User Management · Reviewed 24 Oct 2026

Lumos

AI-driven identity governance platform for access reviews, requests, and security.

free tier · lumos.com ↗

Paid against free › User Management › Lumos

Lumos at a glance

Overview

01

Summary

The useful answer before the supporting detail.

Lumos is an identity governance and administration platform that uses AI agents to automate access reviews, self-service access requests, and identity security S91. It serves security and IT teams who need to manage human, machine, and AI identities across SaaS, cloud, and on-premises systems, reducing manual effort and compliance risk S1 S15. The platform's practical value lies in accelerating audits, enforcing least-privilege access, and providing continuous governance through AI-driven recommendations S15 S91.

02

Product identity and positioning

Name, category, positioning, audience, and first-party claims.

  • Identity: Lumos is an identity governance and administration (IGA) platform with an AI agent named Albus S1 S91.
  • Core purpose: It solves the problem of fragmented identity data and manual access reviews, which are slow and error-prone S15 S1.
  • Intended users: Security, IT, and identity teams in enterprises that need to manage access for employees, contractors, and non-human identities S1.
  • Product scope: It is a platform that includes access reviews, self-service access requests, and AI-driven governance workflows S1 S8 S15.
  • Positioning: Lumos positions itself as rebuilt for the agentic era, with agents that continuously govern access S91.
  • Claimed distinction: It claims to be the first identity agent for agentic IGA, with AI that explains every recommendation S1.
03

Use cases and audiences

Who the product serves and the jobs it is designed to handle.

AudiencePractical use case
Security teamsAutomate user access reviews for compliance frameworks like SOC 2, SOX, and ISO 27001 S15.
IT teamsReduce ticket volume by enabling self-service access requests and automating approvals S8.
Compliance officersGenerate audit-ready evidence and maintain least-privilege enforcement S15.
EmployeesRequest just-in-time access to apps without waiting on IT tickets S8.

Features

09

Features and capabilities

Core functions and evidence-backed product capabilities.

CapabilityWhat it does
AI-driven access reviewsAlbus automates access reviews by flagging anomalies and SoD violations, and pre-filling justifications, so reviewers focus on decisions needing human judgment S1 S15.
Self-service access requestsEmployees can request just-in-time access from AppStore, Slack, Teams, CLI, or ITSM, with automatic approval and revocation S8.
Segregation of Duties (SoD) enforcementAlbus checks each request against SoD policies before access is granted, catching conflicts early S8.
Entitlement-level visibilityLumos provides granular visibility across IdP, HRIS, ITSM, SaaS, cloud, and on-prem systems, not static exports S15.
Audit-ready reportingGenerates evidence-backed reports formatted for SOC 2, SOX, ISO 27001, ready for auditors S15.
Lifecycle managementLifecycle events flow from HRIS, automating access changes for joiners, movers, and leavers S91 S1.
Non-human identity (NHI) governanceMonitors service accounts, keys, and tokens, and discovers MCP servers to flag unapproved access S91.
10

Integrations and ecosystem

Connected products, exports, APIs, and workflow compatibility.

Integration or interfaceTypeWhat it enables
IdP, HRIS, ITSM, SaaS, cloud, on-prem systemsIntegrationProvides entitlement-level visibility across systems S15.
SlackIntegrationNotifies reviewers and allows access requests from Slack S15 S8.
Microsoft TeamsIntegrationAllows access requests from Teams S8.
CLIInterfaceAllows access requests from command line S8.
ITSMIntegrationAllows access requests from ITSM tools S8.
SAMLProtocolSupports SSO and identity federation S32.
MCP serversIntegrationDiscovers and catalogs MCP servers connected across the org S91.

Pricing

11

Pricing and plans

Published plans, free access, trials, credits, and pricing limitations.

Plan or offerVerified price and billingIncludedLimits
Lumos platformContact sales S1Not establishedNot established
Free identity assessmentFree S1Identity assessmentNot established

Competition

12

Competitive landscape

Domains competing for the same organic search demand.

Sampled competitors

CompetitorFirst-page appearancesSampled queriesAverage positionQueries observed
linkedin.com223.5lumos, it strategic consulting
lumosfiber.com111lumos
strategyand.pwc.com111it strategic consulting
corsicatech.com112it strategic consulting
consulting.us113it strategic consulting
apps.apple.com114lumos
lumos-pharma.com115lumos
datatechitp.com115it strategic consulting
revenuebase.ai116it strategic consulting
instagram.com117lumos

Website intelligence — Collected evidence

Customers, testimonials, and first-party review claims

No supporting public-page evidence was collected for this category.

Independent review sources discovered

No links to supported independent review platforms were discovered on the collected pages.

14

AI visibility

Measured ChatGPT and Google AI mentions with cited sources.

AI-assistant referral traffic

  • Estimated current generative-AI referral share: 0.9%
MonthSource
—All AI assistants

Website intelligence — Collected evidence

Site-stated AI capabilities

Page typeEvidenceSource
otherLumos rebuilt identity for the agentic era, giving you agents that continuously govern access for every human, NHI, and AI in your business, so you stay safe and move fast.https://www.lumos.com/
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/product-tours
featuresDownload the Lumos datasheet to see how one identity platform governs human, machine, and AI agent access and controls every agent action.https://www.lumos.com/download/lumos-platform-mcp
featuresEvery AI agent you deploy acts with access someone already granted. That could be an employee's account, a service account key, or an API token. Lumos manages the access people, machines, and agents hold. It controls what agents do with that access. It also gives your identity team its own agents to do the work.https://www.lumos.com/download/lumos-platform-mcp
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/download/lumos-platform-mcp
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/product-tours/appstore
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/product-tours/mcp-governance
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/product-tours/non-human-identities
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/product-tours/role-based-access-control
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/product-tours/user-access-reviews
featuresAn AI identity agent is more than just a chatbot. It is an intelligent, automated assistant that executes tasks. While standard tools wait for you to click buttons, an agent actively analyzes access data, detects anomalies, and recommends policy improvements in real-time.https://www.lumos.com/solutions/agentic-ai-security
featuresChatbots answer questions; agents take action. Standard AI might tell you how to revoke access, but Albus can actually stage the revocation for you with supporting evidence. It connects to your HRIS, IdP, and SaaS apps to execute complex workflows — like drafting RBAC policies or cleaning up dormant accounts — moving you from insight to autonomous action.https://www.lumos.com/solutions/agentic-ai-security
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/solutions/agentic-ai-security
featuresLumos unifies all of these into a single platform, allowing organizations to automate and orchestrate identity governance across 300+ apps with AI-powered insights and Slack-native workflows.https://www.lumos.com/solutions/identity-governance
featuresThe role of IGA is to ensure secure, compliant, and efficient access to resources across an organization. It enables IT and security teams to manage the entire identity lifecycle, enforce access policies, reduce overprovisioning, and streamline audits. With Lumos, the role of IGA expands: integrating automation, visibility, and AI into one unified platform that transforms identity governance from a manual chore into a strategic advantage.https://www.lumos.com/solutions/identity-governance
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/solutions/identity-governance
featuresAutomate posture reporting with AI-built dashboards and one-click reporting to stakeholders, executives and auditors. Detect and report risky users, orphaned accounts, and terminated users using advanced analytics.https://www.lumos.com/solutions/identity-security-posture
featuresSee every tool call your AI agents make, and control which ones go through.https://www.lumos.com/product-tours
featuresGovern every human, machine, and AI in your business with a free identity assessment today.https://www.lumos.com/product-tours
featuresThe autonomous identity platform. Agents that continuously govern access for every human, machine, and AI.https://www.lumos.com/product-tours

These are first-party product claims, not independent measurements of AI-search visibility.

15

Marketing opportunities

Actions calculated directly from the collected evidence.

OpportunityRecommended actionEvidence
Competitor gap2 first-page appearances across lumos, it strategic consulting

Website intelligence — Collected evidence

Website evidence gaps

  • integrations: no usable public page was collected; verify whether the site publishes this evidence.
  • customers: no usable public page was collected; verify whether the site publishes this evidence.
  • reviews: no usable public page was collected; verify whether the site publishes this evidence.
  • changes: no usable public page was collected; verify whether the site publishes this evidence.
  • identity: no usable public page was collected; verify whether the site publishes this evidence.
  • technical: no usable public page was collected; verify whether the site publishes this evidence.

Trust and proof

16

Customers, proof, and reviews

Published proof, customer signals, and review evidence.

Independent reviews

PlatformPageHow it was foundNote
Should I Use ItZluri vs Identity Management for the Agentic Era / Lumos 2026: Which Is Better? / Should I Use ItGrounded web searchfor the Agentic Era / Lumos lumos.com Analyzed September 24, 2026 Depends Confidence: Low Lumos is an enterprise identity governance platform for mid-size and large IT teams drowning in access reviews, SaaS sprawl, and non-human identity governance.
LutrilConductorOne (C1) vs Lumos vs Zluri: SaaS access governance compared – LutrilGrounded web searchwith agents that continuously govern access for every human, machine and AI. Albus and an Identity Agent Force run access reviews, JIT grants, role mining and NHI ownership; an AppStore handles self-service requests; MCP Governance checks agent tool calls
lumos.comIdentity Management for the Agentic EraGrounded web search# Identity Management for the Agentic Era Control access so humans, NHIs, and AI agents don't become your next breach. Get a Demo ... ### Use autonomous systems to defend yourself. Each agent runs an entire workstream so your team can focus on strategy, not operations. ... ## Every use case. Managed by agents. From access reviews to NHI governance, Lumos manages the full surface of enterprise identity. Augment your current system with one use case, or modernize your identity program with the ful
lutril.comLutril vs Lumos – LutrilGrounded web searchidentity platform for mid-market and enterprise companies of 200 employees and up, with agentic access reviews and Slack requests. Lutril is access governance for employees and AI agents, in Slack, Teams and the app UI, hosted in the EU, with an MCP
lutril.comBest access management tools for SaaS apps in 2026: Lumos, Zluri, Torii, BetterCloud, AccessOwl and Lutril – LutrilGrounded web searchera, from an autonomous identity platform for companies of 200 employees and up: agentic access reviews, Slack requests with time-boxed grants, HRIS-driven lifecycle, NHI ownership and MCP Governance for agent tool calls. 300+ integrations, US-based.
lutril.comBest identity governance (IGA) tools for a fast-growing startup: Lumos, C1, Okta Identity Governance, SailPoint and Lutril – LutrilGrounded web searchthe agentic era, from an autonomous identity platform for companies of 200 employees and up: agentic access reviews, Slack requests, HRIS lifecycle, NHI ownership and MCP Governance for agent tool calls. Says a small team may find it more than it needs.

Customer proof

No named customers, testimonials, or customer case studies were found.

Independent mentions

  • Identity Management for the Agentic Era — # Identity Management for the Agentic Era Control access so humans, NHIs, and AI agents don't become your next breach. ... the full surface of enterprise identity. Augment your current system with one use case, or modernize your identity program with the
  • Lumos (@lumosidentity) — Identity Management for the Agentic Era (backed by @a16z @Neo @scalevp) San Francisco, CA lumos.com ... continuously govern access for every human, NHI, and AI in your business, so you stay safe and move fast.
  • parse.gl — AI summary Lumos provides a platform for identity governance and security that coordinates humans, non-human identities, and agents to manage access, provisioning, and risk remediation. ... .g2.com/compare/google-cloud-identity-access-management-iam-vs-
  • Lumos Hiring Surge: AI Engineer Roles Spike on Job Board / Zero G Talent — capital and momentum are directed toward a product vision the company calls "Identity ... : as organizations deploy AI agents that act autonomously across SaaS estates, the identity layer must shift from static role assignments to continuous, policy

External links were grounded in one live web search. Search snippets are leads, not independently scraped page content; rejected links remain available in Review evidence.

17

Company, security, and trust

Ownership, policies, security signals, and public trust evidence.

SignalFindingSource
Company and ownershipNot published on the collected pages.—
Contact and supportNot published on the collected pages.—
Legal and privacyThis centralized management simplifies provisioning and deprovisioning, ensures consistent enforcement of security policies, and supports regulatory compliance frameworks such as SOC 2, ISO 27001, and GDPR.source
Security and complianceWith Albus validating every step, Lumos generates evidence-backed reports formatted for SOC 2, SOX, ISO 27001, and more, ready to hand to an auditor without extra assembly.source
Uptime and status pageNot published on the collected pages.—
Domain registered1996-09-17—
Domain expires2032-09-16—

Not found on the collected pages: company and ownership, contact and support, uptime and status page. This only means Scout did not find it on the pages it read; it says nothing about the company itself.

18

Documentation and product updates

Help resources, product guidance, and visible changes over time.

Resource or updateTypeWhat is availableDate or freshness
How To Create an Offboarding Plan / LumosGuideLearn how to develop an effective and efficient offboarding plan and how the right tools can make all the difference. (source)Not dated
IT Communication Strategy: How to Build an IT Communication Plan / LumosGuideAn effective IT communication strategy and plan is critical to the success of your IT initiatives. This comprehensive guide covers key benefits, challenges, actionable steps, and essential tools to build a communication plan. (source)Not dated
User Access Review (UAR) Software / 7x Faster Audits / LumosChangelogPublic product change history. (source)Not dated
Security Assertion Markup Language: What is SAML and How Does it Work? / LumosSupportPublic contact and support channel. (source)Not dated
IT Communication Strategy: How to Build an IT Communication Plan / LumosRoadmapPublic product roadmap. (source)Not dated

Not found in the collected public sources: status page, separate help center or knowledge base.

Technical

19

Technical and delivery signals

Delivery model, platforms, API, data ownership, reliability claims and release activity.

SignalFindingSource
Delivery model (cloud, self-hosted, desktop, browser extension)Lumos is a cloud-based platform, as indicated by its web app and SaaS integrations S91 S15.S91 S15
Platforms and appsWeb-based platform; accessible via Slack, Teams, CLI, and ITSM S8.S8
API and extensibility (API, SDK, webhooks, MCP, plugins)Supports MCP server discovery and integration S91.S91
Data ownership and exportNot published on the collected pages.—
Performance and reliability claimsClaims to accelerate access reviews by up to 70% and reduce standing access by 80% S91.S91
Release activityNot published on the collected pages.—
20

Measured infrastructure

Domain, certificate, and hosting signals, measured directly.

SignalFinding
Domain registered1996-09-17 — Squarespace Domains II LLC
Domain expires2032-09-16
First archived1999-11-15 — web archive
TLS certificateGoogle Trust Services, valid, expires 2027-01-07
Security headersHSTS, CSP, X-Frame-Options
Headers not servedX-Content-Type-Options, Referrer-Policy
Server headercloudflare
Mail handled byaspmx.l.google.com, alt1.aspmx.l.google.com
Nameserversns-1990.awsdns-56.co.uk, ns-249.awsdns-31.com

Not measurable: rdap: exceeded the overall budget; wayback: exceeded the overall budget; tls: exceeded the overall budget; dns: exceeded the overall budget; headers: exceeded the overall budget. A gap here means the lookup was unavailable, not that the finding is negative.

21

Technical site audit

A bounded multi-page crawl with page-level issues and URLs.

Scout — Bounded technical crawl

  • Pages crawled: 15 of 15 maximum
  • Technical health: 97/100
  • Critical issues: 0
  • Warnings: 7
  • Notices: 5

Issues

SeverityIssueValueAffected URL
noticeMeta description length should be reviewed172https://www.lumos.com/
noticeMeta description length should be reviewed172https://www.lumos.com/
noticeMeta description length should be reviewed172https://www.lumos.com/product-tours
warningTitle length should be reviewed69https://www.lumos.com/products/albus
noticeMeta description length should be reviewed179https://www.lumos.com/products/appstore
warningTitle length should be reviewed67https://www.lumos.com/products/lifecycle-management
warningPage should have one primary H12https://www.lumos.com/demo-request
noticeMeta description length should be reviewed178https://www.lumos.com/solutions/identity-governance
warningDuplicate title in audit sample2https://www.lumos.com/
warningDuplicate title in audit sample2https://www.lumos.com/
warningDuplicate meta description in audit sample2https://www.lumos.com/
warningDuplicate meta description in audit sample2https://www.lumos.com/

Crawled pages

StatusTitleH1sWordsResponseURL
200Identity Management for the Agentic Era \Lumos1159242 ms
200Identity Management for the Agentic Era \Lumos1159227 ms
200Lumos Product Tours \Lumos161833 ms
200Albus: Automate Identity Governance with Identity Agent Force \Lumos1141335 ms
200Identity Agent Force: AI Agents for Identity Governance \Lumos1118063 ms
200MCP Governance: Control AI Agent Tool Calls \Lumos1129653 ms
200Lumos AppStore \Just-in-Time, Self-Service Access Requests1152819 ms
200User Access Review (UAR) Software \7x Faster Audits \Lumos11425
200Lifecycle Management \Joiner-Mover-Leaver (JML) Automation \Lumos11434
200Tech Stack Integrations \Lumos Integrations194147 ms
200Schedule a Demo: Autonomous Identity Governance219124 mshttps://www.lumos.com/demo-request
200NHI and MCP Governance for AI Agents \Lumos1169633 ms
200The Best Identity Governance (IGA) Software Solution \Lumos1132061 ms
200Identity Security Posture Management (ISPM) \Lumos1113752 ms
200Agentic AI Security \Lumos1117639 ms

This is a bounded Scout crawl. Core Web Vitals and Lighthouse scores are not claimed unless a dedicated performance audit is connected.

22

Search Console and Analytics

First-party search and behavioral data connection state.

Modeled acquisition channels

ChannelEstimated share
direct25.2%
search39.5%
search organic36.6%
search paid2.9%
social20.5%
social organic20.4%
social paid0.1%
referrals10.9%
paid referrals0.9%
mail1.9%
gen ai0.9%
affiliate0.1%
other0.0%

First-party connections

IntegrationStatusData available after connection
Google Search ConsoleNot connectedClicks, impressions, CTR, average position, queries, pages, countries, and devices
Google AnalyticsNot connectedOrganic sessions, engagement, landing pages, conversions, geography, and devices

No first-party Search Console or Analytics numbers are shown until the site owner authorizes the corresponding Google account. Scout traffic model values above are modeled estimates, not private analytics totals.

Limits and method

23

Limitations and open questions

Known constraints and missing evidence from the collected pages.

The collected pages do not mention specific competitors. Evidence gaps include lack of detailed pricing, customer list, and independent reviews. Open questions remain about deployment options (self-hosted vs. cloud) and data export capabilities.

24

Sources, method, and limitations

Evidence inventory, collection method, provider use, and constraints.

This report is based on 15 collected pages from lumos.com, including product pages, a pricing page, and an educational article. The evidence catalog includes static and rendered pages, with external proof search performed. Limitations: no independent reviews or detailed pricing were collected; some claims are marketing statements without third-party verification.

Paid against free, in your inbox

One job at a time: the paid tools worth paying for, the free ones you can run yourself, and who should pick which.

No tracking pixels. One click to leave. We use your address to send Stack Radar and nothing else. Privacy.