Overview

Product video
Veza is the modern Identity Security Platform, helping organizations secure access to critical systems, SaaS apps, AI workloads, and data systems by answering the most essential identity question: Who can take what action on what data?
From SaaS apps to AI agents, Veza delivers near real-time access intelligence, enforces least privilege, and automates governance across both human and non-human identities.
Recognized as a Leader in GigaOm's 2025 Radar for Identity Security Posture Management (ISPM) and featured in Gartner's 2025 Hype Cycle as a key player in the emerging Identity Visibility and Intelligence Platform (IVIP) category, Veza is redefining identity security for the modern enterprise.
Organizations choose Veza for comprehensive visibility that unifies access data across AWS, Azure, GCP, Okta, Active Directory, Snowflake, Oracle, Salesforce, and more. They rely on Veza to detect toxic combinations, reduce permissions sprawl, and enforce access policies across cloud and SaaS environments. Veza enables automated user access reviews and delivers audit-ready reporting for SOX, HIPAA, PCI, and other regulatory requirements. It helps security teams discover and secure service accounts, secrets, automations, and AI agents, while also governing access for AI models and pipelines to ensure only the right identities can invoke, train, or deploy AI systems. The platform delivers real-time intelligence on who has access to what, enabling risk-informed decisions and faster incident response.
Global enterprises such as Blackstone, Wynn Resorts, Sallie Mae, and Crocs trust Veza to reduce identity risk and limit the blast radius of breaches caused by over-permissioning. They replace manual access reviews with automated, policy-driven processes, gain visibility into hidden entitlements across SaaS, cloud, disconnected applications, and modern AI workloads, and align security programs with Zero Trust and modern compliance frameworks.
Available on AWS Marketplace, Veza streamlines procurement, simplifies budgeting, and accelerates time-to-value, helping enterprises protect what matters most by securing who has access to what across their environments.
Highlights
- Unify and visualize identity and entitlement data across AWS, Azure, GCP, SaaS, AI systems, and on-premises apps to see exactly who can take what action on what data.
- Automate user access reviews, enforce least privilege, and reduce permissions sprawl for both human and non-human identities, including service accounts and AI agents.
- Accelerate compliance and security programs with audit-ready reporting for SOX, HIPAA, PCI, and more, while aligning to Zero Trust and modern identity security frameworks.
Unlock automation with AI agent solutions

Features and programs
Security credentials achieved
(3)



Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
---|---|---|
Platform | Authorization Platform - 1.5K Identities; 5 Connectors | $100,000.00 |
Platform + Workflows | Authorization Platform + Workflows - 1.5K Identities; 5 Connectors | $150,000.00 |
Vendor refund policy
Contact Veza sales for details (sales@veza.com )
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
Standard contract
Customer reviews
Streamlined compliance process with custom control framework and AI-driven security questionnaire management
What is our primary use case?
We are currently in the implementation stages of Vanta . It's been challenging to build out as it is not as intuitive as OneTrust, especially in terms of scoping and needs.
How has it helped my organization?
Vanta has made the security questionnaire process much easier, thanks to AI. It automatically extracts answers and populates them within the SIG.Â
The custom control framework allows me to incorporate our HITRUST controls and additional ISO twenty-seven thousand and one and financial controls.
Moreover, it includes a knowledge bank for questionnaires and RFPs, making information updates more streamlined.
What is most valuable?
The most valuable features of Vanta are the custom framework option and the support services. It's the only current GRCÂ vendor with licensing rights for HITRUST 11.3 framework, and I've avoided expensive HITRUST licensing costs through a custom control framework.
What needs improvement?
The support experience could be better. We often need to escalate our issues to the account executive to receive a response, especially when support is needed for integrations.
For how long have I used the solution?
We started using Vanta about three months ago.
What do I think about the stability of the solution?
So far, I would rate the stability of the product as ten out of ten, with no issues in that regard.
What do I think about the scalability of the solution?
In terms of scalability, I would rate it better than OneTrust, giving it an eight out of ten. It accommodates small, lean teams or larger public organizations, providing a holistic view of compliance without being limited by capacity.
How are customer service and support?
Although I've read that others have had issues with Vanta's support, our experience involves having to escalate matters to our account executive to get a response.Â
The support team itself has been less responsive, which can be problematic when integrating and building out the platform.
How would you rate customer service and support?
Neutral
What's my experience with pricing, setup cost, and licensing?
The overall price point of Vanta is commendable, especially considering the custom control framework that allows me to evade the high costs associated with HITRUST licensing.
What other advice do I have?
The test feature of Vanta is great, making it a recommendable product to others.
I'd rate the solution eight out of ten.