CISO Tribune

Vendor comparison · 2 companies

Infisical vs Veza

Infisical sells an all-in-one platform to manage application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure. Veza provides a unified Access Platform that brings together identities across systems for access search, actionable intelligence, automated access reviews and identity lifecycle management. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Infisical
  • Veza
Infisical vs Veza: Products, Customers and Funding Compared
InfisicalInfisical sells an all-in-one platform to manage application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure.infisical.comVezaVeza provides a unified Access Platform that brings together identities across systems for access search, actionable intelligence, automated access reviews and identity lifecycle management.veza.com
What it sells
  • Secrets Management[1][3]Syncs, rotates and audits application credentials across every environment and workload.
  • Agent Vault[1][3]Agent Vault is billed per brokered request.
  • Access AI[4][7]Provides visibility into enterprise-wide access.
Categories
Headquarters
Not stated on its pagesLos Gatos, United States[2]
Founded
Not stated on its pages2020[2]
Ownership and funding
Privately held[2][4]Owned by ServiceNow since 2026[3][4][6]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • February 25, 2026Veza introduced Veza Access Agents, a set of AI agents for identity and access governance tasks, as an expansion of the Veza Platform.[5]
  • December 4, 2025Fortune reports ServiceNow's president saying the company's acquisition of Veza should give customers more confidence about deploying AI agents.[6]
  • December 2, 2025ServiceNow announced its intent to acquire Veza, an identity security company, as stated in a release dated December 2, 2025.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Infisical sells mainly to teams that manage credentials for applications and agents across cloud, on-prem, and AI infrastructure. Individuals and personal projects, and scaling teams with complex security needs, are named as audiences for Secrets Management plans. Large orgs needing SCIM, custom SLAs, and dedicated support are named as an audience for the plan with LDAP, SCIM, and approval workflows. Teams running internal PKI at small scale are named for the entry certificate offering, and organizations with existing PKI, device fleets, or compliance requirements for the offering priced per unit. Infisical offers Infisical Cloud in US and EU regions, and supported deployment in a customer's own infrastructure, including air-gapped.Veza states that its customers include organizations of all sizes. Veza addresses data teams that protect sensitive information and enforce least privilege across structured and unstructured data. Veza addresses platform owners of apps, data and infra who manage which users have access to their systems. Veza describes audit-ready access reports and demonstrable controls for compliance with industry regulations and internal cyber controls.
Last verified
October 28, 2026September 27, 2026

Where they overlap

  • Infisical and Veza are both filed under Non-human identity security.

Where they differ, field by field

  • Infisical's primary category is Non-human identity security; Veza's is Identity governance and administration.
  • Infisical is also filed under Machine identity and PKI and Privileged access management. Veza is also filed under Cloud identity entitlements (CIEM).
  • Infisical lists Secrets Management and Agent Vault. Veza lists Access AI.
  • Veza is headquartered in Los Gatos, United States.
  • Veza was founded in 2020.
  • Infisical is privately held. Veza is owned by ServiceNow, since 2026.

What it sells: Infisical

What Secrets Management does[1][3]
Can require reviews for sensitive changes and access requests before they reach production. Secrets Management is billed per identity, meaning human users plus machine identities.
What Agent Vault does[1][3]
Agent Vault is billed per brokered request. Every request an agent makes is routed through Infisical and logged. An agent only ever sees placeholders, and real secrets are attached at the proxy.

Questions about Infisical and Veza

What do Infisical and Veza sell?
Infisical sells Secrets Management and Agent Vault. Veza sells Access AI.
Are Infisical and Veza in the same category?
They share Non-human identity security. Infisical's primary category is Non-human identity security and Veza's is Identity governance and administration.
Where are Infisical and Veza headquartered?
Veza is headquartered in Los Gatos, United States.
When were Infisical and Veza founded?
Veza was founded in 2020.
Who owns Infisical and Veza?
Infisical is privately held. Veza is owned by ServiceNow, since 2026.
Who are Infisical and Veza sold to?
From its own pages, Infisical sells mainly to teams that manage credentials for applications and agents across cloud, on-prem, and AI infrastructure. Veza states that its customers include organizations of all sizes.
What have Infisical and Veza announced recently?
February 25, 2026: Veza introduced Veza Access Agents, a set of AI agents for identity and access governance tasks, as an expansion of the Veza Platform.

About Infisical

Infisical sells an all-in-one platform to manage application secrets, certificates, and privileged access across cloud, on-prem, and AI infrastructure. Infisical describes one platform, one identity model, and one place to audit every credential that applications and agents use. Infisical prices its four product lines separately, and a customer can buy one as a point solution or several to use Infisical as a platform. Infisical products each have an open-source core under the MIT license, free forever for those who self-host.[1][3]

Infisical syncs, rotates, and audits application credentials across every environment and workload. Infisical scopes access to secrets by environment, path, and identity with fine-grained RBAC. Infisical rotates credentials on a schedule and issues short-lived, on-demand secrets scoped to each request. Infisical can require reviews for sensitive changes and access requests before they reach production.

Infisical offers a plan for individuals and personal projects with 5 identities, unlimited projects, 3 environments, and 10 secret syncs. Infisical offers a plan for scaling teams with complex security needs that includes everything in Pro plus dynamic secrets, gateways, full secret rotation, custom roles, and temporary access. Infisical sells to large orgs needing SCIM, custom SLAs, and dedicated support, with a plan that includes everything in Advanced plus LDAP, SCIM, user groups, approval workflows, KMIP, external KMS and HSM, audit log streaming, sub-organizations, and a 99.99% SLA.[3]

Customers decide which tools and APIs each agent can reach, and everything else is blocked at the proxy. Infisical routes every request an agent makes through Infisical and logs it.[3]

Infisical stands up private CAs and automates the full certificate lifecycle. Infisical shows every CA and certificate across infrastructure, with alerts and expiry warnings. Infisical continuously discovers certificates already deployed across environments. Infisical issues and pushes certificates directly to AWS load balancers and other external systems automatically. Infisical sells to teams running internal PKI at small scale, with core internal CA and certificate management, ACME-compatible external CA integration, API and ACME enrollment, and a certificate dashboard. Infisical also sells to organizations with existing PKI, device fleets, or compliance requirements, with CAs and active certificates priced per unit and unlimited SANs per certificate. Infisical offers wildcard SANs, externally-signed intermediate CAs, Microsoft AD CS, and EST enrollment to those organizations.[1][3]

Infisical replaces standing admin credentials with short-lived, identity-based sessions. Infisical sessions are fully audited across infrastructure, databases, and sensitive systems. Infisical lets users launch into databases and infra from the browser. Infisical offers a plan for teams needing access control and session auditing, with up to 50 accounts, access requests, approval workflows, credential rotation, SSH certificate auth, and command blocking.[3]

Infisical Cloud runs in US and EU regions, and the MIT-licensed core is self-hostable at no cost on any plan. Infisical plans include unlimited projects, two-factor authentication, secret sharing, community support, pay by card, and annual billing. Infisical offers licensed, supported deployment in a customer's own infrastructure, including air-gapped. Infisical states that it is SOC 2, HIPAA, and FIPS 140-3 compliant.[3]

Infisical supports SSO through SAML and OIDC with Okta, Entra ID / Azure AD, Google, JumpCloud, Keycloak, Auth0, PingOne, and general OIDC. Infisical supports SCIM provisioning for automatic user provisioning and deprovisioning from an IdP. Infisical can push audit events to an external SIEM, including non-HTTP providers via Fluent Bit. Infisical supports AWS KMS, GCP KMS, AWS CloudHSM, and PKCS#11 HSMs so root key material stays in the customer's infrastructure. Infisical can be used to manage secrets in cloud, infra tools, frameworks, and more.[1][3]

Infisical on the record

Sources

Infisical full record

  1. [1]infisical.comInfisical · infisical.com · undated page, accessed October 28, 2026 · Tier A
  2. [2]Infisical | The modern security platform for developers and agentsInfisical · undated page, accessed November 10, 2026 · Tier A
  3. [3]Infisical pricingInfisical · undated page, accessed November 10, 2026 · Tier A
  4. [4]Infisical Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Veza full record

  1. [1]veza.comVeza · veza.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Veza strategic announcement servicenow capitaloneVeza · veza.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Veza servicenow the enterprise agent identity control planeVeza · veza.com · published March 2, 2026 · Tier A
  4. [4]Veza - The Identity Security PlatformVeza · undated page, accessed October 30, 2026 · Tier A
  5. [5]Veza Introduces Native Access Agents to Secure the Modern AI-Driven Enterprise with Enterprise Agent Identity Control PlaneBusiness Wire · published February 25, 2026 · Tier A
  6. [6]ServiceNow's purchase of identity management platform Veza explainedFortune · published December 4, 2025 · Tier B
  7. [7]Veza - The Identity Security PlatformVeza · undated page, accessed November 10, 2026 · Tier A
  8. [8]Demo: Veza for SaaS access security & governance - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  9. [9]Solution Brief - Veza for Azure - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  10. [10]Demo - Veza for data lake security - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  11. [11]Breaking down Veza, The Authorization Platform for Data, in 4 minutes - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  12. [12]Case Study: How Las Vegas secures data in a hybrid, multi-cloud environment - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  13. [13]Video - Google Ventures | Veza - why authorization matters, why now - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  14. [14]Trust and Security - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  15. [15]ServiceNow to expand Security portfolio with acquisition of Veza’s leadingAI-native identity security platform - VezaVeza · published December 2, 2025 · Tier A

Spot a factual error? Request a correction.