What Veza is
Veza has created a unique graph querying tool associating users to the data they have access to - this extends beyond basic Okta user assignments to include things like sensitive S3 buckets or databases. Alerting can also be configured based on the searches. They also include onboarding/offboarding automations. The vendor site is veza.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Veza covers
Veza is in the catalog for these capabilities. Categories: Identity. Catalog tags: Best for Enterprise.
How to evaluate Veza in a security program
Use Veza as a stack candidate, not as diligence evidence. The oneNorma score for Veza is 6/10 (percentile 83). If the real gap is in Identity, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what veza.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
