nira

Name: nira
Brand: nira
Rating: 4.7 (37 reviews)

Protect company documents from unauthorized access.

Est 2018|Valuation $59.2M|Raised $24.2M|23 Ref Customers

LinkedIn 2K|Website|Web traffic 16K|FTEs 18|HQ San Francisco, California, US

MarketsData Security Platforms

Published Oct 15, 2026

01Common complaints

If you need fully transparent pricing and self-serve checkout
- Nira’s pricing is not publicly posted in the sources reviewed; buyers who require price-list transparency may prefer alternatives with published tiers.
If your problem is primarily sensitive-data discovery/classification at scale across cloud infrastructure
- DSPM tools (e.g., Sentra/Cyera) or governance platforms (BigID) may be better aligned if the core need is discovering and classifying sensitive data across many data stores (not just Drive/M365).
If you need deep threat detection, UEBA-style analytics, and broad coverage across on-prem + cloud data stores
- Varonis is frequently positioned (including by practitioners) as more mature for real-time data access monitoring and threat detection, albeit often more expensive and complex.
If you want a single collaboration/content platform rather than a governance overlay
- Egnyte (or other content platforms) may be a better architecture if you’re also trying to consolidate storage, collaboration, and governance.
If enterprise identity lifecycle automation (SCIM) is a hard requirement
- SCIM support for Nira was not confirmed in the sources reviewed; buyers who require SCIM should validate before shortlisting.
Current limitations acknowledged by the vendor (from accessible sources)
- Pricing/packaging not formally posted publicly (acknowledged indirectly by co-founder on Reddit).
Features on the roadmap
- Nira marketing suggests “more integrations coming,” but specific roadmap commitments and dates are not provided in the sources reviewed.
Scale limitations
- Nira claims to support “many millions of cloud documents.” Practical scale limits (API quotas, scanning frequency, latency) are not documented in the sources reviewed and should be validated in a technical evaluation.
Security or compliance gaps
- ISO 27017/27018 are not mentioned in the sources reviewed.
- Data residency appears US-based in the vendor statement; non-US residency options not described.
API limitations or integration constraints
- Because Nira is API-based, customers should validate:
  - How it handles Google/Microsoft API rate limits
  - How frequently it can rescan/refresh permission state
  - Whether it stores file metadata, content, or only access metadata
  - Exact coverage across Shared Drives, SharePoint sites, OneDrive, Teams/Slack, Dropbox team folders

- If you need fully transparent pricing and self-serve checkout - Nira’s pricing is not publicly posted in the sources reviewed; buyers who require price-list transparency may prefer alternatives with published tiers. - If your problem is primarily sensitive-data discovery/classification at scale across cloud infrastructure - DSPM tools (e.g., Sentra/Cyera) or governance platforms (BigID) may be better aligned if the core need is discovering and classifying sensitive data across many data stores (not just Drive/M365). - If you need deep threat detection, UEBA-style analytics, and broad coverage across on-prem + cloud data stores - Varonis is frequently positioned (including by practitioners) as more mature for real-time data access monitoring and threat detection, albeit often more expensive and complex. - If you want a single collaboration/content platform rather than a governance overlay - Egnyte (or other content platforms) may be a better architecture if you’re also trying to consolidate storage, collaboration, and governance. - If enterprise identity lifecycle automation (SCIM) is a hard requirement - SCIM support for Nira was not confirmed in the sources reviewed; buyers who require SCIM should validate before shortlisting. - Current limitations acknowledged by the vendor (from accessible sources) - Pricing/packaging not formally posted publicly (acknowledged indirectly by co-founder on Reddit). - Features on the roadmap - Nira marketing suggests “more integrations coming,” but specific roadmap commitments and dates are not provided in the sources reviewed. - Scale limitations - Nira claims to support “many millions of cloud documents.” Practical scale limits (API quotas, scanning frequency, latency) are not documented in the sources reviewed and should be validated in a technical evaluation. - Security or compliance gaps - ISO 27017/27018 are not mentioned in the sources reviewed. - Data residency appears US-based in the vendor statement; non-US residency options not described. - API limitations or integration constraints - Because Nira is API-based, customers should validate: - How it handles Google/Microsoft API rate limits - How frequently it can rescan/refresh permission state - Whether it stores file metadata, content, or only access metadata - Exact coverage across Shared Drives, SharePoint sites, OneDrive, Teams/Slack, Dropbox team folders

Deal disqualifiers (poor fit)

Organizations requiring published, self-serve pricing and immediate online purchase
Teams needing broader data discovery/classification across databases and cloud storage beyond the collaboration apps Nira focuses on
Environments where the primary issue is malware/ransomware behavior detection rather than permission governance

Why some customers left for competitors (churn reasons)

Not clearly available in the accessible sources reviewed.
Given category norms, likely churn drivers could include:
- Preference for broader platforms that cover more repositories
- Desire for integrated sensitive-data discovery/classification (DSPM)
- Pricing/package misfit for smaller orgs
- Need for features like SCIM/RBAC/audit-log depth
These are hypotheses; the accessible sources do not provide a robust churn dataset.

- Not clearly available in the accessible sources reviewed. - Given category norms, likely churn drivers could include: - Preference for broader platforms that cover more repositories - Desire for integrated sensitive-data discovery/classification (DSPM) - Pricing/package misfit for smaller orgs - Need for features like SCIM/RBAC/audit-log depth - These are hypotheses; the accessible sources do not provide a robust churn dataset.

02Why they buy

unique selling points supported (at least partially) by accessible sources
- Focused, operational permission governance for cloud collaboration repositories
  - Emphasis on bulk permission changes and visibility (“thousands of access permissions in one interface”) is central to Nira’s positioning.
- Enterprise-grade compliance posture (vendor stated)
  - SOC 2 Type 2 and ISO 27001 are explicitly claimed on Nira’s security page; HIPAA BAA option is also stated.
- Fast deployment model (vendor stated)
  - “No agents” and “native APIs” positioning can reduce technical friction.
Where competitors clearly have advantages
- Broader platform scope (BetterCloud for SaaS management breadth; Varonis for threat detection and wider data coverage; Egnyte as full content platform)
- Pricing transparency (many alternatives publish more explicit tiers)

- unique selling points supported (at least partially) by accessible sources - Focused, operational permission governance for cloud collaboration repositories - Emphasis on bulk permission changes and visibility (“thousands of access permissions in one interface”) is central to Nira’s positioning. - Enterprise-grade compliance posture (vendor stated) - SOC 2 Type 2 and ISO 27001 are explicitly claimed on Nira’s security page; HIPAA BAA option is also stated. - Fast deployment model (vendor stated) - “No agents” and “native APIs” positioning can reduce technical friction. - Where competitors clearly have advantages - Broader platform scope (BetterCloud for SaaS management breadth; Varonis for threat detection and wider data coverage; Egnyte as full content platform) - Pricing transparency (many alternatives publish more explicit tiers)

Why customers chose Nira over alternatives (evidence quality varies)

Vendor case studies suggest selection drivers include:
- Need to remediate sharing risk at scale in Google Workspace
- Addressing personal-account access and offboarding access gaps
- Making security actions “self-serve” for non-security employees via a portal
Independent verification for these “why chosen” points is limited in the accessible sources.

03Field reports

Review-platform availability notes

Gartner Peer Insights
- Attempted but inaccessible for product-specific Nira reviews in the sources retrieved (Gartner Peer Insights homepage is accessible; product listing/reviews not captured in accessible results).
TrustRadius
- Attempted, but no accessible Nira product page/review corpus was found in the sourced results.
G2
- Accessible and contains a review corpus for Nira (a moderate number of reviews visible on the vendor pages).
Reddit / community discussions
- Accessible and includes at least one relevant sysadmin thread about Nira for Google Drive access control.

- Gartner Peer Insights - Attempted but inaccessible for product-specific Nira reviews in the sources retrieved (Gartner Peer Insights homepage is accessible; product listing/reviews not captured in accessible results). - TrustRadius - Attempted, but no accessible Nira product page/review corpus was found in the sourced results. - G2 - Accessible and contains a review corpus for Nira (a moderate number of reviews visible on the vendor pages). - Reddit / community discussions - Accessible and includes at least one relevant sysadmin thread about Nira for Google Drive access control.

Positive feedback themes (from accessible sources)

“Security/permissions visibility” and ease of identifying sharing risks
- G2’s comparison narrative indicates reviewers appreciate simplifying the identification/troubleshooting of permission gaps.
Strong support / onboarding experience (as reflected in comparative G2 summary)
- G2’s comparison page suggests Nira is rated highly on support in its review set.
Vendor case studies cite operational outcomes
- Examples include bulk link changes at large scale and improved offboarding remediation (these are vendor-published and not independently verified).

- “Security/permissions visibility” and ease of identifying sharing risks - G2’s comparison narrative indicates reviewers appreciate simplifying the identification/troubleshooting of permission gaps. - Strong support / onboarding experience (as reflected in comparative G2 summary) - G2’s comparison page suggests Nira is rated highly on support in its review set. - Vendor case studies cite operational outcomes - Examples include bulk link changes at large scale and improved offboarding remediation (these are vendor-published and not independently verified).

Negative feedback themes / complaints (from accessible sources)

Pricing opacity and sales-led motion concerns
- In a /r/sysadmin post, the buyer expresses concern that pricing could approach the cost of hiring multiple staff, and notes Nira is “tightlipped” about pricing.
- Nira co-founder response confirms pricing is handled via demo call and not published.
Review skew risk
- Public review pages show a strong concentration of high-star ratings in the captured sections. This does not prove bias, but it is a signal that the public review corpus may under-represent unhappy customers or churned users.

- Pricing opacity and sales-led motion concerns - In a /r/sysadmin post, the buyer expresses concern that pricing could approach the cost of hiring multiple staff, and notes Nira is “tightlipped” about pricing. - Nira co-founder response confirms pricing is handled via demo call and not published. - Review skew risk - Public review pages show a strong concentration of high-star ratings in the captured sections. This does not prove bias, but it is a signal that the public review corpus may under-represent unhappy customers or churned users.

Specific outcomes customers achieved (with metrics when available)

Vendor-published claim of markedly higher productivity for document security investigations (methodology not disclosed; treated as marketing claim).

HackerOne (vendor case study)

Claimed problem
- Manage personal account access and offboarding risks in Google Workspace.
Claimed use cases
- Customized actionable alerts, bulk remediation.
Critical evaluation
- The case study provides narrative context and use cases but, in the accessible snapshot, does not provide independently verified quantitative outcomes (e.g., reductions in exposure or time savings). Treat benefits as directional.

- Claimed problem - Manage personal account access and offboarding risks in Google Workspace. - Claimed use cases - Customized actionable alerts, bulk remediation. - Critical evaluation - The case study provides narrative context and use cases but, in the accessible snapshot, does not provide independently verified quantitative outcomes (e.g., reductions in exposure or time savings). Treat benefits as directional.

Additional vendor case studies available (examples)

RapidSOS, findhelp, ProducePay, Ampush, Moloco, Upvest, and a general “Software” vertical page exist.
Common pattern
- These emphasize offboarding risk cleanup, external exposure reduction, employee self-service, and bulk remediation.
Critical evaluation
- Most are vendor-authored; metrics (where present) should be treated as marketing unless methodology and baseline are provided.

04Best fit

Company sizes

Likely best fit: mid-market to enterprise organizations with significant collaboration sprawl and frequent access changes.
Evidence signals:
- G2 reviews skew toward mid-market organizations.
- Nira marketing references a range of employee counts and very large cloud document footprints.

Industries and verticals

Commonly referenced: technology, cybersecurity, healthcare, finance, professional services, nonprofits (from G2 seller page copy).
Case studies include cybersecurity (HackerOne) and other tech/operations-heavy firms.

Roles and personas

Decision makers
- IT leadership (Head of IT, IT Manager)
- Security leadership (InfoSec manager, security operations)
- Compliance/privacy stakeholders
End users
- IT admins
- Security analysts doing document access investigations
- In some deployments, business users may be involved if Nira uses “employee security portal” workflows.

Pain points the product addresses

External sharing risk and public link sprawl
Personal email accounts retaining access to company documents
Third-party and domain-level access that persists after relationships end
Offboarding gaps (removing lingering access)
Lack of a single place to audit and bulk-change permissions

Qualification criteria (great fit)

Heavy Google Workspace / Microsoft 365 document footprint
Need for bulk remediation and ongoing automated policy enforcement
Security/compliance pressure around least privilege and auditability
Willingness to engage in a vendor sales process for enterprise features

05The pitch

What the product does (core value proposition in objective terms)

Nira is a Data Access Governance / cloud document security platform focused on identifying, prioritizing, and remediating risky sharing and permission states across common collaboration repositories (notably Google Drive / Google Workspace and Microsoft 365; marketing also highlights Dropbox). It emphasizes visibility into who has access to what and bulk/automated permission fixes via API integrations rather than endpoint agents.
Nira is positioned as an operational tool for IT/Security to find issues such as public links, external sharing, third‑party access, and personal-account access, then apply remediations at scale. (Vendor claims include quick setup, no agents, and native APIs.)

- Nira is a Data Access Governance / cloud document security platform focused on identifying, prioritizing, and remediating risky sharing and permission states across common collaboration repositories (notably Google Drive / Google Workspace and Microsoft 365; marketing also highlights Dropbox). It emphasizes visibility into who has access to what and bulk/automated permission fixes via API integrations rather than endpoint agents. - Nira is positioned as an operational tool for IT/Security to find issues such as public links, external sharing, third‑party access, and personal-account access, then apply remediations at scale. (Vendor claims include quick setup, no agents, and native APIs.)

Target market and market positioning

Primary buyers/users: IT administrators, security teams, and compliance stakeholders responsible for SaaS collaboration security (Google Workspace / Microsoft 365). Nira’s marketing materials emphasize mid-market through enterprise IT/security teams managing large document volumes and frequent access changes due to onboarding/offboarding.
Review-platform composition suggests a mid-market skew.
Positioning sits between:
- SaaS management / workflow automation tools (e.g., BetterCloud) that can include file governance as a module
- Larger data security platforms (e.g., Varonis) that address broader data security, threat detection, and governance across more repositories
- DSPM/data discovery tools (e.g., Sentra, Cyera, BigID, Securiti) that focus on sensitive-data discovery/classification and posture

- Primary buyers/users: IT administrators, security teams, and compliance stakeholders responsible for SaaS collaboration security (Google Workspace / Microsoft 365). Nira’s marketing materials emphasize mid-market through enterprise IT/security teams managing large document volumes and frequent access changes due to onboarding/offboarding. - Review-platform composition suggests a mid-market skew. - Positioning sits between: - SaaS management / workflow automation tools (e.g., BetterCloud) that can include file governance as a module - Larger data security platforms (e.g., Varonis) that address broader data security, threat detection, and governance across more repositories - DSPM/data discovery tools (e.g., Sentra, Cyera, BigID, Securiti) that focus on sensitive-data discovery/classification and posture

Get a comprehensive analysis of nira including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →