# lumos

Source: https://startwithidentity.com/vendors/iga/lumos/
Last updated: 2026-06-19
License: content by Start with Identity. Cite the source URL.

---

## Overview

Lumos combines an internal app store, self-serve access requests, and AI-driven access reviews into what it positions as autonomous identity governance ([IGA](https://startwithidentity.com/guides/fundamentals/what-is-iga/)) for the SaaS era. Founded in 2020, it aims to cut the IT ticket load of access management while giving security teams visibility and control over who has what.

## What it is good at

The self-service app store and automation are the differentiators. Employees request access through a familiar catalog, approvals and provisioning flow automatically with guardrails, and access reviews are largely automated, which reduces both ticket volume and rubber-stamped certifications. As a bonus, Lumos surfaces unused licenses and SaaS spend, so the same access data drives cost savings, a pitch that resonates with both IT and finance.

## Where it falls short

Lumos is newer and SaaS-centric, so deep provisioning connectors for legacy on-premises systems and the certification depth of the established suites are still maturing. Authentication and MFA are out of scope. Estates with heavy legacy dependencies, or buyers wanting a long-established platform, should weigh that gap.

## Pricing

Subscription, quote-based. Because it also drives SaaS-spend savings, weigh the net cost with the [TCO calculator](https://startwithidentity.com/tools/tco-calculator/).

## Best for, and who should look elsewhere

Choose Lumos for SaaS-heavy companies wanting self-serve access, app discovery, and autonomous reviews. For the governance-and-JIT alternative, see [ConductorOne vs Lumos](https://startwithidentity.com/compare/conductorone-vs-lumos/); for access visibility, see [Veza](https://startwithidentity.com/vendors/iga/veza/); for enterprise incumbents, see [SailPoint vs Saviynt](https://startwithidentity.com/compare/sailpoint-vs-saviynt/).

## Bottom line

A compelling modern governance and access-request layer for SaaS-heavy companies, pairing self-service with autonomous reviews, less suited to legacy-heavy estates.