Veza

What the company sells

Veza provides a unified Access Platform that brings together identities across systems for access search, actionable intelligence, automated access reviews and identity lifecycle management. Veza unifies identities and entitlements across people, machines, and third parties, from apps to data, on-prem to SaaS. Veza maps an identity ecosystem across users, groups, roles, policies, permissions and resources to uncover dormant accounts, excessive privileges, access drift, and non-human and third-party access. Veza secures identities across on-prem, non-human identities (NHI), cloud-native, SaaS, and custom apps. Veza offers a unified access authorization platform that covers access governance, privilege access and access management across an entire environment.

Veza describes SaaS adoption as bringing security challenges, including a greatly expanded attack surface and the scale of governing access to so many SaaS apps. Veza says that migration to the cloud made access management harder, with many more identities and resources to manage. Veza describes itself as an authorization platform for identity-first security that is used to understand, manage and control who can and should take what action on what data. Veza says its authorization platform helps organizations understand, manage and control identity-to-data relationships for access governance, privileged access, cloud entitlement management and more.

Veza states that enterprises can enforce least privilege principles and enable Zero Trust with its platform. Veza provides a way to visualize and control data access across all systems, mitigating risks for both human and machine identities. Veza provides a way to understand and control access to unstructured data in data lakes, ML datasets, shared drives and cloud storage. Veza supports access reviews based on the effective permissions of identities, to enforce least privilege and compliance. Veza enables enterprise-wide access governance across all users, apps and systems, covering access reviews, lifecycle management, access requests and separation of duties.

Veza helps show who can do what across Amazon, Google, Azure and Oracle cloud environments. Veza surfaces varying access levels to subscriptions, resources and Azure data assets. Veza covers the permissions of all identities, including service accounts and other machine identities. Veza tracks permissions across SaaS applications, identities and accounts in real time. Veza covers least privilege and governance for AI models, APIs and compute resources across AWS Bedrock, OpenAI and Microsoft Co-Pilot. Access AI provides visibility into enterprise-wide access.

Veza detects overprivileged access, dormant accounts and toxic permission combinations. Veza provides audit-ready access reports and demonstrable controls for compliance with industry regulations and internal cyber controls. Veza helps data teams protect sensitive information and enforce least privilege across structured and unstructured data. Veza offers secure access to Snowflake environments, SharePoint repositories and traditional databases. Veza lets platform owners of apps, data and infra understand and manage which users have access to their systems. Veza states that its customers include organizations of all sizes.

Veza has earned SOC 2 and ISO 27001 certifications after recurring third-party audits. Veza states that it is compliant with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Veza engages independent third-party security experts to conduct regular audits and penetration tests of its systems.^{[1][7][8][9][10][11][12][13][14]}

Categories

• Identity governance and administration (primary category)
• Cloud identity entitlements (CIEM)
• Non-human identity security
• Compare Veza with companies in the same categoryside by side

Headquarters

Los Gatos, United States^[2]

Founded

2020^[2]

Ownership

Owned by ServiceNow since 2026^[3][4][6]

CISO on record

Not yet on our record. Send a verified source

Website

veza.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Access AI^[4][7]

  Provides visibility into enterprise-wide access.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Veza's categories, then alphabetical. A list from the record, never a ranking.

• On identity governance and administration, Veza competes with C1.ai, Orchid Security, SailPoint, Saviynt, One Identity, CyberArk, Delinea, Immuta, Cayosoft, RSA Security and 1 more.

• On cloud identity entitlements (ciem), Veza competes with Sonrai, Act Security, Britive and Cyscale.

• On non-human identity security, Veza competes with Aembit, Akeyless, Astrix Security, AuthMind, Clutch Security, Cygrid, Infisical, NewCore, Oasis Security, Token Security and 30 more.

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• February 25, 2026

  Veza introduced Veza Access Agents, a set of AI agents for identity and access governance tasks, as an expansion of the Veza Platform. Business Wire^[5]

• December 4, 2025

  Fortune reports ServiceNow's president saying the company's acquisition of Veza should give customers more confidence about deploying AI agents. Fortune^[6]

• December 2, 2025

  ServiceNow announced its intent to acquire Veza, an identity security company, as stated in a release dated December 2, 2025. Veza^[15]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]veza.comVeza · veza.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Veza strategic announcement servicenow capitaloneVeza · veza.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Veza servicenow the enterprise agent identity control planeVeza · veza.com · published March 2, 2026 · Tier A: the company, a regulator or a filing
4. [4]Veza - The Identity Security PlatformVeza · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
5. [5]Veza Introduces Native Access Agents to Secure the Modern AI-Driven Enterprise with Enterprise Agent Identity Control PlaneBusiness Wire · published February 25, 2026 · Tier A: the company, a regulator or a filing
6. [6]ServiceNow's purchase of identity management platform Veza explainedFortune · published December 4, 2025 · Tier B: trade or business press
7. [7]Veza - The Identity Security PlatformVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Demo: Veza for SaaS access security & governance - VezaVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Solution Brief - Veza for Azure - VezaVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Demo - Veza for data lake security - VezaVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Breaking down Veza, The Authorization Platform for Data, in 4 minutes - VezaVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Case Study: How Las Vegas secures data in a hybrid, multi-cloud environment - VezaVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
13. [13]Video - Google Ventures | Veza - why authorization matters, why now - VezaVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]Trust and Security - VezaVeza · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
15. [15]ServiceNow to expand Security portfolio with acquisition of Veza’s leadingAI-native identity security platform - VezaVeza · published December 2, 2025 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Veza? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.