Valence Security
Capability scores
Methodology →- Authentication
- 3.0
- SSO & Federation
- 3.5
- Authorization
- 3.5
- Lifecycle & Provisioning
- 2.5
- MFA & Passwordless
- 3.0
- Governance & Audit
- 4.0
- Developer Experience
- 3.5
- Deployment Flexibility
- 3.5
- Pricing Transparency
- 3.0
- Support & Ecosystem
- 3.5
Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.
Overview
Valence Security is a SaaS security posture management platform that focuses on reducing risk from SaaS misconfigurations, over-privileged identities, and risky third-party and OAuth integrations, with automated remediation workflows.
What it is good at
Valence surfaces and helps remediate the messy identity risks that accumulate across SaaS: excessive permissions, dormant accounts, risky app-to-app integrations, and misconfigurations, often with business-user-driven remediation rather than only security-team tickets.
Where it falls short
It concentrates on SaaS posture and integration risk rather than directory or endpoint threat detection, and it is a younger vendor building out its footprint.
Pricing
Quote-based enterprise pricing.
Best for, and who should look elsewhere
Choose Valence to manage SaaS posture and third-party integration risk. Look elsewhere for directory or endpoint ITDR.
Bottom line
A SaaS security posture platform strong on integration and permission risk, complementing directory-focused ITDR.
More ITDR vendors
All ITDR →Related on Start with Identity
- VendorAbove Security
emerging
- VendorAuthMind
strong
- VendorCayosoft
strong
- Comparisoncrowdstrike-falcon-identity-vs-microsoft-defender-identity
Both bring identity threat detection and response (ITDR) to the directory layer, watching Active Directory and Entra ID for attacks like credential theft, later
- Comparisonpush-security-vs-nudge-security
Push watches the browser where logins actually happen. Nudge reads email and OAuth signals to find the SaaS nobody told you about. Both publish a price and both
- Comparisonsilverfort-vs-semperis
Silverfort adds MFA and access policy to systems that could never take an agent. Semperis keeps Active Directory and Entra ID recoverable and monitored. Most ma
By SWI Community Team · Last evaluated 2026-07-03
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.