TOOL PROFILE · IDENTITY GOVERNANCE (IGA) PLATFORM

C1 review 2026: shadow app detection and open connectors

The short answer

C1 ranks 3 of 8 at 6.30 out of 10. It monitors shadow app sign-ups and logins to decide what to bring under governance, and its open-source Baton connectors and C1 Bridge give a documented route into custom and on-prem systems. Apps with no connector are not described in detail, and it publishes a pricing structure without prices.

By The Credential Desk · IAM Compared · Published 2026-10-08

Desk research from public vendor pages and documentation read in September 2026, updated 2026-10-13. Editorial assessment; we did not test the products.

Rank 3 of 8 on default weights

Shadow app detection and open-source connectors

Change the weights in the coverage gap calculator

What shape is C1's reach?

DISC: Unmanaged app discovery; 6.0
INAPP: Accounts inside the app; 6.0
NOAPI: Reach into apps without APIs or SCIM; 6.5
ORCH: Orchestrates through the existing stack; 7.0
EXEC: Executes changes itself; 7.8
NHI: Machine, service and agent accounts; 6.0
EVID: Audit evidence; 6.5
PRICE: Pricing transparency; 3.0

Each sector is one criterion. The longer the engraved sector, the higher the editorial score. Sectors are equal width, so the picture shows the shape of a tool's reach, not its weighted total.

What does C1 do?

Identity governance with JML automation, access reviews, shadow app detection and open-source Baton connectors.

Name: conductorone.com redirects to c1.ai.; Source: conductorone.com (redirects to c1.ai) · Read 27 Sep 2026
Shadow IT: "Monitor shadow app signups and logins to determine whether to bring an app under governance".; Source: C1: Shadow IT · Read 27 Sep 2026
Connectors: C1 Connectors and open-source Baton connectors; C1 Bridge for on-prem systems; Shadow AI Discovery.; Source: C1 homepage · Read 27 Sep 2026
Lifecycle: HR-triggered workflows; "Find what offboarding missed"; records each action.; Source: C1 Lifecycle · Read 27 Sep 2026
EU instance: Tenant data held in the EU, on AWS Frankfurt with Ireland for disaster recovery (15 September 2026).; Source: C1 blog: C1 now available in Europe · Read 27 Sep 2026
Autonomous Worker: An agent that runs tasks such as revoking unused admin access and building access reviews with the operator's own permissions (15 June 2026).; Source: C1 blog: C1 Autonomous Worker · Read 27 Sep 2026

What does C1 state about itself?

We did not collect a headline figure or finding from C1 (formerly ConductorOne) for this page.

Which parts of the estate does C1 document?

Unsanctioned SaaSPartial
Shadow app sign-up and login monitoring
Source: C1: Shadow IT · Read 27 Sep 2026
On-prem and legacy appsDocumented
C1 Bridge for on-prem systems
Source: C1 homepage · Read 27 Sep 2026
Custom-built appsPartial
Open-source Baton connectors you can extend
Source: C1 homepage · Read 27 Sep 2026
Local accounts in appsPartial
Find what offboarding missed
Source: C1 Lifecycle · Read 27 Sep 2026
Service accounts and hardcoded credentialsNot documented
Not described on the pages reviewed
AI agentsPartial
Shadow AI Discovery listed
Source: C1 homepage · Read 27 Sep 2026

How does C1 score on each criterion?

Criterion scores for C1 (formerly ConductorOne), with badges computed against all 8 tools.
Criterion	Weight	Score	Why	Source
Unmanaged app discovery	18%	6.0 / 10	Monitors shadow app sign-ups and logins to decide whether to bring an app under governance, and lists Shadow AI Discovery.	Source: C1: Shadow IT · Read 27 Sep 2026 · Source: C1 homepage · Read 27 Sep 2026
Accounts inside the app	16%	6.0 / 10	Finds what offboarding missed; mapping of local accounts inside apps is not detailed.	Source: C1 Lifecycle · Read 27 Sep 2026
Reach into apps without APIs or SCIM	14%	6.5 / 10	Open-source Baton connectors and C1 Bridge for on-prem systems; apps with no connector are not described in detail.	Source: C1 homepage · Read 27 Sep 2026
Orchestrates through the existing stack	14%	7.0 / 10	Connects to existing IdPs and HR systems rather than replacing them.	Source: C1 Lifecycle · Read 27 Sep 2026
Executes changes itself	12%	7.8 / 10	HR systems and directories trigger join, role change and departure workflows.	Source: C1 Lifecycle · Read 27 Sep 2026
Machine, service and agent accounts	10%	6.0 / 10	Shadow AI Discovery is listed; service account and credential coverage is not detailed.	Source: C1 homepage · Read 27 Sep 2026
Audit evidence	10%	6.5 / 10 Tied lowest	Records each offboarding action; a framework evidence export is not described.	Source: C1 Lifecycle · Read 27 Sep 2026
Pricing transparency	6%	3.0 / 10	Publishes the pricing structure but no prices.	Source: C1 pricing · Read 12 Oct 2026

Where does C1 lead, and where does it trail?

Leads or ties the set on

It does not lead any criterion; its highest scores are Executes changes itself and Orchestrates through the existing stack.

Trails the leader on

Pricing transparency: 3.0 against Entra ID Governance at 9.5
Unmanaged app discovery: 6.0 against Orchid at 9.5
Accounts inside the app: 6.0 against Orchid at 9.0
Reach into apps without APIs or SCIM: 6.5 against Orchid at 9.0

Strengths on its public pages

Watches shadow app sign-ups and logins to decide what to bring under governance.
Open-source Baton connectors and C1 Bridge give a documented route into custom and on-prem systems.

Limits on its public pages

Handling of apps with no connector at all is not described in detail.
Publishes its pricing structure but no prices.

What does C1 cost, and how is it deployed?

Pricing

Not published

Pricing structure published (Platform or Flex; Pro or Advanced; 100 to 20,000 managed identities) without prices.

Source: C1 pricing · Read 12 Oct 2026

Deployment

SaaS with hosted or on-prem connectors (C1 Bridge). EU instance with tenant data held in the EU since September 2026.

Who is C1 for?

Teams that want governance plus shadow app detection, and engineers who will extend open-source connectors.

Consider instead if you need a published price before talking to sales: Microsoft Entra ID Governance.

How does C1 compare with each other tool?

C1 vs Orchid
Orchid Security scores higher overall, 8.24 against 6.30
C1 vs Veza
Veza scores higher overall, 6.37 against 6.30
C1 vs Saviynt
C1 (formerly ConductorOne) scores higher overall, 6.30 against 6.15
C1 vs SailPoint
C1 (formerly ConductorOne) scores higher overall, 6.30 against 6.21
C1 vs Entra ID Governance
C1 (formerly ConductorOne) scores higher overall, 6.30 against 6.15
C1 vs Lumos
C1 (formerly ConductorOne) scores higher overall, 6.30 against 6.13
C1 vs Apono
C1 (formerly ConductorOne) scores higher overall, 6.30 against 4.78

Moving off C1? See the alternatives Visit C1

Learn more

LESSON 01
The unmanaged application estate: what your identity provider misses
Three kinds of unmanaged app, where they come from and why they matter.
LESSON 07
How identity tools reach applications without APIs or SCIM
Seven ways to get account data in and out of a hard application.

Frequently asked questions

What is C1 (formerly ConductorOne)?

Identity governance with JML automation, access reviews, shadow app detection and open-source Baton connectors. It sits in the identity governance (iga) platform layer.

How does C1 (formerly ConductorOne) score on reach beyond the IdP?

6.30 out of 10, rank 3 of 8 on default weights. Its highest criterion scores are Executes changes itself (7.8) and Orchestrates through the existing stack (7.0) and its lowest is Pricing transparency (3.0).

What are the alternatives to C1 (formerly ConductorOne)?

On our reach score the closest alternatives are Orchid Security, Veza and SailPoint Identity Security Cloud. The moving-off page lists every alternative and the criteria where each scores higher.

Moving off C1