What Veza does

Veza is an identity security company founded in 2020 (operating as Veza Technologies, Inc., headquartered in Los Gatos, California) that builds a unified Access Graph modeling identities (human, machine, third-party, and AI agents) and their effective permissions across identity providers, SaaS applications, cloud platforms, on-prem systems, data warehouses, and AI services. The platform computes effective permissions from real IAM policies and role inheritance rather than relying on directory data alone, and exposes this through search, graph visualization, the Veza Query Language, and an Open Authorization API (OAA) for long-tail custom integrations. Product surface is organized around three suites — Identity Security Posture Management (Visibility, Intelligence, Monitoring), Identity Governance & Administration (Reviews, Lifecycle Management, Requests, AuthZ, Separation of Duties), and Non-Human Identity and AI Agent Security — all anchored on the Access Graph and increasingly augmented by the Access AI natural-language layer and Veza Access Agents built on AWS Bedrock.

Veza serves approximately 150 large enterprise customers globally across financial services, hospitality, retail, technology, insurance, government, pharma, and nonprofit, including Blackstone, Snowflake, Workday, Sallie Mae, Choice Hotels, Wynn Resorts, City of Las Vegas, AMD, Eli Lilly, Intuit, Instacart, and KKR. The company monetizes through a quote-based enterprise SaaS subscription (SaaS End User Customer Agreement) with multi-year contracts, professional services for implementation, and an emerging channel partner program funded by The Syndicate Group; pricing is not publicly disclosed and sales motion is primarily direct enterprise field sales with demo-based conversion. Veza raised approximately $235M across multiple venture rounds (notably $110M in April 2022 led by Accel, $15M in August 2023 led by Capital One Ventures and ServiceNow Ventures, and a $108M round in April 2025 led by NEA) before being acquired by ServiceNow on March 2, 2026, in a deal reported at $1B–$1.5B, after which Veza's technology was integrated into ServiceNow's AI Control Tower and Autonomous Security & Risk product.

Name

Veza

Legal name

Veza Technologies, Inc.

Website

https://veza.com

Company type

Private

Founded year

2020

Operating status

Acquired

Headcount range

101–250 employees

Short description

Veza builds an identity security platform anchored on a unified Access Graph that models identities and effective permissions across cloud, SaaS, data, and AI systems, serving ~150 large enterprises across financial services, hospitality, tech, retail, and government, now part of ServiceNow following its 2026 acquisition.

Ownership category

akta.pro rank

Product category

Identity Security

NAICS

Computer Systems Design Services (541512), Custom Computer Programming Services (541511)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)

akta.pro secondary industries

Secure Access Service Edge (SASE) & SSE (HDADABAB), Decentralized Identity (DID) & Verifiable Credentials (BPAMAEAJ), Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

Keywords

• Identity security platform
• Identity governance administration
• Non-human identity security
• Privileged access management
• Data access governance

Headquarters

HQ city

Palo Alto

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations, Others

Revenue model

1. SaaS subscription: Veza sells a cloud-delivered identity-security SaaS (vezacloud.com) under a SaaS End User Customer Agreement; enterprise pricing is quote-based with multi-year contracts typical for the segment. Recurring revenue model with land-and-expand motion across use cases (ISPM, IGA, NHI, AI Agent Security).
2. Professional / deployment services: Implementation, integration, and ongoing support services associated with enterprise SaaS rollouts, including SOC2 Type II and security-controls documentation provided to customers.

Pricing tiers

Go-to-market motion4 records

Distribution channels6 records

Marketing channels10 records

Core offering

Veza provides a unified identity security SaaS platform anchored by its patented Access Graph data model, which models identities (human, machine, third-party, and AI agents), entitlements, and effective permissions across IdPs, SaaS, cloud, data systems, and AI services. The platform is sold as three suites — Identity Security Posture Management, Next-Gen IGA, and NHI & Agentic AI Identity Security — delivered as multi-year enterprise subscriptions with implementation services. Post-ServiceNow acquisition (closed March 2, 2026), the Access Graph is embedded into ServiceNow's AI Control Tower and sold as part of the Autonomous Security & Risk product.

Product overview

Veza offers a single unified Access Platform organized as a core platform plus modules, all built on its patented Access Graph data model. The Veza Platform anchors the offering with the Access Graph (the unified graph of identities, entitlements, policies, and resources across cloud, SaaS, data, and on-prem systems), the Open Authorization API (OAA) for long-tail integrations, and Veza Access Agents — purpose-built AI agents (built on AWS Bedrock) that automate identity and access governance. Around this core, the platform is delivered as three suites: Identity Security Posture Management (ISPM), comprising Access Visibility, Access Intelligence, and Access Monitoring; Identity Governance & Administration (IGA), comprising Access Reviews, Lifecycle Management, Access Requests, Access AuthZ, and Separation of Duties; and NHI & Agentic AI Identity Security, comprising Non-Human Identity (NHI) Security and AI Agent Security. AI capabilities are layered across the platform through Access AI (natural-language queries, risk explanations, and graph queries) and the Agentic AI Security product. Post-ServiceNow acquisition (closed March 2026), Veza's Access Graph technology is being combined with ServiceNow's AI Platform to deliver an Enterprise Agent Identity Control Plane for autonomous identity and threat defense.

Differentiator

Problem solved

Functional benefit

Products and services

• Veza Access Platform (Veza Platform) The unified Veza Access Platform brings together all identities (human, machine, third-party, and AI agents) across all systems (apps, data, on-prem to SaaS) for sophisticated access search, actionable intelligence, automated access reviews, and seamless identity lifecycle management, all anchored by the Access Graph. It is sold to enterprise customers under multi-year SaaS subscriptions.
• Veza Access Graph Patented graph-based data model that unifies identities and entitlements across people, machines, and third parties, from apps to data, on-prem to SaaS. Powers all Veza products by enabling 'who can take what action on what data' answers, path visualization, effective permission calculation, and historical snapshots. Mapped to over 30 billion fine-grained permissions in production.
• Access AI Generative AI capability (built on AWS Bedrock) that delivers instant visibility into enterprise-wide access through natural-language queries, explains risks in plain language, and helps reduce risk, simplify compliance, and enforce least privilege with confidence.
• Access Hub Self-service interface that gives managers and end users a single place to view and request access, driving Next Gen IGA usability at scale.
• Veza Access Agents (Prompt Agent, Access Search Agent, Access Review Agent) Suite of purpose-built AI agents that automate identity and access governance tasks, including conversational interfaces, visual permission mapping, decision support, and policy enforcement. Built on AWS Bedrock; Early Access with General Availability targeted for end of Q2 2026.
• Access Visibility Provides fast, comprehensive identity access visibility and search across the entire identity ecosystem — users, groups, roles, policies, permissions, and resources — to uncover dormant accounts, excessive privileges, access drift, non-human, and third-party access.
• Access Intelligence Delivers dashboards, queries, and rules to highlight excessive privileges, missing MFA, orphaned accounts, and segregation-of-duties violations, and to drive actionable insights and prioritization.
• Access Monitoring (Activity Monitoring) Uses audit logs from systems such as AWS, Snowflake, SharePoint, Entra ID, and BigQuery to find dormant and over-provisioned access and continuously monitor identity posture.
• Access Reviews Enforces least privilege and compliance with recertifications based on effective permissions, including customizable outlier detection, intelligent notifications, multi-level reviews, risk-based reviews, and Access AI explanations.
• Lifecycle Management Automates joiner/mover/leaver workflows with configurable actions, custom REST payload integrations, inline testing, custom email templates, workflow pause/disable controls, and enterprise integration expansion (MySQL, Oracle, PostgreSQL, AWS RDS, SCIM, PagerDuty, Splunk Enterprise).
• Access Requests Streamlines the request and approval process for access changes, integrated with Veza Access Hub and ServiceNow for enterprise-scale access request automation.
• Access AuthZ Provides automated authorization decisioning and least-privilege enforcement, moving from visibility to true least-privilege access automation.
• Separation of Duties (SoD) Detects toxic permission combinations and enables continuous, query-driven SoD rules evaluated against the access graph, with targeted reviews launched from findings.
• Non-Human Identity (NHI) Security Automatically discovers and governs non-human identities (service principals, automation accounts, application registrations, CI/CD pipelines, machine accounts) across integrations with built-in detection logic and custom enrichment rules, NHI overview metrics, and NHI-specific Access Reviews.
• AI Agent Security Provides visibility, governance, and compliance for third-party AI agents, LLMs, and AI infrastructure; integrates with major AI ecosystems (OpenAI, AWS Bedrock, Microsoft Co-Pilot, ServiceNow AI Agents); enables least privilege for AI models, APIs, and associated compute resources.
• Open Authorization API (OAA) Open API used to build OAA-based integrations that import identity and authorization data from custom or long-tail systems (e.g., Database Application integration, AWS IAM Role to OAA local user identity mapping).
• Stryker (Least Privilege Vulnerability Discovery for AD/Intune) Capability that allows security teams to identify least-privilege vulnerabilities in Microsoft AD and Intune environments and prevent device-wipe breaches by surfacing risky access through the Veza Access Platform.

Quantifiable outcome

• Genesys runs access reviews 3x faster with Veza
• +5 more outcomes

Named customers33 records

Segments9 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration24 records

AI capability10 records

Feature8 records

Partnerships

16 partnerships are on record, tiered acquirer / flagship partner, flagship infrastructure & integration, major hyperscaler integration, flagship idp integration, flagship data-cloud integration, major data-platform integration, major saas integration, flagship integration / post-acquisition, security ecosystem integration, developer-platform integration, ai platform integration, enterprise cloud / database integration, hr-system integration / customer, flagship ai build partner and core idp integration.

• ServiceNowacquirer / flagship partnerStrategic or Co-development PartnerAcquired Veza in March 2026 (deal value reported $1B–$1.5B). Veza's Access Graph is now embedded into ServiceNow's AI Control Tower and powers the Autonomous Security & Risk product (integrating Veza with Armis). ServiceNow also co-developed Veza integration with its ITSM/ServiceNow AI Agents workflow automation.
• Amazon Web Services (AWS)flagship infrastructure & integrationTechnology or IntegrationAWS is Veza's hosting and permitted sub-processor (us-east-2). Veza builds on AWS Bedrock for AI Access Agents and provides native AWS IAM, Bedrock Agent, AWS Bedrock AgentCore, and DocumentDB integrations.
• Microsoft Azuremajor hyperscaler integrationTechnology or IntegrationNative integration for Azure AD / Entra ID, Azure cloud resources, and AI services; supports enterprise-wide access governance for Microsoft-based identities.
• Google Cloudmajor hyperscaler integrationTechnology or IntegrationNative integration for Google Cloud IAM, Google Drive, and Google Cloud resources, used for cross-cloud access visibility.
• Oktaflagship idp integrationTechnology or IntegrationDeep integration with Okta for users, groups, and Okta Authorization Servers (OAuth/OIDC). Veza's discovery of Okta authorization servers, policies, scopes, and claims powers non-human identity visibility.
• Snowflakeflagship data-cloud integrationTechnology or IntegrationNative Snowflake integration for access governance on the Data Cloud. Snowflake's CISO is a public Veza customer and case-study participant.
• Databricksmajor data-platform integrationTechnology or IntegrationNative Databricks integration to govern data lake and ML-dataset access, supporting least privilege on unstructured data.
• Salesforcemajor saas integrationTechnology or IntegrationNative Salesforce integration including support for custom objects via CSV upload, enabling identity and entitlement visibility across Salesforce CRM.
• ServiceNow (ITSM / AI Platform)flagship integration / post-acquisitionTechnology or IntegrationPre-acquisition integration automated Veza access requests via ServiceNow ITSM; post-acquisition, Veza is embedded into ServiceNow AI Platform / AI Control Tower and extends access governance to ServiceNow AI Agents.
• Crowdstrikesecurity ecosystem integrationTechnology or IntegrationIntegration with Crowdstrike Falcon for security telemetry and identity-context enrichment.
• GitHubdeveloper-platform integrationTechnology or IntegrationNative GitHub integration to manage access to repositories, code, and CI/CD pipelines — relevant for non-human identity and developer access governance.
• OpenAIai platform integrationTechnology or IntegrationIntegration with OpenAI used by Veza for AI Agent Security and Access AI to govern AI agent and LLM access across enterprise environments.
• Oracleenterprise cloud / database integrationTechnology or IntegrationNative Oracle Cloud IAM, Oracle Database, and Oracle Applications integrations for cloud and on-prem identity governance.
• Workdayhr-system integration / customerTechnology or IntegrationIntegration with Workday for HR-driven identity lifecycle management; Workday's CISO is a public Veza customer advocate and case-study participant.
• Amazon Web Services (Bedrock)flagship ai build partnerStrategic or Co-development PartnerVeza Access Agents (Prompt Agent, Access Search Agent, Access Review Agent) are built on AWS Bedrock; Veza also extends AI Agent Security to Amazon Bedrock AgentCore.
• Microsoft (Active Directory / Entra ID)core idp integrationTechnology or IntegrationDeep integration with Microsoft Active Directory / Entra ID for directory, group, and user identity discovery and lifecycle management.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SailPoint: SailPoint is a leading identity governance and administration (IGA) platform that provides access certifications, provisioning, and identity security for enterprise users. It is the most direct competitor to Veza's IGA modules (Access Reviews, Lifecycle Management, Access Requests) and competes head-to-head for security-team and identity-team budgets.
• Saviynt: Saviynt is a cloud-native identity governance platform offering IGA, privileged access management, and cloud entitlement management. It competes with Veza across IGA, ISPM, and CIEM use cases and shares a similar enterprise SaaS GTM and target buyer (CISOs and identity leaders at large organizations).
• CyberArk: CyberArk is a public identity-security company specializing in privileged access management (PAM) and has expanded into CIEM and identity governance. It competes with Veza's Privileged Access Monitoring, ISPM, and NHI Security modules and targets the same large enterprise security buyers.
• Okta: Okta is a public identity platform offering workforce identity, customer identity, and increasingly identity governance (post-Auth0 and Okta IGA). It integrates deeply with Veza as an IdP, but also competes in adjacent IGA, lifecycle management, and access-request use cases against Veza's IGA suite.
• BeyondTrust: BeyondTrust is a private-equity-backed identity-security vendor offering privileged access management, vulnerability management, and remote-access security. It competes with Veza's PAM and ISPM modules for enterprise security buyers looking to consolidate identity and access tooling.
• One Identity (Quest Software): One Identity provides identity governance, privileged access management, and AD management under the Quest Software umbrella. It is a long-standing IGA/PAM competitor with deep enterprise installed base, comparable to Veza's IGA suite and broader identity-security portfolio.

Broad incumbents

• Microsoft (Entra ID / Azure AD): Microsoft Entra ID (formerly Azure AD) ships directory, SSO, and increasingly identity governance and CIEM capabilities bundled into the broader Microsoft security and Azure platform. It is a broad incumbent that overlaps with much of Veza's offering and is often the default identity layer enterprises extend before buying a point solution like Veza.

Emerging players

• ConductorOne: ConductorOne is an emerging identity-security platform focused on access requests, just-in-time access, and identity governance for cloud-first enterprises. It overlaps with Veza's IGA suite (Access Requests, Lifecycle Management, Access Reviews) for mid-market and cloud-native buyers.
• Opal Security: Opal Security is an emerging identity-security platform providing access requests, just-in-time access, and least-privilege enforcement for engineering and infrastructure teams. It competes with Veza's Access Requests and Lifecycle Management modules for developer-centric buyers.
• Wiz: Wiz is a fast-growing cloud security platform that has expanded from CNAPP into identity and entitlement analysis (CIEM). It is increasingly competitive with Veza's ISPM and Cloud Access Management modules for cloud-first enterprise buyers, particularly where cloud posture and identity are evaluated together.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/vezainc
• YouTubeyoutube.com/channel/UC1VLxpyPLUWKF9C1hVN1kcA
• LinkedInlinkedin.com/company/veza
• Facebookfacebook.com/vezainc

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds6 records

Investors17 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Veza