Veza, the pioneer in identity security, has announced a major expansion of its platform with the introduction of Veza Access Agents—a suite of purpose-built AI agents designed to automate complex identity and access governance tasks for enterprises. The company also unveiled significant advancements in its AI Agent Security capabilities, delivering deeper visibility, risk assessment, and control over third-party AI agents, large language models (LLMs), AI applications, and infrastructure such as Model Context Protocol (MCP) servers.
As enterprises accelerate adoption of agentic AI to improve efficiency, the volume and complexity of identity-based access have reached critical levels. Traditional identity security approaches focus primarily on authentication and permissions, but attackers increasingly exploit authorized access to cause damage undetected. The emergence of autonomous AI agents—potentially outnumbering human users significantly—introduces new governance and risk challenges at machine scale.
Veza’s innovations shift the paradigm from static access controls to intelligent, automated governance that contextualizes, enforces, and validates identity and permissions in real time.
Veza Access Agents leverage the Veza Access Graph to deliver an interactive, natural language experience for identity teams and agentic AI programs. Hosted on AWS Bedrock with dynamic model selection (Claude, Opus, Sonnet), agents ensure high-quality, compliant responses tailored to task complexity.
The first wave of agents includes:
“Identity is a foundational element in security, especially in the era of autonomous AI. We are on the cusp of having trillions of AI agents. And we believe that identity Security for AI Agents is an unsolved problem,” said Tarun Thakur, Co-Founder and CEO of Veza. “Veza’s Access Graph harnesses the power of identity and permissions data across enterprise systems, to help organizations understand who and what can access what data. This enables enterprises to visualize, govern, and manage access across humans, non-human identities, and AI agents to data. With the introduction of Veza Access Agents, we are shifting the burden of access security and access governance tasks from a manual effort to intelligent, automated reasoning – this lays the foundation to enforce deterministic policies for agents at machine speed towards our vision of Veza as the Enterprise Agent Identity Control Plane.”
Veza has strengthened its AI Agent Security module to address identity risks from external and internal AI entities. Key updates include:
These capabilities provide organizations with proactive governance over the expanding AI ecosystem, reducing unmanaged risks while supporting compliance and least-privilege principles.
“Identity security for AI agents is one of the most urgent and unsolved challenges in cybersecurity today," says Phil Venables, cybersecurity leader, partner at Ballistic Ventures, and former CISO, Google Cloud. "As organizations move toward a future where AI agents may outnumber humans by 80 to 1 or more, the question of permissions and authorization becomes mission-critical. Without clear governance, visibility, and control, AI agents introduce a new layer of risk at machine scale. Veza Access Agents addresses this head-on, bringing the same rigor, policy intelligence, and authorization discipline we expect for human identities to the rapidly expanding ecosystem of AI agents.”
Veza Access Agents are currently available in early access to select customers, with general availability expected by the end of Q2 2026. The platform’s hybrid architecture and AWS Bedrock foundation ensure enterprise-grade security, privacy, and audit transparency.
About Veza
Veza is the leader in identity security, helping organizations secure access to data across the enterprise. Veza’s Enterprise Agent Identity Access Platform goes beyond IAM and identity governance and administration (IGA) tools to visualize, monitor, and control entitlements so that organizations can stay compliant and achieve least privilege. Global enterprises like Wynn Resorts, Expedia, and Blackstone trust Veza to manage identity security use cases, including privileged access monitoring, non-human identity (NHI) security, access entitlement management, data system access, SaaS access security, identity security posture management (ISPM), next-generation IGA, and Agentic AI identity security. Veza has earned recognition from GigaOm’s ISPM Radar.