CISO Tribune

Vendor comparison · 2 companies

RSA Security vs Veza

RSA Security sells identity and access management products, including RSA ID Plus, which includes SSO, MFA and directory services across cloud, hybrid and on-premises environments. Veza provides a unified Access Platform that brings together identities across systems for access search, actionable intelligence, automated access reviews and identity lifecycle management. CISO Tribune files both under Identity governance and administration. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • RSA Security
  • Veza
RSA Security vs Veza: Products, Customers and Funding Compared
RSA SecurityRSA Security sells identity and access management products, including RSA ID Plus, which includes SSO, MFA and directory services across cloud, hybrid and on-premises environments.rsa.comVezaVeza provides a unified Access Platform that brings together identities across systems for access search, actionable intelligence, automated access reviews and identity lifecycle management.veza.com
What it sells
  • RSA Agent ID[1][7][10]An agentic AI security platform for government, financial services and other highly-regulated organizations.
  • RSA ID Plus[1][2][7]An identity and access management platform that includes SSO, MFA and directory services.
  • Governance & Lifecycle[1][2][4][8]An identity governance and administration (IGA) offering from RSA.
  • Access AI[4][7]Provides visibility into enterprise-wide access.
Categories
Headquarters
Not stated on its pagesLos Gatos, United States[2]
Founded
Not stated on its pages2020[2]
Ownership and funding
Not stated on its pagesOwned by ServiceNow since 2026[3][4][6]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 29, 2026RSA announced RSA Agent ID, an agentic identity security platform for highly regulated industries, at The AI Conference in San Francisco.[10]
  • February 25, 2026Veza introduced Veza Access Agents, a set of AI agents for identity and access governance tasks, as an expansion of the Veza Platform.[5]
  • December 4, 2025Fortune reports ServiceNow's president saying the company's acquisition of Veza should give customers more confidence about deploying AI agents.[6]
  • December 2, 2025ServiceNow announced its intent to acquire Veza, an identity security company, as stated in a release dated December 2, 2025.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[11]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
RSA Security says it designs its identity solutions for finance, government and high-assurance organizations, and RSA Agent ID is aimed at highly-regulated organizations. RSA Security names federal, state and local agencies among the customers it helps with Zero Trust mandates. RSA Security offers phishing-resistant authentication, help desk identity verification and access governance to financial services organizations. RSA Security describes its identity capabilities as working across cloud, hybrid and on-premises environments.Veza states that its customers include organizations of all sizes. Veza addresses data teams that protect sensitive information and enforce least privilege across structured and unstructured data. Veza addresses platform owners of apps, data and infra who manage which users have access to their systems. Veza describes audit-ready access reports and demonstrable controls for compliance with industry regulations and internal cyber controls.
Last verified
October 26, 2026September 27, 2026

Where they overlap

  • RSA Security and Veza are both filed under Identity governance and administration.

Where they differ, field by field

  • RSA Security's primary category is Workforce IAM and SSO; Veza's is Identity governance and administration.
  • RSA Security is also filed under Passwordless authentication and authenticators. Veza is also filed under Cloud identity entitlements (CIEM) and Non-human identity security.
  • RSA Security lists RSA Agent ID, RSA ID Plus and Governance & Lifecycle. Veza lists Access AI.
  • Veza is headquartered in Los Gatos, United States.
  • Veza was founded in 2020.
  • Veza is owned by ServiceNow, since 2026.

What it sells: RSA Security

What RSA Agent ID does[1][7][10]
RSA Agent ID discovers AI agents and MCP servers, assigns each one an accountable human owner, and enforces policy on every call through an AI/MCP Gateway. RSA Agent ID records audit evidence of every agent action. Gateways can be RSA-hosted or customer-hosted in cloud, hybrid or on-premises environments.
What RSA ID Plus does[1][2][7]
RSA ID Plus is an identity and access management platform that includes SSO, MFA and directory services. RSA ID Plus runs across cloud, hybrid and on-premises environments. RSA Agent ID integrates with RSA ID Plus.
What Governance & Lifecycle does[1][2][4][8]
RSA Governance & Lifecycle is an identity governance and administration (IGA) offering. Sorenson uses RSA Governance & Lifecycle to move beyond MFA to passwordless across cloud, hybrid, and on-premises environments. RSA explains how to submit a ticket for technical problems with RSA Governance & Lifecycle.

Questions about RSA Security and Veza

What do RSA Security and Veza sell?
RSA Security sells RSA Agent ID, RSA ID Plus and Governance & Lifecycle. Veza sells Access AI.
Are RSA Security and Veza in the same category?
They share Identity governance and administration. RSA Security's primary category is Workforce IAM and SSO and Veza's is Identity governance and administration.
Where are RSA Security and Veza headquartered?
Veza is headquartered in Los Gatos, United States.
When were RSA Security and Veza founded?
Veza was founded in 2020.
Who owns RSA Security and Veza?
Veza is owned by ServiceNow, since 2026.
Who are RSA Security and Veza sold to?
RSA Security says it designs its identity solutions for finance, government and high-assurance organizations, and RSA Agent ID is aimed at highly-regulated organizations. Veza states that its customers include organizations of all sizes.
What have RSA Security and Veza announced recently?
September 29, 2026: RSA announced RSA Agent ID, an agentic identity security platform for highly regulated industries, at The AI Conference in San Francisco. February 25, 2026: Veza introduced Veza Access Agents, a set of AI agents for identity and access governance tasks, as an expansion of the Veza Platform.

About RSA Security

RSA Security sells identity and access management products, including RSA ID Plus, which includes SSO, MFA and directory services across cloud, hybrid and on-premises environments. RSA Security designs its identity solutions for finance, government and high-assurance organizations. RSA provides passwordless solutions and authentication form factors that include FIDO2, biometrics and hardware tokens. RSA Unified Identity Platform is an AI-powered platform from RSA.[1][2][3]

RSA Governance & Lifecycle is an identity governance and administration (IGA) offering. RSA provides IGA capabilities to secure access and enforce policy across environments. Sorenson uses RSA Governance & Lifecycle to move beyond MFA to passwordless across cloud, hybrid, and on-premises environments. RSA ISPM gives organizations visibility into identity risks and automates governance. RSA offers the RSA iShield Key 2.[1][2][3][4]

RSA MFA requires users to verify identity through additional methods such as a passcode, biometric or hardware authenticator. RSA uses machine learning, device matching, behavioral analytics and anomaly detection for automated access decisions that assess risk in real time. Risk-based authentication works with SSO and steps up authentication factors only if the level of risk exceeds what the organization has defined. Policy-based access decisions are possible through the integration of SSO and identity governance. Multi-factor authentication can be used with SSO to require additional factors of authentication when the level of risk warrants it. RSA extends Microsoft Entra with phishing-resistant passwordless, hybrid failover and identity visibility across every environment.[4][5]

RSA lets administrators define trusted locations that determine who can access applications and which assurance level applies to additional authentication. By default, RSA collects location data from users using HTML5 geolocation.[6]

RSA Agent ID is an agentic AI security platform for government, financial services, and other highly-regulated organizations. RSA Agent ID discovers AI agents and MCP servers, assigns each one an accountable human owner, enforces policy on every call through an AI/MCP Gateway, and records audit evidence of every agent action. RSA Agent ID Discover correlates multiple discovery signals to find sanctioned and unsanctioned agents and MCP servers. RSA Agent ID Discover registers each one with a named owner, risk tier and lifecycle state tied to the identity provider. The Model Context Protocol (MCP) is an open standard that lets AI agents call external tools and data sources.[1][7]

RSA Agent ID gateways can be RSA-hosted or customer-hosted in cloud, hybrid or on-premises environments. A fully air-gapped, self-managed version of the RSA Agent ID gateway is coming in 2027. Tenant data for RSA Agent ID stays in the region the customer selects, United States or EMEA. RSA Agent ID integrates with RSA ID Plus, Microsoft Entra ID, Okta, AWS IAM, CrowdStrike, Microsoft Defender, and more today. RSA Agent ID maps evidence to ten major frameworks and sends it to a SIEM. Continuous certification, risk-based access reviews and lifecycle automation arrive with Govern in early 2027.[7]

RSA helps federal, state and local agencies meet Zero Trust mandates with FedRAMP-authorized identity solutions. For financial services organizations, RSA unifies phishing-resistant authentication, help desk identity verification and access governance. RSA offers Customer Support, Professional Services, Education Services and Customer Success. RSA support covers submitting tickets for technical problems with ID Plus, SecurID and RSA Governance & Lifecycle. RSA Security LLC and its affiliates distribute RSA Security Advisories to bring important security information to users of affected RSA products.[4][7][8][9]

RSA Security on the record

Sources

RSA Security full record

  1. [1]rsa.comRSA Security · rsa.com · undated page, accessed October 26, 2026 · Tier A
  2. [2]RSA Security: Identity & Access Management SolutionsRSA Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]RSA Tokens & Authenticators for Identity Security TeamsRSA Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]IAM Solutions: SSO, MFA, Governance & Passwordless | RSARSA Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]SSO: Single Sign-On Identity Access Solutions | RSARSA Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Add or Delete a Trusted Location | RSA CommunityRSA Community · undated page, accessed November 10, 2026 · Tier A
  7. [7]RSA Agent ID: The agentic identity security platform for highly-regulated industriesRSA Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Services Overview - RSARSA Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]RSA-2026-18: RSA Security Update for PHP Vulnerabilities | RSA CommunityRSA Community · undated page, accessed November 10, 2026 · Tier A
  10. [10]Hope Isn’t an AI Strategy: RSA Agent ID Closes the Agentic Identity Gap for Highly Regulated IndustriesRSA · published September 29, 2026 · Tier A
  11. [11]RSA Services Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Veza full record

  1. [1]veza.comVeza · veza.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Veza strategic announcement servicenow capitaloneVeza · veza.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Veza servicenow the enterprise agent identity control planeVeza · veza.com · published March 2, 2026 · Tier A
  4. [4]Veza - The Identity Security PlatformVeza · undated page, accessed October 30, 2026 · Tier A
  5. [5]Veza Introduces Native Access Agents to Secure the Modern AI-Driven Enterprise with Enterprise Agent Identity Control PlaneBusiness Wire · published February 25, 2026 · Tier A
  6. [6]ServiceNow's purchase of identity management platform Veza explainedFortune · published December 4, 2025 · Tier B
  7. [7]Veza - The Identity Security PlatformVeza · undated page, accessed November 10, 2026 · Tier A
  8. [8]Demo: Veza for SaaS access security & governance - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  9. [9]Solution Brief - Veza for Azure - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  10. [10]Demo - Veza for data lake security - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  11. [11]Breaking down Veza, The Authorization Platform for Data, in 4 minutes - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  12. [12]Case Study: How Las Vegas secures data in a hybrid, multi-cloud environment - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  13. [13]Video - Google Ventures | Veza - why authorization matters, why now - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  14. [14]Trust and Security - VezaVeza · undated page, accessed November 10, 2026 · Tier A
  15. [15]ServiceNow to expand Security portfolio with acquisition of Veza’s leadingAI-native identity security platform - VezaVeza · published December 2, 2025 · Tier A

Spot a factual error? Request a correction.