How Veza works
Complete visibility and control into who has access to what
Veza’s agentless solution integrates with your key enterprise resources and translates highly complex system-specific authorization structures (rows, groups, policies, permissions) into a common language of effective permissions to address data security use cases.
Search
An real-time search interface to identify authorization metadata for any entity (e.g. Okta users and groups, AWS IAM policies or roles) and its full set of effective permissions to apps and data objects (e.g. Snowflake tables, SharePoint libraries, SQL Server tables, HashiCorp Vault and more).
Query Builder
A query interface that enables complex filtering and sorting to handle the largest data sets, allowing you to identify entities (humans, services, groups, roles, etc.) and privileged actions that can be performed on any resource.
Instant answers to the toughest data access questions
Understanding the scope of data access across your enterprise is tough, especially when you have a combination of cloud and on-prem data stores all accessed by different identities. Veza gives you insights into least privilege, cloud entitlements, cloud misconfigurations, data access governance and more.
Insights
Out-of-box assessments that address privacy and compliance needs tied to identity analysis, AWS IAM Role modeling, Azure AD Role governance, GCP and AWS Cloud IAM misconfigurations, audit reviews, compliance reviews, and least privilege reviews.
Violations
Surface anomalous activity across all your systems, and receive alerts when meaningful changes in authorization structures (roles, groups, IAM roles, IAM policies, etc.) are detected. Violations are entirely extensible, enabling you to utilize best practices defined in Veza or develop and monitor your own to match your business needs.
Manage authorization for custom resources with our Open Authorization API
You don’t need to be all-in on the cloud to utilize the power of Veza. If you have a custom on-prem or homegrown app - for example, a customer service or support app that holds sensitive data, our Open Authorization API (OAA) enables a BYO-app model to ensure you have authorization covered across all enterprise resources.
Manage data security risk through remediation
Managing least privilege is foundational in preventing attacks from insider threats, ransomware, and cybercrime. Veza is here to ensure access to your data is always limited to an authorized set of users and services, across any resource.
Rules
Enable active alerting and monitoring of authorization changes in your environment through rules that trigger alerts to enterprise IT systems.
Recipes
Actionable steps presented via system-specfic instructions to maintain policy compliance and fix violations that breach best practices across data access, privileged access, access governance and more. Recipes also provide details about the side effects of proposed solutions that help determine what constitutes a successful change.
More features to keep your data secure
Heatmaps
A visual representation of access permissions, giving security teams insight into the attack surface for any resource.
Entity Catalog
A catalog of all discovered resources (apps, data systems, accounts) and associated attributes.
Tags
Enable security and data teams to add key-value pair attributes to any discovered entity. Using Tags, teams can assign, clarify search for sensitive resources and associate those to identities and service accounts.
Veza APIs
Extend the power of Veza's authorization insights by sending notifications to key enterprise apps
Bring your own app or resource with Veza’s Open Authorization API (OAA)
If a critical business system in your organization is not yet cloud-ready or doesn’t yet integrate directly with Veza, bring in new apps through OAA, giving you an even more comprehensive answer to who can and should take what action on what data.
Connect Veza with your enterprise stack
Ensure your teams are notified when authorization changes occur. Utilize Webhooks to enable business processes such as updating an issue tracker in JIRA, creating a service desk ticket through ServiceNow, or sending Slack notifications to your SecOps team.
Get started with a demo
Schedule a demo to learn how Veza addresses your data security use cases across data governance, data access control, privileged access, and much more.