Tuebora

Short Summary

Identity Governance and Administration (IGA) is positioned as the control plane for enterprise access: deciding who can access what, enforcing separation-of-duties (SoD), running certifications, and applying least privilege across applications, cloud services, and non-human identities (NHIs). As enterprises add third-party workers, machine accounts, RPA bots, and AI agents, legacy IGA approaches struggle. Traditional platforms depend on rigid workflows, static entitlement catalogs, and periodic certification campaigns that often degrade into “rubber-stamp” approvals. Identity data remains fragmented across HR systems, directories, and SaaS, forcing manual governance: reviewers make decisions with little context, analysts rely on SQL-driven reporting, and engineers maintain brittle connectors. The result is undetected privilege accumulation, failed joiner-mover-leaver processes, orphaned accounts, toxic access combinations, and high total cost of ownership (TCO).

Tuebora is presented as an IGA vendor re-architecting around LLMs and autonomous agents to change IGA economics through intent inference, semantic entitlement clustering, AI-generated configuration, and governed AI execution. Its platform includes core IGA (lifecycle, certification, SoD, policy management, provisioning), a schema-based connector framework, free SSO for existing customers, and limited-scope PAM (JIT provisioning plus escalation/reduction workflows). The roadmap is organized into six pillars—Identity Fabric, IVIP, Autonomous Orchestration, Human-Centred UX, Continuous Assurance, and Tuebora Studio—supported by a dual-mode deployment choice: fully AI mode or fully deterministic non-AI mode.

Technically, Tuebora plans a Unified Identity Graph built on Neo4j, plus Kafka, ClickHouse, Redis, and RabbitMQ to handle high-velocity identity events, especially from AI-agent workloads. A dedicated AI Agent Governance microservice adds prompt interception, agent discovery/registry, data protection for prompts, agent-specific policies, and gateway enforcement. Strengths include deployment parity across on-prem and cloud, microservice pricing, and AI-focused governance innovations; challenges center on growth-stage maturity, in-development flagship features, limited PAM depth, and the “no partial AI” adoption model.

Interesting Facts

• Tuebora was founded by Sanjay Nadimpalli, Prasad Bhamidipati, and Ashish Jhunjhunwala.
• The founders previously worked as Principal Engineers and early employees at Aveksa, which was acquired by RSA.
• The company is headquartered in Fremont, California, with a development center in Bengaluru, India.
• Deployments range from organizations with about 500 users to enterprises with about 500,000 identities across multiple geographies.
• Tuebora offers functionally identical deployments in both on-premises and cloud modes.
• The current platform includes lifecycle management, access certification, SoD controls, policy management, provisioning/deprovisioning, and a schema-based connector framework.
• Single Sign-On (SSO) is included at no additional charge for existing customers.
• The platform includes limited-scope PAM capabilities, including just-in-time provisioning for privileged roles.
• Tuebora plans to migrate its persistence layer from RDBMS/OpenSearch to Neo4j for a Unified Identity Graph.
• The stack refresh includes Apache Kafka, ClickHouse, Redis, and RabbitMQ.

Notable Quotes

• “Traditional IGA platforms were built for a simpler world.”
• “Governance was inherently manual.”
• “Privilege accumulation goes undetected until an audit or a breach.”
• “Certification campaigns produce compliance artefacts rather than genuine risk reduction.”
• “The emergence of large language models (LLMs) and autonomous AI agents changes what is possible in identity governance.”
• “Rather than relying on administrators to define every rule and every workflow, AI-enabled platforms can infer intent from natural language…”
• “Tuebora has defined six strategic pillars that frame its product roadmap, collectively forming what it calls Identity Intelligence – designed and delivered.”
• “What distinguishes Tuebora's 2026 platform is a hard choice customers make at deployment: AI mode or non-AI (deterministic) mode.”
• “Studio supports team-based collaboration, with multiple IAM practitioners and business stakeholders working within the same project.”
• “Traditional IGA was not designed for entities that have no persistent identity, that may spawn child agents, and that can act at machine speed across dozens of systems simultaneously.”