaaS access and shadow IT. Interviewees explained that AI and SaaS Manager provided a centralized view of applications, users, and ownership, helping IT teams identify unmanaged applications and access risks. Prior to 1Password deployment, the interviewees’ organizations often lacked comprehensive visibility into their SaaS environments. By creating a centralized inventory of applications and users, AI and SaaS Manager allowed IT and security teams to understand who had access to which systems and identify applications operating outside established governance processes. Interviewees noted that greater visibility helped prevent unauthorized software adoption and supported stronger control over each organization’s SaaS footprint.
-
Stronger role-based access governance. Several interviewees described using AI and SaaS Manager workflows to standardize onboarding and offboarding processes and enforce consistent access management practices. The same automated workflows that accelerate provisioning also help ensure access is granted according to established policies and removed when no longer required. Interviewees indicated that standardized workflows reduce reliance on manual processes, which can introduce compliance gaps and human error.
-
Eliminated orphaned and dormant accounts. Interviewees described identifying accounts belonging to terminated employees or inactive users that represented unnecessary security exposure. By identifying and removing these accounts automatically, interviewees’ organizations reduced the risk associated with dormant credentials while improving overall SaaS governance.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
-
The organization faces an average annual breach exposure of $2.1 million.6
-
Seventy-seven percent of breach exposure is associated with external attacks, remote-environment attacks, and internal incidents.7
-
Ten percent of that exposure is addressable through improved management of SaaS applications and their usage.
-
Improved visibility, standardization, governance, and access control reduce this addressable risk by 20%.
Risks. The scale of this benefit may vary from organization to organization based on:
-
Existing SaaS application management maturity.
-
Percentage of applications operating outside managed environments before deploying 1Password AI and SaaS Manager.
Results. To account for these risks, Forrester adjusted this benefit downward by 15%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $67,000.
20%
Reduced risk of exposure to breach costs from addressable attacks
Reduced Compliance-Related Security Risk
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| C1 | Total annual risk exposure to security breaches for the composite organization | Forrester research | $2,062,000 | $2,062,000 | $2,062,000 | |
| C2 | Percentage of breaches originating from external attacks targeting organizations, external attacks targeting remote environments, internal incidents | Forrester research | 77% | 77% | 77% | |
| C3 | Percentage of those attacks addressable with 1Password AI and SaaS Manager | Interviews | 10% | 10% | 10% | |
| C4 | Annual risk exposure addressable with 1Password AI and SaaS Manager | C1*C2*C3 | $158,774 | $158,774 | $158,774 | |
| C5 | Reduced risk of exposure to breach costs from addressable attacks with 1Password AI and SaaS Manager | Interviews | 20% | 20% | 20% | |
| Ct | Reduced compliance-related security risk | C4*C5 | $31,755 | $31,755 | $31,755 | |
| Risk adjustment | ↓15% | |||||
| Ctr | Reduced compliance-related security risk (risk-adjusted) | $26,992 | $26,992 | $26,992 | ||
| Three-year total: $80,975 | Three-year present value: $67,124 | |||||
Unquantified Benefits
Benefits that provide value for the composite organization but are not quantified for this study include:
-
Improved business user experience and self-service management. Interviewees observed that the productivity gains experienced by IT teams also translated into faster service delivery for end users. The CIO of a travel and hospitality company described the following: “[It is] a much more streamlined process for the onboarding and for the approvals. [Users] are seeing a lot faster provisioning. They get on the platform very quickly.” As a result, employees spent less time waiting for access and IT spent less time responding to those routine requests.
AI and SaaS Manager also helped distribute responsibility for software management to application owners and business stakeholders. Interviewees reported that this gave business users direct visibility into application utilization, costs, invoices, and user assignments, reducing the number of information requests directed to IT teams and enabling more informed decisions without IT intervention. According to the head of enterprise applications and identity at the healthcare organization, “You can give the ownership to John Doe, they can log into the product, and they can see all the applications in use.” -
Enhanced governance and software standardization. The interviewees’ organizations established greater visibility and control over their SaaS environment, helping IT teams understand which applications were in use, who owned them, and how they were being used across the business. This helped their organizations identify overlapping tools, guide employees toward approved platforms, and encourage use of the right solution for the right purpose rather than allowing departments to independently adopt alternative products. The asset management team steered business users toward existing approved tools, reducing fragmentation and improving adherence to technology standards.
AI and SaaS Manager helps the composite organization create a centralized inventory of applications, giving decision-makers a consistent source of truth for software ownership, licensing, contracts, and renewal activities. It becomes a key component of software procurement, renewal, and application review processes, helping reinforce standardized workflows and approval practices at the composite. Collectively, these capabilities can strengthen organizational governance, improve alignment between IT and business stakeholders, and promote a more consistent and manageable software portfolio.
-
Better data-based decision-making. AI and SaaS Manager provides the composite organization with a centralized, continuously updated view of its software environment, enabling leaders to make more informed decisions based on accurate usage, licensing, spending, ownership, and application data. By bringing together information from identity systems, financial systems, contracts, renewal records, and application activity, the platform helps stakeholders evaluate technology investments with greater confidence and less reliance on spreadsheets or manual research. The composite organization uses these insights on an ongoing basis to identify redundant applications, validate software needs before renewals, determine appropriate license levels, and assess opportunities for consolidation or standardization.
The visibility AI and SaaS Manager delivers (especially in concert with 1Password’s Enterprise Password Manager) helps the composite organization’s teams understand who is using each application, how applications are being accessed, and whether tools are delivering sufficient value to justify ongoing investment. Interviewees provided evidence to support this and reported using the platform to support procurement decisions, vendor negotiations, governance discussions, security reviews, and technology planning efforts. By creating a trusted source of truth for SaaS data, AI and SaaS Manager can enable faster, more consistent, and more evidence-based decision-making across IT, security, finance, procurement, and business leadership teams.
Flexibility
The value of flexibility is unique to each customer. There are multiple scenarios in which a customer might implement AI and SaaS Manager and later realize additional uses and business opportunities, including:
-
Optimized AI spending. The Federal Reserve Bank of Atlanta estimates that US private firms will invest $280 billion in AI adoption and AI-related technologies in 2026 and that, per employee, represents a 50% increase over 2025.8 Forrester’s research shows that leaders in this environment are dealing with a real risk of fragmented, escalating, and poorly governed AI costs.9 As enterprises scale AI across the organization, they face cost challenges that traditional FinOps methods and ad hoc controls do not adequately address. AI introduces greater cost fragmentation and volatility, making reactive reporting insufficient.10
These concerns were also growing for the interviewees in this study. They reported that their leaders were beginning to ask difficult questions about AI spending and its effectiveness. While their leaders plan to continue (and even accelerate) their use of AI, they want to understand what their organizations are spending on AI and what it is doing for them, so they can direct the investment into the highest return areas. Interviewees described several ways they saw AI and SaaS Manager playing a role in understanding and controlling that AI spending.
First, interviewees noted that AI and SaaS Manager can help reduce AI spending by making the addressable expenditure visible for their organizations. Once leaders have quantified the extent of their organization’s AI spend and identified the specific use cases driving it, they can begin to make decisions about whether and how much to limit spending, as well as which pockets to target for reduction.
Second, interviewees said that AI and SaaS Manager can help their organizations optimize the investment they will continue to make in AI. By combining AI consumption and cost information with associated business-outcome measures, leaders can make more informed decisions on how to direct investment toward productive AI use. Success may mean spending more on AI with better returns, not simply shrinking the bill.
Finally, interviewees reported that AI and SaaS Manager can assist businesses in recouping their AI spending in situations where it can be attributed to specific products or customers. For instance, token consumption attribution can provide a foundation for mapping AI costs to project cost codes (supporting pricing actions to maintain margin), or to engagements to allow for client billing where contracts permit.
Flexibility would also be quantified when evaluated as part of a specific project (described in more detail in Total Economic Impact Approach).
Analysis Of Costs
Quantified cost data as applied to the composite
Total Costs
| Ref. | Cost | Initial | Year 1 | Year 2 | Year 3 | Total | Present Value |
|---|---|---|---|---|---|---|---|
| Dtr | 1Password fees | $0 | $378,000 | $378,000 | $378,000 | $1,134,000 | $940,030 |
| Etr | Planning, deployment, and administration | $61,008 | $8,184 | $8,184 | $8,184 | $85,560 | $81,360 |
| Total costs (risk-adjusted) | $61,008 | $386,184 | $386,184 | $386,184 | $1,219,560 | $1,021,390 |
1Password Fees
Evidence and data. Interviewees’ organizations incurred ongoing subscription costs for 1Password AI and SaaS Manager. Licensing covered access to all features of the platform and was driven primarily by the number of identities (SaaS application users) in their organizations. Pricing may vary. Contact 1Password for additional details.
Modeling and assumptions. Based on the interviews, Forrester assumes the composite organization pays $360,000 annually for AI and SaaS Manager based on its 3,000 identities.
Risks. The impact of this cost may vary by organization depending on the number of employees using SaaS applications.
Results. To account for these risks, Forrester adjusted this cost upward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $940,000.
1Password Fees
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| D1 | Fees for AI and SaaS Manager license | 1Password | $360,000 | $360,000 | $360,000 | |
| Dt | 1Password fees | D1 | $0 | $360,000 | $360,000 | $360,000 |
| Risk adjustment | ↑5% | |||||
| Dtr | 1Password fees (risk-adjusted) | $0 | $378,000 | $378,000 | $378,000 | |
| Three-year total: $1,134,000 | Three-year present value: $940,030 | |||||
Planning, Deployment, And Administration
Evidence and data. Interviewees described AI and SaaS Manager as requiring a relatively modest implementation effort, reporting that planning and deployment were completed by existing IT personnel without the need for dedicated implementation teams or external consulting resources. Implementation efforts primarily involved connecting SaaS applications, reviewing application ownership and licensing data, configuring onboarding and offboarding workflows, and establishing automated license governance policies. Several interviewees noted that AI and SaaS Manager’s prebuilt integrations accelerated deployment, allowing applications to be onboarded quickly. The senior manager of enterprise applications at an automotive company reported that adding a new application typically took “less than 10 minutes,” describing the overall deployment process as straightforward and largely self-service.
Interviewees indicated that the greatest time investment occurred early in the project while validating application inventories, identifying owners, reviewing existing licenses, and defining automation workflows. Once deployed, the platform required little ongoing administration. The same senior manager of enterprise applications indicated “maintenance is minimal,” reflecting a common view that AI and SaaS Manager largely operates through automation after initial setup. Other interviewees supported the assertion that day-to-day management effort was limited because license reclamation, utilization monitoring, onboarding and offboarding actions, and reporting workflows run automatically. As a result, AI and SaaS Manager generally shifted effort away from recurring manual administration toward one-time setup and governance activities.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
-
Five asset management team members spend 25% of their time over the course of four months evaluating and planning for the adoption of AI and SaaS Manager.
-
Two FTEs work full-time for four months implementing the deployment, integration, and adoption of AI and SaaS Manager.
-
All 10 asset management team members receive 6 hours of introductory training for using the tool.
-
Assuming a 10% turnover rate, an additional asset management team member receives the same introductory training each year.
-
One FTE spends 5% of their time managing the application annually after launch.
-
The fully burdened hourly rate for an asset management team member is $62.
Risks. The impact of this cost may vary by organization depending on the following:
-
The size of the asset management team and its turnover rate.
-
The approach to planning and deployment the organization takes, affecting how many people participate and how much of their time they spend on the project.
-
The average salary of team members participating in the deployment.
Results. To account for these risks, Forrester adjusted this cost upward by 20%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $81,000.
Planning, Deployment, And Administration
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| E1 | Internal time spent planning | Interviews | 280 | |||
| E2 | Internal time spent on deployment | Interviews | 480 | |||
| E3 | Internal time spent on ongoing optimization and administration | Interviews | 0 | 104 | 104 | 104 |
| E4 | Time for user training (hours) | Interviews | 60 | 6 | 6 | 6 |
| E5 | Fully burdened hourly rate for an IT employee | B4/2080 | $62 | $62 | $62 | $62 |
| Et | Planning, deployment, and administration | (E1+E2+E3+E4)*E5 | $50,840 | $6,820 | $6,820 | $6,820 |
| Risk adjustment | ↑20% | |||||
| Etr | Planning, deployment, and administration (risk-adjusted) | $61,008 | $8,184 | $8,184 | $8,184 | |
| Three-year total: $85,560 | Three-year present value: $81,360 | |||||
Financial Summary
Consolidated Three-Year, Risk-Adjusted Metrics
Cash Flow Chart (Risk-Adjusted)
Cash Flow Analysis (Risk-Adjusted)
| Initial | Year 1 | Year 2 | Year 3 | Total | Present Value | |
|---|---|---|---|---|---|---|
| Total costs | ($61,008) | ($386,184) | ($386,184) | ($386,184) | ($1,219,560) | ($1,021,390) |
| Total benefits | $0 | $941,932 | $1,196,932 | $1,579,432 | $3,718,295 | $3,032,151 |
| Net benefits | ($61,008) | $555,748 | $810,748 | $1,193,248 | $2,498,735 | $2,010,761 |
| ROI | 197% | |||||
| Payback | <6 months |
Please Note
The financial results calculated in the Benefits and Costs sections can be used to determine the ROI, NPV, and payback period for the composite organization’s investment. Forrester assumes a yearly discount rate of 10% for this analysis.
These risk-adjusted ROI, NPV, and payback period values are determined by applying risk-adjustment factors to the unadjusted results in each Benefit and Cost section.
The initial investment column contains costs incurred at “time 0” or at the beginning of Year 1 that are not discounted. All other cash flows are discounted using the discount rate at the end of the year. PV calculations are calculated for each total cost and benefit estimate. NPV calculations in the summary tables are the sum of the initial investment and the discounted cash flows in each year. Sums and present value calculations of the Total Benefits, Total Costs, and Cash Flow tables may not exactly add up, as some rounding may occur.
From the information provided in the interviews, Forrester constructed a Total Economic Impact™ framework for those organizations considering an investment in 1Password AI and SaaS Manager.
The objective of the framework is to identify the cost, benefit, flexibility, and risk factors that affect the investment decision. Forrester took a multistep approach to evaluate the impact that AI and SaaS Manager can have on an organization.
Due Diligence
Interviewed 1Password stakeholders and Forrester analysts to gather data relative to AI and SaaS Manager.
Interviews
Interviewed six decision-makers at organizations using AI and SaaS Manager to obtain data about costs, benefits, and risks.
Composite Organization
Designed a composite organization based on characteristics of the interviewees’ organizations.
Financial Model Framework
Constructed a financial model representative of the interviews using the TEI methodology and risk-adjusted the financial model based on issues and concerns of the interviewees.
Case Study
Employed four fundamental elements of TEI in modeling the investment impact: benefits, costs, flexibility, and risks. Given the increasing sophistication of ROI analyses related to IT investments, Forrester’s TEI methodology provides a complete picture of the total economic impact of purchase decisions. Please see Appendix A for additional information on the TEI methodology.
Total Economic Impact Approach
Benefits
Benefits represent the value the solution delivers to the business. The TEI methodology places equal weight on the measure of benefits and costs, allowing for a full examination of the solution’s effect on the entire organization.
Costs
Costs comprise all expenses necessary to deliver the proposed value, or benefits, of the solution. The methodology captures implementation and ongoing costs associated with the solution.
Flexibility
Flexibility represents the strategic value that can be obtained for some future additional investment building on top of the initial investment already made. The ability to capture that benefit has a PV that can be estimated.
Risks
Risks measure the uncertainty of benefit and cost estimates given: 1) the likelihood that estimates will meet original projections and 2) the likelihood that estimates will be tracked over time. TEI risk factors are based on “triangular distribution.”
Financial Terminology
Present value (PV)
The present or current value of (discounted) cost and benefit estimates given at an interest rate (the discount rate). The PVs of costs and benefits feed into the total NPV of cash flows.
Net present value (NPV)
The present or current value of (discounted) future net cash flows given an interest rate (the discount rate). A positive project NPV normally indicates that the investment should be made unless other projects have higher NPVs.
Return on investment (ROI)
A project’s expected return in percentage terms. ROI is calculated by dividing net benefits (benefits less costs) by costs.
Discount rate
The interest rate used in cash flow analysis to take into account the time value of money. Organizations typically use discount rates between 8% and 16%.
Payback
The breakeven point for an investment. This is the point in time at which net benefits (benefits minus costs) equal initial investment or cost.
Appendix A
Total Economic Impact
Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists solution providers in communicating their value proposition to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of business and technology initiatives to both senior management and other key stakeholders.
Appendix B
Endnotes
1, Source: Visualize, Control, And Optimize Your Spend With Software Asset Management Tools, Forrester Research, March 25, 2025; The SaaS And Software Asset Management Solutions Landscape, Forrester Research, August 12, 2026.
3 Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists solution providers in communicating their value proposition to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of business and technology initiatives to both senior management and other key stakeholders.
4 Source: Modeled Wage Estimates, Bureau of Labor Statistics.
5 Source: Modeled Wage Estimates, Bureau of Labor Statistics.
6 Cumulative breach costs are computed using the composite organization’s size (revenue or number of employees) as an input to a regression analysis of reported total cumulative costs for all breaches experienced by organizations that experienced at least one breach in the past 12 months. Source: Forrester’s Security Survey, 2025, “Using your best estimate, what was the total cumulative cost of all breaches experienced by your organization in the past 12 months?” Base: 1,740 global security decision-makers who have experienced a breach in the past 12 months. The cumulative breach cost is then multiplied by a 67% likelihood for organizations to experience one or more breaches in a given year. Source: Forrester’s Security Survey, 2025, “How many times do you estimate that your organization’s sensitive data was potentially compromised or breached in the past 12 months?” Base: 2,643 global security decision-maker.
7 Percent of breaches by primary attack vector for breaches, as reported by security decision-makers whose organizations experienced at least one breach in the last 12 months. Source: Forrester’s Security Survey, 2025. “[Of the times that your organization’s sensitive data was potentially compromised or breached in the past 12 months, please indicate how many of each fall into the following categories below.]” Base: 1,766 global security decision-makers who have experienced a breach in the past 12 months.
8 Source: José María Barrero et al., How Much Are Firms Spending on AI (and What Will Happen to Headcounts)?, Federal Reserve Bank of Atlanta, May 6, 2026.
9 Source: Budget Planning Guide 2027: Security And Risk Leaders Must Confront The AI Cost Explosion, Forrester Research, July 8, 2026.
10 Ibid.
Disclosures
Readers should be aware of the following:
This study is commissioned by 1Password and delivered by Forrester Consulting. It is not meant to be used as a competitive analysis.
Forrester makes no assumptions as to the potential ROI that other organizations will receive. Forrester strongly advises that readers use their own estimates within the framework provided in the study to determine the appropriateness of an investment in AI and SaaS Manager. For any interactive functionality, the intent is for the questions to solicit inputs specific to a prospect’s business. Forrester believes that this analysis is representative of what companies may achieve with AI and SaaS Manager based on the inputs provided and any assumptions made. Forrester does not endorse 1Password or its offerings. Although great care has been taken to ensure the accuracy and completeness of this model, 1Password and Forrester Research are unable to accept any legal responsibility for any actions taken on the basis of the information contained herein. The interactive tool is provided ‘AS IS,’ and Forrester and 1Password make no warranties of any kind.
1Password reviewed and provided feedback to Forrester, but Forrester maintains editorial control over the study and its findings and does not accept changes to the study that contradict Forrester’s findings or obscure the meaning of the study.
1Password provided the customer names for the interviews but did not participate in the interviews.
Consulting Team:
Kim Finnerty
Published
October 2026