Veza

Name: Veza
Brand: Veza

AI NativeLeader

Veza is an identity security platform that maps relationships among human and non-human identities, roles/groups/policies, permissions, and resources across SaaS applications, cloud infrastructure, and data systems via an Access Graph to determine who can do what to which data.

Est 2020|Valuation $1B|Raised $233.6M|49 Ref Customers

LinkedIn 18K|Web traffic 8K|FTEs 294

MarketsIdentity Provider (IdP) & Single Sign-On (SSO)

Platform CoversData Security Platforms Identity Governance & Administration (IGA)

Published Oct 23, 2026

01Common complaints

If you need a mature, end-to-end IGA suite with deep provisioning, access request workflows, and remediation across virtually all systems out of the box
- Established IGA vendors may provide more standardized lifecycle automation and governance controls (SailPoint’s comparison messaging highlights this gap).
If your primary pain point is PAM (vaulting, session management) rather than entitlement visibility
- CyberArk and similar PAM vendors may be the more direct fit.
If you cannot tolerate post-acquisition roadmap uncertainty
- ServiceNow closed the acquisition on March 2, 2026; integration direction, packaging, and long-term product boundaries may change.
If you require public, third-party review depth across multiple platforms
- G2 currently shows “not enough reviews,” and TrustRadius/Capterra evidence was limited in this snapshot.
Limited independent review transparency outside Gartner
- Gartner shows a meaningful review count; G2 shows 0 reviews; TrustRadius was not confirmable through accessible product pages in this run.
Pricing opacity
- No public pricing; makes early-stage ROI comparisons harder.
Integration depth variability risk
- Competitors explicitly claim full lifecycle management is available only for a fraction of integrations; even if overstated, buyers should test bidirectional control for their top systems.
Roadmap/platform integration uncertainty post-acquisition
- Community commentary suggests concern about how quickly Veza can become “native” inside ServiceNow and whether that affects focus on standalone platform users.

- If you need a mature, end-to-end IGA suite with deep provisioning, access request workflows, and remediation across virtually all systems out of the box - Established IGA vendors may provide more standardized lifecycle automation and governance controls (SailPoint’s comparison messaging highlights this gap). - If your primary pain point is PAM (vaulting, session management) rather than entitlement visibility - CyberArk and similar PAM vendors may be the more direct fit. - If you cannot tolerate post-acquisition roadmap uncertainty - ServiceNow closed the acquisition on March 2, 2026; integration direction, packaging, and long-term product boundaries may change. - If you require public, third-party review depth across multiple platforms - G2 currently shows “not enough reviews,” and TrustRadius/Capterra evidence was limited in this snapshot. - Limited independent review transparency outside Gartner - Gartner shows a meaningful review count; G2 shows 0 reviews; TrustRadius was not confirmable through accessible product pages in this run. - Pricing opacity - No public pricing; makes early-stage ROI comparisons harder. - Integration depth variability risk - Competitors explicitly claim full lifecycle management is available only for a fraction of integrations; even if overstated, buyers should test bidirectional control for their top systems. - Roadmap/platform integration uncertainty post-acquisition - Community commentary suggests concern about how quickly Veza can become “native” inside ServiceNow and whether that affects focus on standalone platform users.

Why some customers left for competitors (churn reasons)

No direct, accessible churn narratives were captured from review platforms in this crawl.
Competitor marketing argues Veza lacks “closed-loop remediation at scale” and has lifecycle management for only a fraction of integrations—these claims may reflect real buyer objections but are inherently biased.

02Why they buy

Graph-centered entitlement visibility across modern systems
- Veza’s “Access Graph” framing is consistently central in vendor materials and press coverage.
Enterprise workflow tie-in (especially post-acquisition)
- ServiceNow explicitly frames Veza as strengthening permission controls for AI agents and enterprise workflows, suggesting tighter integration into ServiceNow’s workflow ecosystem over time.
Where competitors clearly have advantages
- Mature IGA suites claim deeper remediation and governance automation at scale, and larger ecosystems (SailPoint’s stated differentiators).

- Graph-centered entitlement visibility across modern systems - Veza’s “Access Graph” framing is consistently central in vendor materials and press coverage. - Enterprise workflow tie-in (especially post-acquisition) - ServiceNow explicitly frames Veza as strengthening permission controls for AI agents and enterprise workflows, suggesting tighter integration into ServiceNow’s workflow ecosystem over time. - Where competitors clearly have advantages - Mature IGA suites claim deeper remediation and governance automation at scale, and larger ecosystems (SailPoint’s stated differentiators).

Why customers chose this product over alternatives (evidence-limited)

Based on Veza’s positioning and the limited accessible review snippets:
- Buyers are attracted to graph-based entitlement visibility across data systems and SaaS (especially where legacy IGA models struggle).
- Faster “time to insight” and less manual evidence collection for access reviews is a common vendor theme.

03Field reports

Public case studies with independently verifiable metrics
- This research snapshot did not capture detailed, named customer case studies with externally verifiable metrics.
Vendor-published metrics (treat as directional, not definitive)
- Veza “Fast Facts” PDF includes quantified outcomes (e.g., a substantial reduction in access certification time; dramatically faster custom app integration timelines compared with prior durations; the ability to create certifications in minutes at large scale).
- Critical evaluation
  - The metrics appear vendor-created; methodology, sample size, and baseline tooling are not described in the snippet captured.
  - Buyers should request:
    - Before/after process maps
    - Scope definitions (which apps, which entitlements, which review types)
    - Whether results were achieved with professional services involvement

- Public case studies with independently verifiable metrics - This research snapshot did not capture detailed, named customer case studies with externally verifiable metrics. - Vendor-published metrics (treat as directional, not definitive) - Veza “Fast Facts” PDF includes quantified outcomes (e.g., a substantial reduction in access certification time; dramatically faster custom app integration timelines compared with prior durations; the ability to create certifications in minutes at large scale). - Critical evaluation - The metrics appear vendor-created; methodology, sample size, and baseline tooling are not described in the snippet captured. - Buyers should request: - Before/after process maps - Scope definitions (which apps, which entitlements, which review types) - Whether results were achieved with professional services involvement

Availability caveat (important)

Public review coverage is uneven:
- Gartner Peer Insights shows a meaningful number of reviews at the vendor level.
- G2’s Veza seller page shows no reviews (insufficient data).
- TrustRadius could not be reliably accessed for a Veza-specific product page in this research (site search access returned an error via automated open).
- Capterra surfaced an “alternatives” page; a full Veza product review page was not captured here.

- Public review coverage is uneven: - Gartner Peer Insights shows a meaningful number of reviews at the vendor level. - G2’s Veza seller page shows no reviews (insufficient data). - TrustRadius could not be reliably accessed for a Veza-specific product page in this research (site search access returned an error via automated open). - Capterra surfaced an “alternatives” page; a full Veza product review page was not captured here.

Gartner Peer Insights (aggregate)

Gartner Peer Insights vendor directory page indicates:
- Overall average rating: very high.
- Total reviews: a modest number overall.
- Presence in multiple markets with review counts varying by market (e.g., strong representation in identity/governance-focused categories and minimal presence in some workload identity categories).
Note: A separate Gartner market page view (CSPM tools) in this crawl showed no reviews visible, which may reflect category mapping quirks, permissions, or locale issues; the vendor page totals appear more representative.

- Gartner Peer Insights vendor directory page indicates: - Overall average rating: very high. - Total reviews: a modest number overall. - Presence in multiple markets with review counts varying by market (e.g., strong representation in identity/governance-focused categories and minimal presence in some workload identity categories). - Note: A separate Gartner market page view (CSPM tools) in this crawl showed no reviews visible, which may reflect category mapping quirks, permissions, or locale issues; the vendor page totals appear more representative.

Vendor-site embedded quotes (not independently validated)

Veza’s homepage includes snippets attributed to Gartner Peer Insights (starred quotes). Examples shown include:
- “It’s provided insights into actions we can take to improve our security posture when it comes to access management” (attributed to Gartner).
- “Veza’s platform has put us in a position to quickly review what identities, roles, and permissions we had in our environment.” (attributed to Gartner).
These quotes are positive, but because they are presented via the vendor site rather than directly from the review platform page, buyers should treat them as cherry-picked highlights.

- Veza’s homepage includes snippets attributed to Gartner Peer Insights (starred quotes). Examples shown include: - “It’s provided insights into actions we can take to improve our security posture when it comes to access management” (attributed to Gartner). - “Veza’s platform has put us in a position to quickly review what identities, roles, and permissions we had in our environment.” (attributed to Gartner). - These quotes are positive, but because they are presented via the vendor site rather than directly from the review platform page, buyers should treat them as cherry-picked highlights.

Community/social sentiment (mixed/critical)

Reddit discussions in identity-focused communities show skepticism around the ServiceNow–Veza acquisition and integration practicality. Examples include:
- A thread titled “ServiceNow and Veza: A Masterclass in Monetizing Dysfunction” includes an overtly negative take: “This Veza and ServiceNow acquisition isn’t a strategy; it’s a hustle.”
- Another thread “ServiceNow X Veza…” expresses concern that migrating Veza onto the ServiceNow platform may take years and questions why ServiceNow didn’t acquire a more “native” on-platform vendor.
These are opinions (not verified facts) but are useful for identifying perceived risks: platform integration complexity, roadmap uncertainty, and potential reprioritization post-acquisition.

- Reddit discussions in identity-focused communities show skepticism around the ServiceNow–Veza acquisition and integration practicality. Examples include: - A thread titled “ServiceNow and Veza: A Masterclass in Monetizing Dysfunction” includes an overtly negative take: “This Veza and ServiceNow acquisition isn’t a strategy; it’s a hustle.” - Another thread “ServiceNow X Veza…” expresses concern that migrating Veza onto the ServiceNow platform may take years and questions why ServiceNow didn’t acquire a more “native” on-platform vendor. - These are opinions (not verified facts) but are useful for identifying perceived risks: platform integration complexity, roadmap uncertainty, and potential reprioritization post-acquisition.

04Best fit

Ideal Customer Profile

Company sizes: specific employee counts and revenue ranges
- Best fit likely:
  - Large enterprises and upper mid-market companies with substantial headcount and revenue.
- Also plausible for high-growth tech firms with complex SaaS/data stacks even at smaller organizational scales.
Industries and verticals where adoption is strongest (with customer examples)
- Based on public customer examples: hospitality, finance/fintech, retail/ecommerce, and other large enterprises.
- Example named customers in public coverage include Wynn Resorts, Blackstone, Expedia, SoFi, Warby Parker, Wayfair, Zoom, Intuit (note: presence in an article is not the same as an endorsement; validate references).
Roles and personas
- Decision makers
  - CISO / VP Security
  - Head of IAM / IGA
  - Head of Cloud Security
- End users
  - IAM engineers
  - GRC / compliance teams running access reviews
  - Data security teams (data lake/warehouse governance)
Pain points and challenges the product addresses
- “Authorization blind spots” across SaaS, data platforms, and cloud infrastructure.
- Slow, manual access review/certification cycles.
- Non-human identity sprawl (service accounts, tokens) and privilege drift.
Qualification criteria: what makes a GREAT fit
- You have meaningful SaaS/data estate complexity (Snowflake/Databricks, GitHub, Salesforce, etc.).
- You need effective-permission answers, not just group membership.
- You can commit to integration and governance process changes (or want to tie into ServiceNow workflows).
Deal disqualifiers: what makes a POOR fit
- Very small organizations with a limited SaaS/data footprint.
- Requirement for fully turnkey provisioning/remediation across many niche legacy on-prem applications (traditional IGA suites may be better).
- Strong need for transparent, self-serve pricing and rapid self-deployment (Veza is enterprise/demo-led).

- Company sizes: specific employee counts and revenue ranges - Best fit likely: - Large enterprises and upper mid-market companies with substantial headcount and revenue. - Also plausible for high-growth tech firms with complex SaaS/data stacks even at smaller organizational scales. - Industries and verticals where adoption is strongest (with customer examples) - Based on public customer examples: hospitality, finance/fintech, retail/ecommerce, and other large enterprises. - Example named customers in public coverage include Wynn Resorts, Blackstone, Expedia, SoFi, Warby Parker, Wayfair, Zoom, Intuit (note: presence in an article is not the same as an endorsement; validate references). - Roles and personas - Decision makers - CISO / VP Security - Head of IAM / IGA - Head of Cloud Security - End users - IAM engineers - GRC / compliance teams running access reviews - Data security teams (data lake/warehouse governance) - Pain points and challenges the product addresses - “Authorization blind spots” across SaaS, data platforms, and cloud infrastructure. - Slow, manual access review/certification cycles. - Non-human identity sprawl (service accounts, tokens) and privilege drift. - Qualification criteria: what makes a GREAT fit - You have meaningful SaaS/data estate complexity (Snowflake/Databricks, GitHub, Salesforce, etc.). - You need effective-permission answers, not just group membership. - You can commit to integration and governance process changes (or want to tie into ServiceNow workflows). - Deal disqualifiers: what makes a POOR fit - Very small organizations with a limited SaaS/data footprint. - Requirement for fully turnkey provisioning/remediation across many niche legacy on-prem applications (traditional IGA suites may be better). - Strong need for transparent, self-serve pricing and rapid self-deployment (Veza is enterprise/demo-led).

05The pitch

What the product does (core value proposition in objective terms)

Veza is an identity security / identity governance visibility platform centered on an “Access Graph” that maps relationships among identities (human and non-human), roles/groups/policies, permissions, and resources across SaaS apps, cloud infrastructure, and data systems to answer who can access what. Vendor positioning emphasizes visibility, analytics, and enforcement/automation depending on module and integration depth.
Veza is marketed as a way to operationalize least privilege and support governance workflows such as access reviews/certifications, separation-of-duties, and identity lifecycle workflows across modern systems (cloud/SaaS/data) that traditional IGA struggles to model precisely.

- Veza is an identity security / identity governance visibility platform centered on an “Access Graph” that maps relationships among identities (human and non-human), roles/groups/policies, permissions, and resources across SaaS apps, cloud infrastructure, and data systems to answer who can access what. Vendor positioning emphasizes visibility, analytics, and enforcement/automation depending on module and integration depth. - Veza is marketed as a way to operationalize least privilege and support governance workflows such as access reviews/certifications, separation-of-duties, and identity lifecycle workflows across modern systems (cloud/SaaS/data) that traditional IGA struggles to model precisely.

Target market and market positioning

Target: mid-market to large enterprises with complex hybrid estates (multi-cloud + SaaS + data platforms) and large permission surfaces (for example, fine-grained tables/objects, cloud IAM roles, and SaaS entitlements).
Positioning: positioned as “identity security” / “next-gen IGA”; in analyst taxonomy it sits adjacent to IGA, cloud entitlement management, and emerging “identity visibility/intelligence” models.

Get a comprehensive analysis of Veza including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →