🔮Access AI

Revolutionizing identity security with generative AI - natural language queries, semantic search, and intelligent insights

Access AI is now available for Veza customers. Contact your account team to enable Access AI capabilities in your environment and begin transforming how your organization approaches identity security.

Revolutionizing Identity Security with Generative AI

Veza Access AI represents a paradigm shift in identity and access management, combining the power of Generative AI with Veza's unified Access Graph to democratize identity security across your organization. By enabling natural language interactions and intelligent automation, Access AI transforms complex access relationships into actionable insights that both technical and business teams can leverage.

Introducing Access AI

In today's enterprise environment, understanding "who has access to what" involves navigating intricate webs of relationships across hundreds of systems. A single identity might connect to critical resources through multiple paths involving SSO providers, directory services, cloud IAM roles, and local permissions. Traditional approaches require deep technical expertise and manual analysis, creating barriers to effective security governance.

Access AI eliminates these barriers by democratizing Access Intelligence for business users, and accelerating risk discovery with AI-powered analysis for hidden access patterns and potential threats.

Key Capabilities

• Natural Language Queries: Transform complex technical questions into simple conversational queries:

  • Attribute-driven: "Show me Okta Users who have MFA disabled and can read from AWS S3 buckets"

  • Conditional scenarios: "Show me Okta users who have access to AWS S3 buckets via Okta Group memberships"

  • AND/OR conditions: "Show me Azure AD users who are guests and who have administrator roles"

• Intelligent Risk Detection: AI-powered analysis identifies patterns humans might miss: dormant permissions, unusual access paths, and separation of duties violations

• Role Intelligence: Tailored least privilege recommendations for Access Requests and Lifecycle Management, simulating access impact and suggesting entitlements based on existing patterns

Understanding Access AI vs Core Veza Features

Access AI is an enhancement layer that makes Veza's powerful identity security capabilities more accessible through generative AI. The core Veza platform provides products and features including:

• Access Graph: Map of all identity relationships in your environment

• Access Intelligence: Insights, dashboards, and analytics using VQL

• NHI Security: Discovery and management of all non-human identities (service accounts, API keys, etc.)

• Access Reviews: Governance workflows for access certification campaigns

Access AI augments and extends core Veza services with the latest technologies:

• Natural Language Interface: Query complex relationships without technical expertise

• Semantic Search: Intent-based discovery beyond keyword matching

• Intelligent Insights: AI-powered risk detection and pattern recognition

Note: Standard NHI discovery and management is a core Veza feature available to all customers. Access AI adds GenAI capabilities on top of these foundations. For more on NHI management with Veza, see NHI Security.

Core Technologies

🎯 Generative AI Engine

Advanced language models (Sonnet, Haiku, Mistral) orchestrated through LangGraph for context-aware understanding, intelligent VQL translation, and reduced hallucinations through careful prompt engineering

🌐 Universal Search

Intuitive natural language discovery that surfaces related queries and dashboards with minimal input, understanding nuance like negations and access patterns to enhance Query Builder and Graph exploration

Architecture Overview

Access AI is built on three essential layers, each requiring specific security controls:

Layer	Components	Security Focus
Model Layer	OpenAI, Azure OpenAI, AWS Bedrock, Custom Models	Access governance, usage policies, prompt security
Infrastructure Layer	Vector databases (pgvector), Embedding storage	Data integrity, access controls, audit trails
Application Layer	Custom applications, Integrations	Identity management, permission scoping, activity monitoring

📚 Technical Resources

Applications of Gen AI for Identity Security

17-22 minute deep dive by Shanmukh Sista exploring how Veza Access AI works under the hood, including VQL design, prompt engineering, and our agentic framework

Universal Search Powered by AI

4-5 minute guide to semantic search capabilities that understand intent beyond keywords to surface relevant queries and insights

Model Context Protocol (MCP) Security

10-13 minute analysis by Maohua Lu, Shanmukh Sista, and Tarun Thakur on securing AI agent connections to enterprise systems

Trust as the Foundation for Agentic AI

5-7 minute framework by Dr. Maohua Lu for end-to-end security across the AI lifecycle