February 2026 Summaries

Veza's 2026 State of Identity and Access Report highlights significant challenges in identity and access management, revealing that an average enterprise worker holds 96,000 entitlements, with 38% of IdP accounts dormant and only 55% of permissions deemed safe and compliant. The rise of AI agents and non-human identities (NHIs) has intensified identity-based attacks, yet only 26% of organizations have comprehensive AI security governance. To address these issues, Veza has introduced Access Agents that leverage the Veza Access Graph and AWS Bedrock to automate identity security tasks. These agents include the Veza Prompt Agent, Veza Access Search Agent, and Veza Access Review Agent, each designed to enhance insights, visualize complex permission relationships, and streamline access reviews. Additionally, Veza is expanding its AI Agent Security capabilities to offer deeper visibility and control over AI agents and infrastructure, introducing features such as AI Blast Radius Visualization and AI Security Posture Management. Organizations are urged to treat NHIs and AI agents as first-class identities by integrating identity controls, building robust monitoring, and enforcing mechanisms across all control planes, with Veza serving as the central Enterprise Agent Identity Control Plane.

Veza's 2026.1 release introduces comprehensive enhancements to tackle identity risks across cloud, SaaS, and on-premises systems, addressing the challenges posed by the proliferation of both human and non-human identities. Key features include customizable Access Reviews that integrate with Microsoft Teams, allowing for seamless notifications and compliance scheduling, alongside Risk Profiles that categorize authorization risks by business impact to prioritize remediation efforts. New integrations with platforms like DevRev and Grafana expand governance capabilities into development and observability workflows, while enterprise enhancements improve Access Graph visibility across identities. The release also includes dashboard remediation actions via Jira, ServiceNow, or Slack to streamline the remediation process, as well as lifecycle management updates that extend identity source coverage with ServiceNow and Azure AD Sync capabilities. Additionally, enhancements in query building, administrative controls, and usability improvements aim to provide a more efficient and intuitive user experience, supporting the broader goal of enhancing identity governance and security in modern enterprises.