What Andromeda is
Andromeda has built a promising solution for making least privileged identity enforcement a reality. They do some discovery, sensitive permission scanning, blast radius building, looking for unused permissions, and JIT access. What makes them unique is AI approval workflows for JIT, and a rich checking for unused permissions. The vendor site is andromeda.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Andromeda covers
Andromeda is in the catalog for these capabilities. Categories: Identity. Catalog tags: Best for MidMarket and Best for Enterprise.
How to evaluate Andromeda in a security program
Use Andromeda as a stack candidate, not as diligence evidence. The oneNorma score for Andromeda is 5.8/10 (percentile 75). If the real gap is in Identity, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what andromeda.security publishes. Contrast it with pentesting and Security Cloud & Compliance.
