Opal Security

Name: Opal Security
Brand: Opal Security

AI Native

Opal Security is an identity governance platform that centralizes access requests and approvals, enforces just-in-time (time-bound) access, runs access reviews, and provides continuous visibility and remediation for identity risk across SaaS, cloud infrastructure, and internal tools.

Est 2020|Valuation $112M|Raised $56.9M|26 Ref Customers

LinkedIn 7K|Web traffic 13K|FTEs 50|HQ New York, NY

MarketsIdentity Governance & Administration (IGA)

Published Oct 15, 2026

01Common complaints

- If you need “role engineering” and role lifecycle management to be extremely mature out of the box - The TrustRadius comparison critique suggests gaps like inability to modify/view roles and role duplication cleanup (if accurate for your environment, that’s a major blocker). (https://www.trustradius.com/compare-products/opal-dev-vs-transmit-security) - If you have limited engineering resources for integrations - Opal supports custom connectors, but they require you to implement endpoints; that’s real ongoing cost. (https://docs.opal.dev/docs/custom-integrations-overview) - If your main need is a full PAM suite (vault, session recording) - Opal appears centered on access governance and workflows; if you need classic PAM controls, vendors like CyberArk / BeyondTrust (not evaluated here) may be more appropriate. - If your procurement requires transparent published pricing or self-serve onboarding - Opal pricing appears sales-led and not publicly detailed. (https://us.fitgap.com/products/020272/opal-security) - Known limitations from reviews and accessible sources - Integration breadth and documentation improvement requests appear in aggregated G2 feedback. (https://www.g2.com/products/opalsecurity/reviews) - Usability and role-management limitations are alleged in a TrustRadius comparison artifact; buyers should validate these in hands-on trials and reference calls. - Roadmap / evolving platform indicators - Opal’s 2026 press release describes new capabilities (e.g., “Paladin, OpalScript, OpalQuery”), suggesting rapid product evolution. Rapid evolution can be a strength, but also introduces: - Feature churn - Changing terminology - Potential maturity gaps for new modules - This is vendor PR; verify what is GA vs beta and what is roadmap. (https://www.businesswire.com/news/home/20260319971624/en/Opal-Security-Declares-the-End-of-Access-Sprawl---Launches-Industrys-First-Platform-to-See-Encode-and-Enforce-Governance-with-AI) - Security/compliance gaps - SOC 2 Type 2 is stated publicly, but other certifications (ISO 27001 etc.) are not clearly documented in accessible sources; treat as unknown until proven. (https://www.opal.dev/legal/trust-center)

Deal disqualifiers (poor fit)

You require published transparent pricing before engaging sales
You require out-of-the-box integration coverage for niche/legacy systems and cannot support custom connector engineering
You need deep legacy IGA features immediately (complex SoD, highly regulated ERP estates) and are unwilling to accept a more iterative rollout

02Why they buy

- Continuous identity risk framing and “reasoning” positioning - Opal emphasizes real-time visibility and prioritized insights and aims to remediate directly (read-write governance). (https://www.g2.com/products/opalsecurity/reviews) - Customer-validated strengths (from G2) - Intuitive UI and strong support repeatedly noted in review summaries (valuable differentiators in IGA where UX is often criticized). (https://www.g2.com/products/opalsecurity/reviews) - Differentiation claims that require verification - “AI-native” governance and new platform capabilities announced in 2026 press release language should be validated with product demos, roadmap proof, and customer references—press releases often overstate novelty. (https://www.businesswire.com/news/home/20260319971624/en/Opal-Security-Declares-the-End-of-Access-Sprawl---Launches-Industrys-First-Platform-to-See-Encode-and-Enforce-Governance-with-AI) - Areas where competitors clearly have advantages - Legacy IGA suites may win on: - Connector breadth for legacy enterprise apps - Extremely mature compliance reporting - Very large enterprise reference base - Modern peers may win on: - Faster integration coverage in certain SaaS ecosystems - More transparent or better-understood pricing (varies by vendor)

03Field reports

Note: Review availability is uneven across platforms. G2 has accessible reviews; Gartner Peer Insights for Opal Security specifically was not found in accessible sources (search results returned unrelated products). TrustRadius content that was accessible included a negative “Opal.dev vs Transmit Security” comparison page. - G2 reviews (mostly positive, but with recurring improvement requests) - Overall rating shown on G2: generally positive with a modest review footprint (as crawled). (G2 review pages) - Positive review excerpt (G2) - “Clear and consistent access management for a wide range of services.” — quoted from a G2 reviewer. (G2 review pages) - G2 AI-generated summary highlights - Praised: intuitive UI, responsive customer support, automation for access requests and auditing. - Criticized: users request improved integration options and documentation. (G2 review pages) - TrustRadius (accessible content skewed negative) - TrustRadius comparison page includes a very negative assessment in that compare view, alleging missing basic end-user functionality and slow requests. - Critical excerpt (TrustRadius compare page) - Opal “lacks basic functionality for end users,” including inability to modify existing IAM roles, view existing roles, delete duplicates, role templates, and “poor error messages” for JSON policy validation; it also claims each Opal request takes multiple minutes due to needing to be explicit and repeating actions. (TrustRadius comparison pages) - Interpretation - This is a single accessible TrustRadius artifact and may not represent broader sentiment; however it is a strong signal of potential friction in role/policy workflows for at least some users. - Reddit / community sources - Direct end-user discussions about Opal Security (opal.dev) specifically were limited in accessible Reddit results; most “Opal” Reddit content refers to unrelated products (screen time app, camera, or other OPAL projects). - This absence is itself informative: either the product is less discussed publicly (common for enterprise security tools), or discussions happen in private channels. - Why customers chose Opal over alternatives (inferred from accessible sources) - Buyers appear to value: - Centralized access management “single pane of glass” (TechCrunch coverage of Opal’s product thesis). - Compliance workflows and user access reviews (Opal collateral on user access review workflows). - Why some customers leave / churn reasons (signals) - Based on the TrustRadius comparison critique: - Role lifecycle management friction - Poor error messages / policy validation UX - Slow request workflows

Vendor-published case study example

Opal highlights Databricks and claims Opal helps with “JIT Access and UARs” to enhance productivity/security; it also describes an approval-chain “first-class reviewer” concept for high-confidence approvals. (Vendor-published case study page and product overview)

Critical evaluation of vendor-published case studies

- Methodology and metrics - The accessible case study page is marketing content; reported metrics (time saved, reduction in standing privileges, audit effort reduction, etc.) should be treated as vendor-published unless accompanied by independently verifiable details. - What to request during diligence - Specific baseline and post-implementation measurements - Time-to-value breakdown (integration vs policy design vs adoption) - References you can speak with (similar stack/scale)

04Best fit

Company sizes (practical ranges)

Likely best fit for:
- Mid-market to enterprise (hundreds to thousands of employees)
- Especially engineering-centric organizations with many cloud resources and SaaS tools
Reasoning
- Smaller companies may not have enough access complexity to justify a sales-led governance platform.

Industries and verticals

Strongest adoption signals appear in tech-forward companies (e.g., Databricks, Figma, Cloudflare listed as customers/logos). Sources include vendor customer pages and third-party product review sites.

Roles and personas

Decision makers
- CISO / Head of Security Engineering
- IAM / IT leadership
- GRC leadership (for access review evidence)
End users
- Engineering managers approving access
- IT admins managing app integrations and role structure

Pain points addressed

Overprovisioned access and access sprawl
Audit-driven access reviews that are too manual
Slow ticket-based access processes

Qualification criteria (great fit)

You have (or want) a standardized access request and review process
You can invest in integration and policy design
You need SOC 2 / SOX / ISO-style evidence and want better automation

05The pitch

What the product does (core value proposition in objective terms)

- Opal Security is an identity governance / access governance platform focused on: - Centralized access requests (catalog + approvals) - Just-in-time (time-bound) access controls - Access reviews (UARs / certifications) - Continuous visibility into identity risk across SaaS, cloud infrastructure, and internal tools - Opal positions itself as an “authorization reasoning” / “identity that thinks” platform, emphasizing a data layer that analyzes access behavior and supports read-write remediation (i.e., actually changing entitlements, not only reporting). (Third-party review pages; vendor platform overview)

Target market and market positioning

- Primary buyer personas appear to be Security, IAM/IT, and GRC teams in mid-market to enterprise environments that have: - Complex SaaS + cloud sprawl - A need for SOC 2 / SOX / ISO 27001 access governance evidence - Engineering-heavy workflows where “ticket-based access” is too slow - Market category overlap: - Identity Governance & Administration (IGA) - Access request & approval workflows - Privileged access governance (not necessarily a full PAM vault)

Get a comprehensive analysis of Opal Security including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →