Listing Thumbnail

    Veza - Access Platform

     Info
    Sold by: Veza 
    Deployed on AWS
    Veza helps enterprises secure human and non-human identities, govern access across SaaS, cloud, and AI systems, enforce least privilege, and automate compliance, delivering real-time intelligence on who can take what action on what data.
    3.9

    Overview

    Play video

    Veza is the modern Identity Security Platform, helping organizations secure access to critical systems, SaaS apps, AI workloads, and data systems by answering the most essential identity question: Who can take what action on what data?

    From SaaS apps to AI agents, Veza delivers near real-time access intelligence, enforces least privilege, and automates governance across both human and non-human identities.

    Recognized as a Leader in GigaOm's 2025 Radar for Identity Security Posture Management (ISPM) and featured in Gartner's 2025 Hype Cycle as a key player in the emerging Identity Visibility and Intelligence Platform (IVIP) category, Veza is redefining identity security for the modern enterprise.

    Organizations choose Veza for comprehensive visibility that unifies access data across AWS, Azure, GCP, Okta, Active Directory, Snowflake, Oracle, Salesforce, and more. They rely on Veza to detect toxic combinations, reduce permissions sprawl, and enforce access policies across cloud and SaaS environments. Veza enables automated user access reviews and delivers audit-ready reporting for SOX, HIPAA, PCI, and other regulatory requirements. It helps security teams discover and secure service accounts, secrets, automations, and AI agents, while also governing access for AI models and pipelines to ensure only the right identities can invoke, train, or deploy AI systems. The platform delivers real-time intelligence on who has access to what, enabling risk-informed decisions and faster incident response.

    Global enterprises such as Blackstone, Wynn Resorts, Sallie Mae, and Crocs trust Veza to reduce identity risk and limit the blast radius of breaches caused by over-permissioning. They replace manual access reviews with automated, policy-driven processes, gain visibility into hidden entitlements across SaaS, cloud, disconnected applications, and modern AI workloads, and align security programs with Zero Trust and modern compliance frameworks.

    Available on AWS Marketplace, Veza streamlines procurement, simplifies budgeting, and accelerates time-to-value, helping enterprises protect what matters most by securing who has access to what across their environments.

    Highlights

    • Unify and visualize identity and entitlement data across AWS, Azure, GCP, SaaS, AI systems, and on-premises apps to see exactly who can take what action on what data.
    • Automate user access reviews, enforce least privilege, and reduce permissions sprawl for both human and non-human identities, including service accounts and AI agents.
    • Accelerate compliance and security programs with audit-ready reporting for SOX, HIPAA, PCI, and more, while aligning to Zero Trust and modern identity security frameworks.

    Details

    Sold by

    Categories

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Veza - Access Platform

     Info
    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    12-month contract (2)

     Info
    Dimension
    Description
    Cost/12 months
    Platform
    Authorization Platform - 1.5K Identities; 5 Connectors
    $100,000.00
    Platform + Workflows
    Authorization Platform + Workflows - 1.5K Identities; 5 Connectors
    $150,000.00

    AI Insights

     Info

    Dimensions summary

    You choose between two contract options, both sized the same way: coverage for 1,500 identities and 5 connectors. The base option covers the Authorization Platform, which visualizes and analyzes who can access what across your systems. The second option adds Workflows on top of that same platform, bringing automation for tasks like access provisioning and deprovisioning. Pricing scales by identity count and connector count, so both options share the same capacity units. The difference is scope: platform-only versus platform plus workflow automation. Pick based on whether you need automated access actions beyond visibility.

    Top-of-mind questions for buyers

    An identity is any human or machine account Veza tracks, including users, service accounts, keys, and AI agents. A connector is one integration to a system like a directory, cloud platform, database, or SaaS application. Both options cap you at 1,500 identities and 5 connectors.
    The base Platform covers access visibility and analysis of who can access what. Platform + Workflows adds automation for provisioning and deprovisioning access as users join, change roles, or leave. It can grant and revoke access automatically and simulate changes before applying them.
    Both contract options are sized at 1,500 identities and 5 connectors. Cost scales with those two capacity units. Growing beyond the included counts requires a larger contract sizing. Contact Veza to arrange coverage matched to your identity and connector needs.
    www.veza.com+2
    Helpful?

    Vendor refund policy

    Contact Veza sales for details (sales@veza.com )

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    50
    In Monitoring

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    1 reviews
    Insufficient data
    Insufficient data
    Insufficient data
    Insufficient data
    13 reviews
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Multi-Cloud and SaaS Identity Integration
    Unifies and visualizes identity and entitlement data across AWS, Azure, GCP, Okta, Active Directory, Snowflake, Oracle, Salesforce, and additional cloud and SaaS platforms.
    Least Privilege Enforcement and Permissions Management
    Enforces least privilege access policies and reduces permissions sprawl across cloud and SaaS environments for both human and non-human identities.
    Non-Human Identity and AI Workload Governance
    Discovers, secures, and governs service accounts, secrets, automations, and AI agents, with capability to control access for AI models and pipelines to ensure only authorized identities can invoke, train, or deploy AI systems.
    Automated Access Reviews and Policy-Driven Governance
    Automates user access reviews and replaces manual processes with policy-driven access governance across cloud, SaaS, and disconnected applications.
    Compliance Reporting and Audit Automation
    Delivers audit-ready reporting for regulatory requirements including SOX, HIPAA, and PCI, with alignment to Zero Trust and modern compliance frameworks.
    Just-in-Time Access Provisioning
    Automated provisioning and revocation of privileged access granted only when needed and revoked immediately after use, eliminating standing privileges across cloud, SaaS, and on-premises environments.
    Multi-Environment Integration
    Native integrations with cloud providers (AWS), SaaS applications, and on-premises systems using IdPs, custom APIs, and webhooks with ephemeral authentication techniques.
    Continuous Identity Monitoring and Policy Enforcement
    Continuous monitoring of external identity sources to detect changes in user roles, group membership, and risk posture, enabling automated policy enforcement triggered by user requests, identity-based signals, or pre-defined schedules.
    Comprehensive Audit and Compliance Logging
    Real-time user access reviews, dynamic permission graph construction, time-bound access logging, and full auditability with signed audit logs aligned with NIST, CIS, and ISO compliance mandates.
    Automated Access Request Workflows
    Self-service permission management with bundled permission sets for commonly used privileges and automated access request workflows supporting least privilege access controls.
    Identity and Access Discovery
    Unified view of all identity access across applications and workloads including servers, storage, and databases running on AWS
    Access Provisioning Automation
    AI-driven workflows for automating AWS access provisioning with continuous monitoring for inappropriate, unauthorized, and unused access
    Access Governance and Certification
    Simplified AWS access certifications with historical data reporting for auditing and compliance
    Multi-Identity Management
    Management and security of human identities, non-employee identities, and machine identities across the enterprise
    AI-Powered Anomaly Detection
    AI agents and generative AI capabilities for detecting and addressing access anomalies and preventing evolving threats

    Contract

     Info
    Standard contract
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    3.9
    3 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    100%
    0%
    0%
    0%
    2 AWS reviews
    |
    1 external reviews
    External reviews are from PeerSpot .
    Guddeti Srikanth

    Identity visibility has improved and access governance supports least-privilege decisions

    Reviewed on Oct 22, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for Veza is identity security and access management, particularly gaining visibility into who has access to critical systems, applications, cloud environments, and our sensitive data. It helps my organization understand and manage access permissions across complex IT environments, making it easier to identify excessive privileges, detect potential access risk, and support security and compliance initiatives.

    For example, when reviewing access to a cloud-based application or a sensitive business system, Veza helped security teams determine which users, service accounts, and other identities have permissions to access specific resources. This visibility made it easier to identify unnecessary access, investigate potentially risky permissions, and work with the appropriate teams to ensure that access aligns with each person's responsibility.

    How has it helped my organization?

    Veza has positively impacted my organization by mainly improving visibility into identity access, streamlining access reviews, and helping us identify potential security risks more efficiently. One of the main benefits is having a clear understanding of which users, service accounts, and other identities can access critical applications, infrastructure, and sensitive data. This visibility helps our security team and IT teams to identify excessive permissions, investigate access-related risk, and make better-informed decisions about granting or removing access.

    During an access review, Veza helped us understand whether employee or service accounts had permissions beyond what they need to perform their responsibilities and allowed us to prioritize unnecessary access for remediation.

    What is most valuable?

    Veza offers valuable features including identity security visibility, access intelligence, permissions analysis, and identity-centric access governance capabilities.

    One of its strongest features is the ability to provide a clearer picture of who has access to critical applications, cloud platforms, infrastructure, and sensitive data. I consider this particularly valuable because my organization often operates across multiple environments, making it difficult to understand the full scope of access permissions using traditional identity management tools alone.

    Another important feature is its support for access reviews and governance, making access information easier to understand. Veza helps the team review permissions, validate whether access is appropriate for each user responsibility, and support the principle of least privilege.

    I consider Veza's AI-related capabilities and identity access intelligence valuable because they help improve the accuracy and reliability of security analysis, particularly when understanding complex permissions and identifying potential access risk.

    What needs improvement?

    I wouldn't say major drawbacks, but there are a few minor challenges and limitations to consider. Veza provides significant value for identity security and access governance, but one of the main challenges is the initial implementation and integration process, particularly in organizations with complex environments, multiple cloud platforms, and a larger number of applications.

    Connecting different systems and ensuring that identity and permissions data is collected accurately required careful planning, technical coordination, and collaboration between security, IT, and application teams.

    Regarding its governance and security, my experience has not been very comprehensive, but the security approach is valuable because the AI-driven security insights need to operate with a clearer framework of access control, accountability, and data protection.

    For how long have I used the solution?

    I have been using Veza for the past three years.

    What do I think about the stability of the solution?

    We've experienced very minimal downtime or performance issues, so it has been very stable in handling and managing access visibility and governance.

    What do I think about the scalability of the solution?

    Veza's scalability is an important strength for my organization because it helps us manage identity security across growing cloud environments, multiple applications, and increasingly complex access permissions.

    How are customer service and support?

    My overall experience with the support team has been very positive and it's an important part of getting value from the platform, particularly because identity security integration can involve complex permissions, cloud configuration, and access relationships that require technical understanding. The support team resolved issues on time.

    I would rate the customer support eight out of ten.

    Which solution did I use previously and why did I switch?

    We never switched from any previous platform.

    How was the initial setup?

    Deploying Veza in our AWS environment was relatively straightforward, although it required some initial planning and coordination to ensure that the necessary integrations and permissions were configured correctly.

    My experience with Veza's configuration process in our AWS environment was generally positive because the process required some initial planning and technical coordination, but it was manageable and provided a good foundation for improving identity security and access governance.

    For the integration part, Veza integrates effectively with our AWS environment by helping to provide visibility into identities, permissions, and access relationships across cloud resources.

    What was our ROI?

    We've seen a positive return on investment from Veza, particularly through improved identity visibility, more efficient access reviews, and reduced manual effort in identifying and investigating excessive permissions. One of the main benefits is that our security and IT teams have been able to gain a clearer understanding of who has access to critical applications, cloud resources, and sensitive data without relying entirely on time-consuming manual checks across separate systems. This has helped us streamline access governance and allowed our team to focus more attention on investigating meaningful security risks and resolving access issues more quickly.

    What's my experience with pricing, setup cost, and licensing?

    My experience with Veza's procurement process was very positive and relatively straightforward, although it required some internal coordination to ensure that the solution aligned with our organization's security requirements, technical environment, and budget.

    My overall view of Veza's metering and billing experience is that it's an important part of evaluating the platform's long-term value, particularly for my organization managing complex identity environments across AWS and other enterprise systems.

    My experience with Veza's pricing and licensing is best described as a value-focused evaluation with the main consideration being whether the platform's identity security capabilities justify the overall investment.

    Which other solutions did I evaluate?

    Before choosing Veza, we considered the capability of existing AWS security tools and other identity security and access governance solutions.

    What other advice do I have?

    My experience has been very positive overall, and I would rate Veza four out of five. I choose four because it provides valuable visibility into our identity permissions and helps us streamline access reviews, supports compliance efforts, and enables our security teams to identify and address excessive access more effectively.

    My advice to any organization considering purchasing Veza is to begin by clearly defining identity security and access governance objectives, then evaluate how the platform can address their specific challenges. Veza is particularly worth evaluating for an organization that needs better visibility into effective permissions across AWS, cloud infrastructure, SaaS applications, and other connected systems.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    HarshalJethwa

    Centralized access control has strengthened least privilege and streamlined audit compliance

    Reviewed on Apr 20, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for Veza is to use it for authentication and to determine who can access what and what can be accessed by the system or organization users. We set permissions for cloud platforms across the organization to our database and other tools using Veza, managing who can access the data, what they can access such as user roles and resource permissions.

    What is most valuable?

    The best features Veza offers in my experience are access visibility to see who can access what and which parts, relationship mapping of a user to roles, policies and resources, and risk detection such as over-permission and unused permission privileges. I can perform audit compliance using those features and the platform supports multiple platforms.

    Out of those features, I find risk detection to be the most valuable in my day-to-day work because I can check who has over-permission or unused permissions and understand relationship mapping and access visibility.

    Veza has positively impacted my organization by improving access for our users, allowing us to check the user and perform auditing for our system or organization. We are now able to implement least privilege practices, which has made our organization and system more secure.

    What needs improvement?

    Veza can be improved as it is currently not suitable for small projects due to its high cost, complex setup, and requirement for more integration with multiple systems. Additionally, there are no enforcement tools available, only visibility and insights, which I would like to see improved.

    For how long have I used the solution?

    I have been using Veza for six to seven months.

    What do I think about the stability of the solution?

    In my experience, Veza is stable.

    What do I think about the scalability of the solution?

    Veza's scalability is good.

    How are customer service and support?

    The customer support is good.

    Which solution did I use previously and why did I switch?

    We have not previously used a different solution.

    What was our ROI?

    I have seen a return on investment as fewer employees are needed because we are now able to manage access using Veza, which has made our work easier.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing is that the pricing is much higher and the setup is very complex.

    Which other solutions did I evaluate?

    Before choosing Veza, we decided to evaluate other options but selected Veza because of the ratings and reviews.

    What other advice do I have?

    My advice to others looking into using Veza is that if they want to manage their system organization's access and policies, perform mapping from user to policy and resource, detect the risk for users' over-permissions and unused permissions, and audit multiple supported platforms, they should consider using it. I would rate this product an 8 out of 10.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Brooke Lynne Bowman

    Streamlined compliance process with custom control framework and AI-driven security questionnaire management

    Reviewed on Oct 23, 2024
    Review provided by PeerSpot

    What is our primary use case?

    We are currently in the implementation stages of Vanta. It's been challenging to build out as it is not as intuitive as OneTrust, especially in terms of scoping and needs.

    How has it helped my organization?

    Vanta has made the security questionnaire process much easier, thanks to AI. It automatically extracts answers and populates them within the SIG.

    The custom control framework allows me to incorporate our HITRUST controls and additional ISO twenty-seven thousand and one and financial controls.

    Moreover, it includes a knowledge bank for questionnaires and RFPs, making information updates more streamlined.

    What is most valuable?

    The most valuable features of Vanta are the custom framework option and the support services. It's the only current GRC vendor with licensing rights for HITRUST 11.3 framework, and I've avoided expensive HITRUST licensing costs through a custom control framework.

    What needs improvement?

    The support experience could be better. We often need to escalate our issues to the account executive to receive a response, especially when support is needed for integrations.

    For how long have I used the solution?

    We started using Vanta about three months ago.

    What do I think about the stability of the solution?

    So far, I would rate the stability of the product as ten out of ten, with no issues in that regard.

    What do I think about the scalability of the solution?

    In terms of scalability, I would rate it better than OneTrust, giving it an eight out of ten. It accommodates small, lean teams or larger public organizations, providing a holistic view of compliance without being limited by capacity.

    How are customer service and support?

    Although I've read that others have had issues with Vanta's support, our experience involves having to escalate matters to our account executive to get a response.

    The support team itself has been less responsive, which can be problematic when integrating and building out the platform.

    What's my experience with pricing, setup cost, and licensing?

    The overall price point of Vanta is commendable, especially considering the custom control framework that allows me to evade the high costs associated with HITRUST licensing.

    What other advice do I have?

    The test feature of Vanta is great, making it a recommendable product to others.

    I'd rate the solution eight out of ten.

    View all reviews