Login with SSO, enterprise policies and a self-host option for $6 a user, on open-source clients with public audit reports.
Bitwarden gives a 25-person company SSO, SCIM, event logs, policies and account recovery on Enterprise for $150 a month billed annually, the lowest figure in this comparison. Security reviewers can read its client code and its recent third-party audit reports without asking, and its compliance page lists SOC 2 Type II, SOC 3, ISO 27001 and HIPAA. Teams that want to run the server themselves can self-host on Enterprise.
Audit reports anyone can readThe audit page links 2025 assessments of the core application, web vault, browser extension, desktop and mobile apps, plus a cryptography review by ETH Zurich.Evidence: "Is Bitwarden audited?" help page (2026-10-15)
SSO from $6 a userEnterprise adds login with SSO, enterprise policies, account recovery and self-hosting for $2 a user more than Teams.Evidence: Business pricing page (2026-10-15)
Open-source clients and a self-host optionThe compliance page points to the code on GitHub, and Enterprise organizations can run the Bitwarden server on their own network.Evidence: Compliance page and plan docs (2026-10-15)
Best for
Companies that want SSO and policies at the lowest per-user price, or that need to inspect code, read audits or self-host.
Good to know
Login with SSO and enterprise policies are on Enterprise, not Teams.
How Bitwarden compares
Against 3 other products we reviewed in Business password managers: what you pay for with each, the five access facts, the plan limits we recorded and each review's bottom line. The note under the table says how each one was checked.
Bitwarden compared with LastPass, Dashlane, 1Password
Compliance includedLogin with SSO, enterprise policies and a self-host option for $6 a user, on open-source clients with public audit reports.
Compliance includedFederated login, directory provisioning and SIEM integration on a self-serve plan at $7 a user, with SOC 2, SOC 3 and ISO 27001 and 27701.
Compliance includedSSO, SCIM and SIEM integration on the only self-serve business plan, at $8 a user billed annually.
Compliance includedUnlock with SSO, automated provisioning and SIEM events on a per-user plan with monthly or annual billing, backed by SOC 2 and four ISO certificates.
Overall score
8.8Best
6.9
6.8
6.7
Free option
Free plan
14-day free trial
14-day free trial
14-day free trial
Card to start
–Not measured
No card needed
No card needed
No card needed
Getting access
Self-serve
Self-serve
Self-serve
Self-serve
Starter priceCheapest paid plan
$4/user/mo
$4.25/user/mo
$8/user/mo
$24.95/mo
Pricing model
Per seat
Per seat
Per seat
Per seat
Pricing page
Public prices
Public prices
Public prices
Public prices
Plan with SSO unlock
Enterprise ($6/user/mo, annual)
Business ($7/user/mo, annual)
Omnix Password Management ($8/user/mo, annual)
Business ($8.99/user/mo, annual)
25 users with SSO, billed annually
$150/mo
$175/mo
$200/mo
$224.75/mo
Monthly billing
Offered per the docs; rate not listed
Not listed; plans billed annually
Not offered for current plans
Yes, $10.99/user on Business
Free option
Free organization for 2 people; 14-day trial
14-day trial, no card
14-day trial, no card
14-day trial, no card
Seat terms
Per user, base of 1 user, no cap
Per user; Teams up to 50 users, Business no limit
Per user; checkout opens at 10 seats, no minimum stated
Business: 1-user minimum; Teams Starter Pack: 10 users, up to 20
SSO protocols
SAML 2.0 or OpenID Connect
Federated login with Entra ID, Okta, Google Workspace, Ping, OneLogin or AD FS (protocol not stated)
SAML 2.0
OpenID Connect
SOC 2 Type II and ISO 27001
Both, plus a public SOC 3
Both, plus ISO 27701 and a public SOC 3
Both
Both, plus ISO 27017, 27018 and 27701
Third-party audit reports
Public, including 2025 reports
Pentest letters in the Compliance Center, on request
In the Trust Center, on request
2020 reports public; current pentests via the Trust Center
Client source code
Open source
None stated
Published for review (Android, Apple, web extension)
None stated
Self-hosting
Enterprise
None stated
None stated
None stated
Bottom line
From its public pages, Bitwarden is the most complete package here for a 25-person company that needs SSO: the lowest price, public audits, open-source clients and a self-host option. SSO and policies sit on Enterprise rather than Teams.
From its public pages, LastPass Business is a straightforward self-serve buy for SSO, provisioning and SIEM export at $7 a user. Buyers will also weigh the 2022 incident, which LastPass documents on its own pages along with the changes it made.
From its public pages, Dashlane is the simplest buy for SSO: one self-serve plan at $8 a user includes it. Plan around annual-only billing and audit reports that need an access request.
From its public pages, 1Password Business has the broadest certification list and the only listed monthly price here, at the highest figure for 25 users with SSO. Its lower score reflects price, gated current pentest reports and no self-hosting.
Evidence: Bitwarden: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; LastPass: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Dashlane: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; 1Password: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run. Prices in USD as listed, excluding tax. "–" means not recorded.
own SOC 2 Type II, ISO 27001, HIPAA stated, public SOC 3
Admin control
9.0 / 10, Excellent
SSO on a higher self-serve plan, SCIM, exportable event logs, policies, self-host option
Review
Review from public pages
Written from Bitwarden's public pages (pricing, security or privacy, and docs) as read on Oct 15, 2026. We did not sign up, and no hands-on run is published yet.
What the public pages show
We read Bitwarden's business pricing page, its plan and organization docs, the compliance page and the audit page on Oct 15, 2026; we did not sign up for this review. The pricing page shows two business plans priced per user and billed annually: Teams at $4 and Enterprise at $6. The plan table marks event logs, user groups, API access, Directory Connector and SCIM on both; login with SSO, enterprise policies, account recovery, custom roles and the self-host option are Enterprise only.
The organization docs say Teams and Enterprise can be billed annually or monthly, but no monthly rate appears on the pricing page. New Teams and Enterprise organizations get a 14-day free trial, and the docs say payment information is entered when the organization is created and charged after the trial. A Free organization lets two people share up to two collections.
The audit page is unusually open: it links 2025 reports from Cure53, ETH Zurich, Unit 42 and Fracture Labs, among others, and the compliance page lists SOC 2 Type II, a public SOC 3, ISO 27001 and HIPAA.
Strengths
Lowest price for SSO here
Enterprise is $6 a user billed annually: $150 a month for 25 people.
vs 1Password: Dashlane comes to $200 and 1Password Business to $224.75 for the same 25 users.
Recent audit reports are public
Third-party reports from 2025 can be downloaded from the audit page without a request.
vs 1Password: Dashlane’s penetration test reports need a Trust Center access request; 1Password distributes its current ones through its Trust Center.
Open-source clients
The compliance page points to the Bitwarden codebase on GitHub, open for anyone to review.
A self-host option
Enterprise organizations can run the Bitwarden server on their own network, compatible with all Bitwarden clients.
Free option for two
A Free organization lets two people share items in up to two collections, with no time limit.
Things to know
SSO and policies need Enterprise
Teams includes SCIM and event logs, but login with SSO, enterprise policies and account recovery start on Enterprise.
Workaround: Enterprise is $2 a user more than Teams.
Monthly rate not listed
The docs say business plans can be billed monthly, but the pricing page shows annual prices only.
Payment details at sign-up
The organization docs say payment information is entered when a paid organization is created, with the charge after the 14-day trial.
Pricing reality
Bitwarden bills per user, with a base of one user and no cap. Teams is $4 a user a month billed annually; Enterprise is $6. For 25 people with SSO, Enterprise comes to 25 × $6 = $150 a month, or $1,800 a year. Without SSO, Teams would be $100 a month.
The pricing page lists annual prices only and says taxes are not included; the docs say monthly billing is available, but its rate is not on the page. Secrets Manager is a separate add-on ($6 a user on Teams, $12 on Enterprise). Every Enterprise user also gets a free Families plan.
Exit path
Encrypted export is a core feature on every plan, and event logs can be exported as CSV from the web app or as JSON through the Public API. The plan docs say Enterprise organizations can also be imported to a self-hosted server.
You want SSO for less and open-source clients you can review.
Pick 1Password when
You want ISO 27017, 27018 and 27701 as well as 27001, or a trial that states no card is needed.
Choose it if
You need SSO and SCIM at the lowest listed price per user.
Your security review wants to read audit reports or client code before signing.
You may need to self-host the server.
Look elsewhere if
You want SSO on the cheapest business tier.
You need a monthly price on the pricing page before you start.
Bottom line
From its public pages, Bitwarden is the most complete package here for a 25-person company that needs SSO: the lowest price, public audits, open-source clients and a self-host option. SSO and policies sit on Enterprise rather than Teams.
Plan limits at a glance
Limit
As recorded
Plan with SSO unlock
Enterprise ($6/user/mo, annual)
25 users with SSO, billed annually
$150/mo
Monthly billing
Offered per the docs; rate not listed
Free option
Free organization for 2 people; 14-day trial
Seat terms
Per user, base of 1 user, no cap
SSO protocols
SAML 2.0 or OpenID Connect
SOC 2 Type II and ISO 27001
Both, plus a public SOC 3
Third-party audit reports
Public, including 2025 reports
Client source code
Open source
Self-hosting
Enterprise
Read from the vendor's public pages on Oct 15, 2026. No hands-on run is published yet. How we check
We have not published a sign-up run for Bitwarden yet. The access facts above were read from its sign-up and pricing pages on Oct 15, 2026.
We have not published API calls for Bitwarden yet.
We read the business pricing, security and help pages of three password managers on the same day and scored them on the same six indicators. Where SSO sits, what 25 users cost, how open each is about audits, and who should pick which.