Rising Star Pax Identity

Short Summary

Pax Identity is a self-funded cybersecurity start-up founded in 2024 and headquartered in London, focused on the Access Intelligence market across EMEA. Access Intelligence aims to improve the quality, context, and usability of identity and access data by turning raw entitlement information into actionable insights that explain why access exists, highlight anomalies, model change impacts, and support better governance and remediation decisions. Rather than replacing Identity Governance and Administration (IGA) platforms, it enriches existing governance workflows with context such as entitlement usage, organizational relationships, business processes, and policies.

Pax Identity is building an Access Intelligence platform designed to sit upstream of established IGA solutions like SailPoint and Saviynt, improving the identity, role, entitlement, organizational, and process data those tools rely on. The architecture combines a security data foundation, connectors, a continuously updated knowledge graph, and a policy engine. Its current MVP focuses on SAP, analyzing roles, entitlements, transaction codes, users, locations, and relationships. The platform supports conversational queries, peer-access comparisons, relationship visualization, and clearer interpretation of what specific SAP permissions allow. Its core differentiator is an “intelligence layer” between enterprise access data and governance platforms, augmented by a policy plane intended to define and propagate authorization policies.

A living knowledge graph is central, continuously modeling relationships across identities, applications, processes, organizational context, and policies to assess how organizational or process changes affect access. Planned enhancements include machine learning-driven remediation recommendations and potentially real-time or automated correction, plus natural-language policy expression translated into enforceable policies (with evaluation of OPA/Rego), including approval and simulation against the graph. The approach appears best suited to large enterprises (10,000+ users) with complex SAP environments and existing IGA investments, but the company must secure funding, expand beyond SAP, gain production validation, and prove measurable value to justify an added architectural layer.

Interesting Facts

• Pax Identity was founded in 2024.
• Headquarters are in London, United Kingdom.
• The company is self-funded.
• The licensing model is subscription-based.
• The geographic focus is Europe, the Middle East, and Africa (EMEA).
• The platform is designed to complement IGA solutions such as SailPoint and Saviynt.
• The current MVP uses SAP as the principal target system.
• The MVP can analyze SAP roles, entitlements, transaction codes, users, locations, and relationships.
• The architecture includes connectors, a continuously updated knowledge graph, and a policy engine.
• The target environment is organizations with more than 10,000 users and complex, multi-application entitlement stores.

Notable Quotes

• “Access Intelligence is a cybersecurity discipline that focuses on improving the quality, context, and usability of identity and access data.”
• “It transforms raw data into dynamic insights to better understand why access exists, identify anomalies, model changes, and make more informed governance and remediation decisions.”
• “The solution does not seek to replace established Joiner, Mover, and Leaver (JML) processes, access requests, provisioning, or certification workflows.”
• “Users can query this information conversationally, compare peer access and role permissions, visualize identity relationships, and understand what individual SAP permissions actually allow.”
• “Central to Pax Identity’s approach is a living knowledge graph that connects identity information with entitlement usage, organizational context, business processes, and policies.”
• “By continuously modeling these relationships, the platform can assess how changes to organizational structures or business processes affect access across applications.”
• “Policies can be expressed in natural language and translated into enforceable policies.”
• “Policies can then undergo approval, be simulated against the knowledge graph, and guide subsequent responses and governance decisions.”
• “Pax Identity does not require customers to replace established governance platforms.”
• “Pax Identity must demonstrate sufficient value to justify an additional layer within complex identity architectures.”