Data security platform startup Veza Inc. today announced the launch of its new identity governance and administration solution with a promise to deliver next-generation identity security for enterprises.

Called Next-Gen IGA, the new solution comprises the Veza Access Control Platform and new products for provisioning and de-provisioning, access reviews, access visibility and access intelligence. The new IGA solution approaches governance with a focus on permissions and automation to reduce identity risks, decrease the costs of governance and accelerate access to apps and data anywhere.

The solution seeks to address the issue wherein identity security is a top priority, as 80% of cyberattacks leverage identity-based techniques. Veza argues that organizations need processes to reduce the permissions sprawl that allows attacks to succeed, as traditional IGA tools have not kept up with the demand for machine identity management capabilities, forcing companies to pursue separate solutions in many cases.

Next-Gen IGA manages access with authorization entities of roles and permissions instead of users and groups. Doing so is said to enable organizations to visualize and rightsize access permissions with the automation of traditional access reviews and identity lifecycle provisioning.

Using Next-Gen IGA, companies are able to unify the fragmented access lifecycle with one solution that brings forward access visibility and access intelligence and handles access provisioning with ad hoc access requests. Users can visualize who can take what action on what data by understanding the user/group relationships via roles and policies and effective permissions to resources.

The new solution also finds and fixes policy violations automatically, including privilege access, dormant accounts and segregation of duty policies. The solution integrates quickly with any enterprise system, whether on-premises or in the cloud, to monitor all human identities, machine identities and service accounts.

Under the hood, Next-Gen IGA is powered by the Veza Access Control Platform, which ingests and analyzes authorization permission metadata from enterprise systems and organizes it into the Veza Authorization Graph. Veza’s platform understands the unique access mechanisms of more than 150 enterprise systems, including software-as-a-service apps, data systems and cloud infrastructure and transforms that into a canonical data model.

“Security teams want enterprise access governance, but they are struggling with the sprawl of identities and the complexity of achieving least privilege access in today’s modern IT landscape that is full of point products,” said co-founder and Chief Executive Tarun Thakur. “Veza’s Access Control Platform brings the power of our Authorization Graph to all identity access use cases — access visibility, access intelligence and access reviews — in a single unified platform solution.”

Veza was previously in the news in April 2022 when it launched out of stealth with $110 million in funding. Investors in the company include Accel Partners Inc., Bain Capital Ventures LLC, Ballistic Ventures LLC, GV Management Company LLC (previously Google Ventures), Norwest Venture Partners LLP and True Ventures LLC.

Photo: Veza