Veza is an identity security company with a mission to help organizations safely use and share their data. The company’s primary goal is to empower its customers to adopt an identity-first approach to data security. Veza aims to achieve this by providing a platform that offers clear insights into who can take what actions on which data across various digital environments. This allows organizations to manage and control access for all identities, including human and non-human, across all systems.
Veza’s vision is to invent the future of identity security, where access is intelligent and least privilege is the standard. The company is known for its Authorization Graph technology, which maps the relationships between identities and data to provide visibility and control over permissions. This focus on solving complex access control challenges has established Veza’s reputation as a key player in the identity security market. The company is trusted by global enterprises for tasks such as privileged access monitoring, cloud access management, and data lake governance.
Offerings, Capabilities, and Integrations
Veza is an identity security company that provides solutions for organizations to manage and control who can access their data across various systems. Its core offering is an Access Control Platform designed to help businesses achieve the principle of least privilege, meaning users only have access to the information and systems necessary for their jobs. This is accomplished through Veza’s Authorization Graph technology, which maps and visualizes the complex relationships between identities, permissions, and data across cloud infrastructure, data systems, and both SaaS and on-premise applications. This capability to unify and translate system-specific permissions into a human-understandable format gives Veza a competitive edge by providing clear visibility into access, which helps to prevent security breaches and insider threats. The platform’s ability to integrate with over 300 systems, including major cloud providers like AWS, Azure, and Google Cloud, as well as numerous SaaS applications and data systems, allows for rapid deployment and broad coverage across an enterprise’s IT environment.
Products and Services
Veza’s primary offering is its Veza Access Platform, a unified suite of tools for identity security. This platform is not a single product but a collection of services that address various aspects of access control. Key services and capabilities of the platform include:
- Access Intelligence: This service uses over 500 pre-built queries to detect and prioritize access risks such as dormant permissions, policy violations, and misconfigurations.
- Access Reviews: Veza automates the process of reviewing user access rights, which helps to streamline compliance and governance.
- Privileged Access Monitoring: It provides specialized tools for monitoring and securing access for both human and non-human privileged identities.
- Cloud Access Management: The platform helps manage entitlements in multi-cloud environments, reducing the risk of data breaches.
- SaaS Access Security: Veza secures access to various SaaS applications that a company uses.
- Access AI: A newer offering, Access AI, incorporates generative AI to provide a chat-like interface for security teams to understand and remediate risky or unnecessary access for all types of identities.
- Open Authorization API (OAA): This API allows customers to integrate custom and in-house applications with the Veza platform, extending its visibility and control.
Target Customers
Veza’s target customers are primarily global enterprises and large organizations that operate in complex, hybrid, and multi-cloud environments. The company’s solutions are designed for businesses that need to manage a large and diverse set of users, applications, and data systems. This includes companies in various industries such as finance, healthcare, retail, and technology. Customers like Blackstone, Workday, and Snowflake use Veza’s platform. These organizations benefit from Veza’s products by gaining centralized visibility and control over data access, which helps them to strengthen their security posture, ensure compliance with regulations, and reduce the risk of data breaches. The platform helps security and identity teams to automate manual processes, such as access reviews, and to quickly identify and remediate access-related risks.
Cloud Integrations and Marketplaces
Veza offers a range of integrations with major cloud providers, enabling customers to manage and secure access across their cloud environments. The company’s platform connects with cloud infrastructure to provide visibility into user permissions and help enforce least privilege access.
- Amazon Web Services (AWS): Veza integrates with a comprehensive set of AWS services, including AWS IAM, S3, Redshift, EC2, and Lambda. This allows organizations to understand and control access to their data and resources within the AWS cloud. Veza is also available on the AWS Marketplace, providing a direct way for customers to purchase and deploy its Access Platform.
- Google Cloud: Veza provides full coverage for Google Cloud services, such as Google Cloud IAM, Cloud Storage, BigQuery, and Compute Engine. This integration helps organizations manage the complex permissions within their Google Cloud environment. Veza has a partnership with Google Cloud and its platform is integrated with the Google Cloud Policy Analyzer.
- Microsoft Azure: Veza integrates with Microsoft Azure services, including Azure Active Directory (Azure AD) and SharePoint, to help manage access permissions. Veza’s platform is available on the Microsoft Azure Marketplace, and it supports single sign-on with Microsoft Entra ID.
Beyond these major cloud providers, Veza’s integration ecosystem includes over 200 out-of-the-box integrations spanning identity providers, SaaS applications, and data systems. The company also offers an Open Authorization API (OAA) to allow for the development of custom integrations. Veza’s platform is designed for multi-cloud environments, helping to manage access across different cloud providers.
Key People
- Co-Founder & CEO: Tarun Thakur.
- CTO & Co-Founder: Dr. Maohua Lu.
- Chief Architect & Co-Founder: Rob Whitcher.
- Chief Security & Trust Officer: Mike Towers.
- Head of Strategy: Rich Dandliker.
- Venture Partner, Accel Partners: Eric Wolford.
- General Partner, Google Ventures: Karim Faris.
- Partner, True Ventures: Puneet Agarwal.
- Board of Directors: Phil Venables.
Key Facts
- Headquarters Location: Los Gatos, California.
- Number of Employees: Approximately 275.
- Annual Revenue: Approximately $63.4 million.
- Parent Company: None.
- Subsidiary Companies: None.
- Publicly Listed: No.
Gartner has recognized Veza in the technology category of Identity Governance and Administration (IGA). Veza was included in the Gartner Peer Insights Voice of the Customer for Identity Governance and Administration (IGA) report. The company is also listed by Gartner as a vendor in the markets for Identity Governance and Administration and Cloud Security Posture Management (CSPM).
There is no information available regarding formal recognition of Veza by Forrester, IDC, or Everest Group in their respective market evaluation reports such as the Forrester Wave, IDC MarketScape, or Everest Group PEAK Matrix.
