Lumos

Overview

Lumos combines an internal app store, self-serve access requests, and AI-driven access reviews into what it positions as autonomous identity governance (IGA) for the SaaS era. Founded in 2020, it aims to cut the IT ticket load of access management while giving security teams visibility and control over who has what.

What it is good at

The self-service app store and automation are the differentiators. Employees request access through a familiar catalog, approvals and provisioning flow automatically with guardrails, and access reviews are largely automated, which reduces both ticket volume and rubber-stamped certifications. As a bonus, Lumos surfaces unused licenses and SaaS spend, so the same access data drives cost savings, a pitch that resonates with both IT and finance.

Where it falls short

Lumos is newer and SaaS-centric, so deep provisioning connectors for legacy on-premises systems and the certification depth of the established suites are still maturing. Authentication and MFA are out of scope. Estates with heavy legacy dependencies, or buyers wanting a long-established platform, should weigh that gap.

Pricing

Subscription, quote-based. Because it also drives SaaS-spend savings, weigh the net cost with the TCO calculator.

Best for, and who should look elsewhere

Choose Lumos for SaaS-heavy companies wanting self-serve access, app discovery, and autonomous reviews. For the governance-and-JIT alternative, see ConductorOne vs Lumos; for access visibility, see Veza; for enterprise incumbents, see SailPoint vs Saviynt.

Bottom line

A compelling modern governance and access-request layer for SaaS-heavy companies, pairing self-service with autonomous reviews, less suited to legacy-heavy estates.