Access Intelligence Overview
Formerly Veza | Product Access Intelligence Start catching critical access risks. Identify privileged users, dormant permissions, policy violations, and misconfigurations with over 2,000 pre-built queries. Automate remediation and maintain compliance. Get Buyer's Guide Get Data Sheet
How does Access Intelligence work? Access Intelligence gives your security team the context to prioritize remediation before small gaps become breaches. It covers over 325 systems across cloud, SaaS, on-premises, and custom apps. Every change is logged automatically, creating continuous audit evidence for compliance. Get Data Sheet
Benefits of Access Intelligence Identify risky access See high-risk identities across all systems without mastering AWS IAM, Snowflake, or Salesforce. Video CTA Enforce least privilege Continuously identify and remediate misconfigurations, dormant permissions, and over-privileged identities. Video CTA Reduce the blast radius Automate identity risk detection and remediation, including support for ServiceNow ITSM. Every remediation creates an audit record. Video CTA Transform with a single platform The ServiceNow AI Platform unites AI agents, data, and workflows on one enterprise-grade platform built for scale, trust, and efficiency. Video CTA
Use cases for Access Intelligence Identity Risks
Surface risky access to critical apps Find privileged users, dormant accounts, and policy violations across AWS, Azure, GCP, Okta, Snowflake, Salesforce, and more than 325 systems.
Related links Access Visibility Access Monitoring
Activity Monitoring
Detect privilege creep Find permission drift to expose risk. Then adjust roles across AWS, Azure, GCP, Okta, and Snowflake.
Related links Access Visibility Access Monitoring
Separation of Duties (SoD)
Identify SoD conflicts Find toxic combinations and SoD violations at the permission level, within applications and across platforms.
Related links Access Reviews
Remediation
Automate risk remediation Take direct action on risks. Create tickets in ServiceNow or other ITSM tools, send notifications, disable accounts, and revoke access.
Related links IT Service Management (ITSM) Access Reviews
Incident Response
Respond faster with access context Give incident teams the right context during a breach: who has access to what, what actions they can perform, and how they got those permissions.
Related links Access Visibility Security Incident Response
Compliance
Maintain continuous compliance evidence Satisfy SOX, GDPR, HIPAA, and DORA audits automatically. Every remediation is recorded and reports export instantly without manual work.
Related links Access Reviews Integrated Risk Management (IRM)
"ServiceNow powers our horizontal business workflows, while Veza enforces least privilege and adds identity access intelligence at scale. Together, they'll enable more secure and scalable workflows for enterprise businesses with smarter access management, ongoing access reviews, and seamless deprovisioning. The combined platform will provide a context-rich identity governance framework that will be key in the age of agentic AI." John Stecher Chief Technology Officer, Blackstone
Third-party software integrations Integrate anything with ServiceNow. Bring your existing software investments onto our platform to connect your people, processes, apps, and data. See All Integrations
Resources for you See All Resources research report The State of Identity and Access Report 2026 Extensive datasets on real-world identities, entitlements, and access patterns cross human and non-human identities. Video CTA Get Report WHITE PAPER Identity and Access Security Use Cases Video CTA Get White Paper Solution Brief ISPM Buyer’s Guide Video CTA Get Solution Brief
What the community is saying Your peers have a lot to say about delivering Identity Security. Gartner Peer Insights is the source for unbiased, honest feedback. Read the discussion and start growing enterprise productivity while you knock down silos. See Reviews
Use the ServiceNow ecosystem Explore our learning tools, community, and partner offerings to find the level of support you need. Training and certification Boost your career with a globally recognized ServiceNow certification. Partners Find a ServiceNow partner that has proven expertise to meet your business needs. Product documentation Learn how to use our products, find answers to your technical questions, and explore products by release. Community Join our community to learn, share, and connect with users about ServiceNow solutions.
ServiceNow Impact® Get the support and expertise you need to realize value fast. Achieve success your way with a success plan tailored to you. Learn About Impact
Frequently asked questions Expand All Collapse All What is Identity Security Posture Management (ISPM)?
ISPM helps organizations continuously monitor, score, and reduce identity risk before it leads to an incident. Unlike traditional identity access management (IAM) tools, ISPM provides continuous visibility across people, systems, and AI agent identities, enabling proactive enforcement of least privilege and identity risk controls.
How is the Identity and Access Security different from traditional identity security tools? 
Traditional identity security tools can only see users and groups in a directory. Identity and Access Security goes further. It traverses users, groups, roles, and policies to reveal what each identity can actually do against specific resources across cloud, SaaS, and on-premises systems. You get true effective permissions, not just assigned access, which is the foundation for least-privilege enforcement.
What are effective permissions?
True effective permissions answer the question: "Who has access to what, and what actions can they take?" They tell you what each identity can actually do across your environment in plain English. A user might have access to five systems, but what matters is whether they can read customer data, modify financial records, or delete backups. Traditional identity tools only show you the first part.
What is a blast radius? 
A blast radius is the scope of damage if an identity is compromised. If an identity is compromised, how many systems can it reach? How much data can it access? How many other identities would be affected? Understanding blast radius before an incident happens means you can respond faster and contain damage.
How long does it take to start seeing results? 
You can connect Identity and Access Security to your systems and run your first query within minutes. You can start seeing risk patterns on day one, unlike traditional identity governance tools, which typically require 9 to 12 months to deploy—with heavy professional services—before you see results.
Talk with an expert Connect with our product experts to arrange a custom demo. See how Access Intelligence can work in your environment. Schedule Demo
Home Access Intelligence