Home
News
Tech Grid
Interviews
Anecdotes
Think Stack
Press Releases
Articles
  • Agentic AI

Veza Introduces Access Agents for AI-Driven Identity Security


Veza Introduces Access Agents for AI-Driven Identity Security
  • by: Source Logo
  • |
  • February 26, 2026

Veza, the pioneer in identity security, has announced a major expansion of its platform with the introduction of Veza Access Agents—a suite of purpose-built AI agents designed to automate complex identity and access governance tasks for enterprises. The company also unveiled significant advancements in its AI Agent Security capabilities, delivering deeper visibility, risk assessment, and control over third-party AI agents, large language models (LLMs), AI applications, and infrastructure such as Model Context Protocol (MCP) servers.

As enterprises accelerate adoption of agentic AI to improve efficiency, the volume and complexity of identity-based access have reached critical levels. Traditional identity security approaches focus primarily on authentication and permissions, but attackers increasingly exploit authorized access to cause damage undetected. The emergence of autonomous AI agents—potentially outnumbering human users significantly—introduces new governance and risk challenges at machine scale.

Veza’s innovations shift the paradigm from static access controls to intelligent, automated governance that contextualizes, enforces, and validates identity and permissions in real time.

Quick Intel

  • Veza launches Access Agents—AI-powered tools built on AWS Bedrock that automate IAM tasks using the Veza Access Graph for interactive, compliant insights.
  • Initial agents include Prompt Agent for natural language queries, Access Search Agent for permission visualization, and Access Review Agent for focused, AI-assisted reviews.
  • AI Agent Security enhancements provide granular discovery of MCP tools and actions, Suggested Owner Agent for accountability, blast radius visualization, and NIST-aligned posture management.
  • New dashboard centralizes AI identity monitoring, tracks sprawl and drift, and enables automated remediation workflows in ServiceNow or Jira.
  • Veza Access Agents available in early access now, with general availability planned for end of Q2 2026.
  • Platform ensures enterprise-grade compliance, transparency in agent reasoning, and support for hybrid SaaS deployments.

Veza Access Agents: Automating Governance at Scale

Veza Access Agents leverage the Veza Access Graph to deliver an interactive, natural language experience for identity teams and agentic AI programs. Hosted on AWS Bedrock with dynamic model selection (Claude, Opus, Sonnet), agents ensure high-quality, compliant responses tailored to task complexity.

The first wave of agents includes:

  • Veza Prompt Agent: Conversational interface for surfacing enterprise risks across human, machine, and AI identities.
  • Veza Access Search Agent: Enables simple natural language queries to visualize permission paths and entitlements.
  • Veza Access Review Agent: Prioritizes high-risk items and streamlines reviews with context-aware, AI-driven decision support.

“Identity is a foundational element in security, especially in the era of autonomous AI. We are on the cusp of having trillions of AI agents. And we believe that identity Security for AI Agents is an unsolved problem,” said Tarun Thakur, Co-Founder and CEO of Veza. “Veza’s Access Graph harnesses the power of identity and permissions data across enterprise systems, to help organizations understand who and what can access what data. This enables enterprises to visualize, govern, and manage access across humans, non-human identities, and AI agents to data. With the introduction of Veza Access Agents, we are shifting the burden of access security and access governance tasks from a manual effort to intelligent, automated reasoning – this lays the foundation to enforce deterministic policies for agents at machine speed towards our vision of Veza as the Enterprise Agent Identity Control Plane.”

Enhanced AI Agent Security: Closing Blind Spots

Veza has strengthened its AI Agent Security module to address identity risks from external and internal AI entities. Key updates include:

  • Granular tool discovery beyond MCP servers to reveal specific actions (e.g., Jira calls) and end-to-end access paths to data and APIs.
  • Suggested Owner Agent to map AI agents and service accounts to human owners, improving accountability and access reviews.
  • Industry-first blast radius visualization quantifying action-level impact for every AI agent on sensitive resources.
  • AI Security Posture Management (AISPM) with continuous assessment, misconfiguration detection, and mapping to NIST AI Risk Management Framework (AIRMF).
  • Centralized AI Agent Security Dashboard for monitoring sprawl, dormant identities, access drift, and triggering remediation workflows.

These capabilities provide organizations with proactive governance over the expanding AI ecosystem, reducing unmanaged risks while supporting compliance and least-privilege principles.

“Identity security for AI agents is one of the most urgent and unsolved challenges in cybersecurity today," says Phil Venables, cybersecurity leader, partner at Ballistic Ventures, and former CISO, Google Cloud. "As organizations move toward a future where AI agents may outnumber humans by 80 to 1 or more, the question of permissions and authorization becomes mission-critical. Without clear governance, visibility, and control, AI agents introduce a new layer of risk at machine scale. Veza Access Agents addresses this head-on, bringing the same rigor, policy intelligence, and authorization discipline we expect for human identities to the rapidly expanding ecosystem of AI agents.”

Veza Access Agents are currently available in early access to select customers, with general availability expected by the end of Q2 2026. The platform’s hybrid architecture and AWS Bedrock foundation ensure enterprise-grade security, privacy, and audit transparency.

About Veza

Veza is the leader in identity security, helping organizations secure access to data across the enterprise. Veza’s Enterprise Agent Identity Access Platform goes beyond IAM and identity governance and administration (IGA) tools to visualize, monitor, and control entitlements so that organizations can stay compliant and achieve least privilege. Global enterprises like Wynn Resorts, Expedia, and Blackstone trust Veza to manage identity security use cases, including privileged access monitoring, non-human identity (NHI) security, access entitlement management, data system access, SaaS access security, identity security posture management (ISPM), next-generation IGA, and Agentic AI identity security. Veza has earned recognition from GigaOm’s ISPM Radar.

  • Agentic AICybersecurityEnterprise Security
News Disclaimer
  • Share