TOOL PROFILE · ACCESS GRAPH AND GOVERNANCE

Veza review 2026: access graph reach into local and service accounts

The short answer

Veza ranks 2 of 8 at 6.37 out of 10. Its Access Graph reveals local, machine and service accounts across 325+ integrations and runs reviews and lifecycle actions on them. Discovery of applications nobody has integrated is not described on the pages reviewed, and it publishes no prices. ServiceNow completed its acquisition of Veza in March 2026.

By The Credential Desk · IAM Compared · Published 2026-10-08

Desk research from public vendor pages and documentation read in September 2026, updated 2026-10-13. Editorial assessment; we did not test the products.

Rank 2 of 8 on default weights

Entitlement-level view across 325+ integrations

Change the weights in the coverage gap calculator

What shape is Veza's reach?

DISC: Unmanaged app discovery; 3.5
INAPP: Accounts inside the app; 8.0
NOAPI: Reach into apps without APIs or SCIM; 7.0
ORCH: Orchestrates through the existing stack; 7.5
EXEC: Executes changes itself; 7.2
NHI: Machine, service and agent accounts; 7.5
EVID: Audit evidence; 7.0
PRICE: Pricing transparency; 2.0

Each sector is one criterion. The longer the engraved sector, the higher the editorial score. Sectors are equal width, so the picture shows the shape of a tool's reach, not its weighted total.

What does Veza do?

Builds an Access Graph of effective permissions across connected systems and runs reviews and lifecycle actions on top of it.

Access reviews: "Accurately reveal all accounts with access, including local, machine, and service accounts, even if they exist outside your identity platforms".; Source: Veza Access Reviews · Read 27 Sep 2026
Lifecycle: Birthright access, role change and offboarding "including local accounts"; Dry Run, Safety Limits and OAA Write.; Source: Veza Lifecycle Management · Read 27 Sep 2026
Integrations: 325+ integrations; custom systems through the Open Authorization API (OAA).; Source: Veza Lifecycle Management · Read 27 Sep 2026
Ownership: ServiceNow completed its acquisition of Veza; the Access Graph is to be integrated across the ServiceNow platform (Veza blog, 2 March 2026).; Source: Veza blog: ServiceNow completes acquisition · Read 27 Sep 2026
Findings: Detects dormant accounts and excessive privileges.; Source: Veza homepage · Read 27 Sep 2026
Open Authorization API: JSON schema and REST API, with a Python library, to import authorization metadata from "any system, even custom or on-premise apps".; Source: Veza: Open Authorization API · Read 11 Oct 2026

What does Veza state about itself?

We did not collect a headline figure or finding from Veza for this page.

Which parts of the estate does Veza document?

Unsanctioned SaaSNot documented
Discovery of unconnected SaaS not described
On-prem and legacy appsDocumented
The Open Authorization API imports authorization metadata from custom or on-premise apps
Source: Veza: Open Authorization API · Read 11 Oct 2026
Custom-built appsDocumented
Custom systems connect through OAA
Source: Veza Lifecycle Management · Read 27 Sep 2026
Local accounts in appsDocumented
Reveals local accounts outside identity platforms
Source: Veza Access Reviews · Read 27 Sep 2026
Service accounts and hardcoded credentialsPartial
Reveals machine and service accounts; hardcoded credentials not described
Source: Veza Access Reviews · Read 27 Sep 2026
AI agentsPartial
Acquisition post frames the combined offer as an agent identity control plane
Source: Veza blog: ServiceNow completes acquisition · Read 27 Sep 2026

How does Veza score on each criterion?

Criterion scores for Veza, with badges computed against all 8 tools.
Criterion	Weight	Score	Why	Source
Unmanaged app discovery	18%	3.5 / 10	Finds accounts outside identity platforms within the systems it integrates with; discovery of applications nobody connected is not described.	Source: Veza Access Reviews · Read 27 Sep 2026
Accounts inside the app	16%	8.0 / 10	Reveals local, machine and service accounts and dormant accounts, with effective permissions from the Access Graph.	Source: Veza Access Reviews · Read 27 Sep 2026 · Source: Veza homepage · Read 27 Sep 2026
Reach into apps without APIs or SCIM	14%	7.0 / 10	The Open Authorization API imports authorization metadata from any system, including custom or on-premise apps, through a JSON schema and REST API; someone has to build the feed.	Source: Veza: Open Authorization API · Read 11 Oct 2026 · Source: Veza Lifecycle Management · Read 27 Sep 2026
Orchestrates through the existing stack	14%	7.5 / 10	Adds visibility beside existing IdP and HR sources and writes changes back through OAA Write; now part of ServiceNow.	Source: Veza Lifecycle Management · Read 27 Sep 2026 · Source: Veza blog: ServiceNow completes acquisition · Read 27 Sep 2026
Executes changes itself	12%	7.2 / 10	Birthright access, role-change and offboarding automation, including local accounts, with Dry Run and Safety Limits.	Source: Veza Lifecycle Management · Read 27 Sep 2026
Machine, service and agent accounts	10%	7.5 / 10	Reveals machine and service accounts; the acquisition post frames the combined offer as an agent identity control plane.	Source: Veza Access Reviews · Read 27 Sep 2026 · Source: Veza blog: ServiceNow completes acquisition · Read 27 Sep 2026
Audit evidence	10%	7.0 / 10	Audit logging for lifecycle actions; a framework-mapped evidence export is not described on the pages reviewed.	Source: Veza Lifecycle Management · Read 27 Sep 2026
Pricing transparency	6%	2.0 / 10 Tied lowest	No public pricing.	Source: Veza homepage · Read 27 Sep 2026

Where does Veza lead, and where does it trail?

Leads or ties the set on

It does not lead any criterion; its highest scores are Accounts inside the app and Orchestrates through the existing stack.

Trails the leader on

Pricing transparency: 2.0 against Entra ID Governance at 9.5
Unmanaged app discovery: 3.5 against Orchid at 9.5
Reach into apps without APIs or SCIM: 7.0 against Orchid at 9.0
Orchestrates through the existing stack: 7.5 against Orchid at 9.5

Strengths on its public pages

Shows effective permissions, including local, machine and service accounts, across 325+ integrations.
Acts on what it finds: lifecycle automation with Dry Run and Safety Limits, and access reviews.

Limits on its public pages

Finding applications nobody has integrated is not described on the pages reviewed; coverage follows its integrations.
No public pricing, and product direction now sits inside ServiceNow after the March 2026 acquisition.

What does Veza cost, and how is it deployed?

Pricing

Not published

Deployment

SaaS with integrations, as described by Veza.

Who is Veza for?

Teams that want effective permissions and dormant accounts across many connected systems, with reviews on top.

Consider instead if you need a published price before talking to sales: Microsoft Entra ID Governance.

How does Veza compare with each other tool?

Veza vs Orchid
Orchid Security scores higher overall, 8.24 against 6.37
Veza vs Saviynt
Veza scores higher overall, 6.37 against 6.15
Veza vs SailPoint
Veza scores higher overall, 6.37 against 6.21
Veza vs Entra ID Governance
Veza scores higher overall, 6.37 against 6.15
Veza vs C1
Veza scores higher overall, 6.37 against 6.30
Veza vs Lumos
Veza scores higher overall, 6.37 against 6.13
Veza vs Apono
Veza scores higher overall, 6.37 against 4.78

Moving off Veza? See the alternatives Visit Veza (a ServiceNow company)

Learn more

LESSON 05
IdP, IGA, access graph and discovery: which layer of the identity stack does what
Who signs people in, who governs, who maps and who finds.
LESSON 02
Local accounts, break-glass logins and hardcoded credentials inside applications
The accounts an application creates for itself, and why offboarding misses them.

Frequently asked questions

What is Veza?

Builds an Access Graph of effective permissions across connected systems and runs reviews and lifecycle actions on top of it. It sits in the access graph and governance layer.

How does Veza score on reach beyond the IdP?

6.37 out of 10, rank 2 of 8 on default weights. Its highest criterion scores are Accounts inside the app (8.0) and Orchestrates through the existing stack (7.5) and its lowest is Pricing transparency (2.0).

What are the alternatives to Veza?

On our reach score the closest alternatives are Orchid Security, C1 (formerly ConductorOne) and SailPoint Identity Security Cloud. The moving-off page lists every alternative and the criteria where each scores higher.

Moving off Veza