No more typing reviews! Try our Samantha, our new voice AI agent.

Scytale vs Veza comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Scytale
Ranking in GRC
24th
Average Rating
5.0
Reviews Sentiment
4.5
Number of Reviews
2
Ranking in other categories
IT Vendor Risk Management (20th), AI Legal & Compliance (11th)
Veza
Ranking in GRC
23rd
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
4
Ranking in other categories
Identity Management (IM) (18th), Privileged Access Management (PAM) (23rd), SaaS Security Posture Management (SSPM) (9th), Non-Human Identity Management (NHIM) (7th), Identity Security and Posture Management (ISPM) (3rd)
 

Mindshare comparison

As of November 2026, in the GRC category, the mindshare of Scytale is 0.9%, up from 0.0% compared to the previous year. The mindshare of Veza is 0.8%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Mindshare Distribution
ProductMindshare (%)
Veza0.8%
Scytale0.9%
Other98.3%
GRC
 

Featured Reviews

reviewer2814822 - PeerSpot reviewer
CEO at a tech vendor with 11-50 employees
Sudden access suspension has disrupted compliance work and raises serious trust concerns
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the system and sent a contract to us in full knowledge of what we do as a business. Compliance is a very broad word; we provide compliance into nonprofits, housing associations, markets that these guys do not serve. Somebody inside Scytale likely thought, "Oh my God, these guys must be competitive, so let's just cut them off." I'm assuming that's what happened, but there was no explanation, nothing. Scytale did not help me streamline my compliance processes. It didn't really identify gaps. There was no gap analysis in there that we could see. I didn't really get that far to use the effectiveness of Scytale's real-time insights in identifying potential compliance issues. All my experiences with Scytale have been negative. We haven't used the automated evidence collection of Scytale. Scytale has not helped me allocate resources more efficiently for compliance; it's been the opposite experience. We have put six months of effort into looking at the controls on 27001, talking about auditors, getting audit-ready, and so forth. But we've invested significant time, which has now been a complete waste of time. Scytale is not only unreliable, considering they can suspend access without any notice or formal reason, but this lack of stability results in serious concerns about their dependability as a partner. If they can do that without explanation, my fear is that even if they switch it on again, who's to know in three months' time that the same thing couldn't happen again?
Guddeti Srikanth - PeerSpot reviewer
Senior Consultant at Capgemini
Identity visibility has improved and access governance supports least-privilege decisions
I wouldn't say major drawbacks, but there are a few minor challenges and limitations to consider. Veza provides significant value for identity security and access governance, but one of the main challenges is the initial implementation and integration process, particularly in organizations with complex environments, multiple cloud platforms, and a larger number of applications.Connecting different systems and ensuring that identity and permissions data is collected accurately required careful planning, technical coordination, and collaboration between security, IT, and application teams. Regarding its governance and security, my experience has not been very comprehensive, but the security approach is valuable because the AI-driven security insights need to operate with a clearer framework of access control, accountability, and data protection.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Scytale has positively impacted my organization by giving us the ability to really educate our employees and make them aware, providing them more situational awareness when it comes to cybersecurity."
"The processes I participated in during the setup of Scytale were straightforward; it was acceptable and fine."
"It's the only current GRC vendor with licensing rights for HITRUST 11.3 framework, and I've avoided expensive HITRUST licensing costs through a custom control framework."
"One of its strongest features is the ability to provide a clearer picture of who has access to critical applications, cloud platforms, infrastructure, and sensitive data."
"Veza has positively impacted my organization by improving access for our users, allowing us to check the user and perform auditing for our system or organization, and we are now able to implement least privilege practices, which has made our organization and system more secure."
"In one dashboard or one place, I can see all the company's identity."
 

Cons

"Scytale can be improved by making the interface a bit more consistent in most areas of the platform, as sometimes it can be confusing, and some information can be inaccessible or cut off."
"Scytale is not reliable at all; not stable. You would be unwise to put a mission-critical function like ISO 27001 on Scytale."
"I wouldn't say major drawbacks, but there are a few minor challenges and limitations to consider."
"The support experience could be better."
"Veza can be improved as it is currently not suitable for small projects due to its high cost, complex setup, and requirement for more integration with multiple systems."
"In Veza, there is some scope for improvement, as I can see that custom integration is not easy."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
26%
Construction Company
22%
Healthcare Company
8%
Wholesaler/Distributor
6%
Financial Services Firm
12%
Outsourcing Company
12%
Manufacturing Company
9%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What needs improvement with Scytale?
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the sys...
What is your primary use case for Scytale?
My usual use case for Scytale is for ISO 27001 compliance.
What advice do you have for others considering Scytale?
We're going to sue Scytale, and we're going to sue Amazon as well because they're technically the people we're paying. My feedback on Scytale is that it's terrible. Currently, i...
What is your experience regarding pricing and costs for Veza?
My experience with Veza's procurement process was very positive and relatively straightforward, although it required some internal coordination to ensure that the solution aligned with our orga...
What needs improvement with Veza?
I wouldn't say major drawbacks, but there are a few minor challenges and limitations to consider. Veza provides significant value for identity security and access governance, but one of the mai...
What is your primary use case for Veza?
My main use case for Veza is identity security and access management, particularly gaining visibility into who has access to critical systems, applications, cloud environments, and our sensitive da...
 

Comparisons

 

Overview

 

Sample Customers

Deel, Guesty, Berlitz, AXS Guard, vSure, KOR, Trial X, Tune Insight, Agora, Leen, Upsolver. For a full list of customers and testimonials, please visit: https://scytale.ai/customers/
Information Not Available
Find out what your peers are saying about Scytale vs. Veza and other solutions. Updated: November 2026.
921,523 professionals have used our research since 2012.