Lumos Albus and Identity Agent Force (identity governance agents)
Vendor: Lumos · HQ: United States · Category: Security · Compliance
Last verified · Added · 5 sources · How we verify
Vendor? Get your “Listed on Agent Index” badge
On this page
What it does
Lumos describes Albus as an identity agent for agentic IGA that works on entitlement-level data across IdP, HRIS, SaaS, cloud and on-premises systems. It ingests HRIS data, app assignments and usage logs to propose RBAC/ABAC roles with explanations; approves or flags access in user access reviews using peer-group analysis and usage anomalies, focusing reviewers on what changed and auto-capturing evidence; and acts as an LLM-based identity analyst to find dormant accounts, policy drift and SoD violations. Albus has memory of owners, approval paths and past exceptions, starts in a copilot mode where recommendations need approval, logs every action and limits permissions per workflow. Speed multipliers are vendor-claimed. The privacy notice gives Lumos App, Inc.'s mailing address in San Francisco. Pricing is custom. Lumos launched the Identity Agent Force on 15 Jun 2026: a team of purpose-built identity agents coordinated on the same access graph and customer-set policies, guardrails and approval thresholds. The product page lists an Access Review Agent (runs reviews end to end, certifying safe access and sending exceptions to a human), Access Request Agent (time-bound grants that it revokes), NHI Owner Hunter Agent (dormant or over-scoped service accounts, keys and tokens), Role Mining Agent, Agent Ownership Finder (catalogues AI agents and NHIs and assigns human owners) and Entitlement Analyst (explains permissions in plain English). Outcome figures on the page are vendor claims.
Frameworks (vendor-stated)
No framework tags yet.
Pricing (as published)
Not published
Tasks
identity governanceaccess reviewsrisk assessment
Sources
- lumos.com/products/albus (primary)
- lumos.com/privacy
- lumos.com/company/about
- lumos.com/products/identity-agent-force
- lumos.com/blog/pr-lumos-launches-identity-agent-force-govern-access-every-human-nhi-ai
Last verified 19 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.
Next step: find an auditor
After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.
Narrow by region
This listing’s HQ country is United States. That is a starting point only — choose any published country page.
United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates
Audit firms in India (131)
Audit firms in Japan (49)
Send a request Get matched with verified auditors All verified audit firms
Request received
Thanks, we've received your request. We'll be in touch before sharing it with any firm.
Reference:
Use-case comparisons
- Identity governance AI agents — 8 verified listings (Identity governance, access reviews and Conditional Access coverage)
Compare Lumos Albus and Identity Agent Force (identity governance agents) with
-
-
-
-
-
- A
-
-
-
-
Alternatives
-
7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE). -
Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. -
Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training. -
Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report. -
AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing. - A Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
See all Lumos Albus and Identity Agent Force alternatives →
FAQ (from this dataset)
What does Lumos Albus and Identity Agent Force do?
AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision.
How much does Lumos Albus and Identity Agent Force cost?
Not published
Where is Lumos headquartered?
United States
What are alternatives to Lumos Albus and Identity Agent Force?
See the Lumos Albus and Identity Agent Force alternatives page for category-sharing listings in relevance order, not a ranking. Lumos Albus and Identity Agent Force alternatives.
Stay updated
Check your inbox to confirm your email. We’ll only send the weekly brief after you click the link.
We use your email only to send the newsletter. See our privacy policy.