Lumos

What is Lumos?

Lumos is an identity governance platform that manages access for employees, non-human identities and AI agents. The vendor's AI layer, called Albus, runs access reviews, access requests and ownership tracking.

Key features of Lumos

• Access Review Agent: runs reviews, certifies low-risk access and sends only uncertain items to a person.
• Access Request Agent: grants just-in-time access that expires and is revoked automatically.
• NHI Owner Hunter: monitors service accounts, keys and tokens and flags dormant or overscoped ones.
• Role Mining Agent: proposes roles based on how access is actually used.
• Agent Ownership Finder: catalogs agents and non-human identities and assigns each a human owner.
• Agent Marketplace: 30 or more ready-made agents, plus custom ones.

How Lumos works

Lumos connects to applications and identity sources, builds a view of who and what has access, and uses AI agents to review and grant it. Requests can come through Slack, lifecycle events come from an HRIS, and access is revoked automatically when it expires.

Who uses Lumos?

Lumos serves security and IT teams, with testimonials from CISOs and IT managers. The vendor names Mars, Cava, Ramp, Netskope, Roku, Pinterest and Mimecast as customers, and its use cases include non-human identity governance, access reviews and joiner-mover-leaver automation.

Lumos pricing

Lumos does not publish pricing; plans are quoted after a demo request. The vendor offers a free identity assessment rather than a free trial.

Lumos integrations

Lumos lists ready-to-use integrations for more than 300 SaaS apps. Named examples include Active Directory, 1Password, Adobe, ADP Workforce Now, 15Five, Adyen, Aircall, Airtable, Amplitude and Anthropic, plus Slack for access requests.

Lumos alternatives

Okta is a broad identity and access management platform that also offers governance modules. CyberArk focuses on privileged access security. Yubico makes hardware authentication keys, which is a different layer of identity security. Lumos differs by focusing on access governance and automation with AI agents rather than login or authentication.