access-governance
(3)
Veza
Veza is an identity security company that helps enterprises understand and control who can take what action on what data. Its patented Access Graph maps permissions across cloud platforms, SaaS apps, data systems, and infrastructure for human, machine, and AI identities, letting organizations enforce least privilege, automate access reviews, and govern non-human and AI-agent identities. Founded in 2020 and headquartered in the California Bay Area, Veza agreed to be acquired by ServiceNow in a deal announced December 2025.
Lightbeam
Lightbeam is a San Jose-based data security and privacy company that converges DSPM, privacy operations, and AI governance into one identity-centric platform. Founded in 2020 by ex-Nutanix engineers, it uses AI to discover, classify, and map sensitive data across cloud, SaaS, and on-prem environments, tying each data fragment back to the human it belongs to. Customers in banking, healthcare, insurance, and tech use Lightbeam to automate compliance with GDPR, CCPA, HIPAA, and PCI while cutting data risk and controlling AI exposure through tools like Microsoft Copilot, ChatGPT Enterprise, and Google Gemini.
Howard Ting
Howard Ting is the CEO of Opal Security, a San Francisco identity-security company building a unified control plane for access governance. He took the top job in November 2025 after more than five years running Cyberhaven and two-plus decades scaling category-defining security and enterprise-software companies including Palo Alto Networks, Nutanix, Redis, Zscaler, and RSA Security. A marketing-and-product operator who once demoed Azure Active Directory on stage with Bill Gates, Ting now bets that the hardest unsolved problem in security is authorization: deciding what any human, service, or AI agent should be allowed to do, and for how long.