Dimitri Cabete Jorge, Co-Founder & CTO · Last updated: August 2026 · Facts verified: August 2026
TL;DR verdict: Zluri is an identity governance and SaaS management platform for mid-market IT and security teams, strongest at shadow-IT discovery, automated access reviews, and lifecycle automation. It’s worth a serious look for teams drowning in SaaS sprawl that want governance and spend in one platform. Expect friction if you need a published price before you engage sales, and look at Torii first if deeper workflow customization is the deciding factor.
Ratings: G2: 4.6/5 · Gartner: 4.6/5 , verified August 2026
What Is Zluri?
Zluri is an identity governance and administration platform that IT and security teams use to discover every application in their environment and govern access across those apps, with finance involved on SaaS spend. Zluri positions it as an IGA platform built on IRIS, the layer that correlates its identity data.
The platform ships as four products. Identity Visibility and Intelligence and Identity Governance and Administration handle discovery and access control; Identity Security Posture Management and the SaaS Management Platform handle identity risk and SaaS spend. KuppingerCole assesses it across both SaaS management and identity governance administration, which is the dual scope Zluri sells today.
What Is Zluri Used For?
Zluri handles the intersection of SaaS visibility and identity security, the two problems that collide as the app count climbs:
- Shadow IT discovery: Find the applications employees adopted without IT, including browser-based tools that never went near procurement.
- Automated access reviews: Run SOX, SOC 2, and ISO 27001 certification campaigns without spreadsheets or chase emails.
- License cost reduction: Identify unused licenses and overlapping subscriptions before the renewal date. Zluri puts the potential saving at up to 30% of SaaS spend.
- Onboarding and offboarding automation: Provision and deprovision accounts when someone joins, moves, or leaves, triggered by the HRIS record rather than a ticket.
- Contract and renewal management: Keep every SaaS contract and renewal date in one place, so auto-renewals stop arriving as surprises.
- Least-privilege enforcement: Cut standing access back to what each role needs, and catch the accounts that quietly accumulated more.
- Non-human identity governance: Bring service accounts, API tokens, OAuth connections, and AI agents under the same access rules as employees.
Key Features of Zluri
Four products sit on top of IRIS, and for a 2026 evaluation the two capabilities that matter most are AI-app visibility and non-human identity governance.
- IRIS is the layer the other products read from. Zluri describes it as a real-time identity intelligence system that connects and contextualizes identity signals, and the practical output is orphaned accounts, dormant access, and permission drift surfaced without a manual investigation.
- Discovery runs eight methods at once, because each one alone has a blind spot. The eight methods span SSO and IdP logs, finance and expense systems, direct integrations, browser extensions, cloud access security brokers, MDMs, HRIS, and directories. Behind them sits an app library of 240,000+ applications, and coverage outside the 300+ out-of-the-box connectors runs through Zluri’s iPaaS engine, where the remaining connections get built. It also auto-detects AI tools like ChatGPT, DeepSeek, and Claude and tracks usage in real time.
- Access requests, reviews, and segregation of duties run as one loop. Requests use policy-driven approvals and time-bound grants with Slack-native workflows that keep oversight without a ticket queue. Review certifications run on a schedule with risk context attached, and a revoke decision executes inside the review instead of becoming a follow-up ticket.
- ISPM watches for the access nobody meant to grant. Identity Security Posture Management monitors risk continuously and remediates with 1,500+ automated actions, flagging overprivileged accounts, dormant identities, and combinations of permissions that should never sit with one person.
- The automation engine is no-code and event-driven. Teams build onboarding, offboarding, and routine access processes on a WHEN/IF/THEN model, without professional services or code.
- The SaaS Management Platform carries the spend side. License reclamation, contract tracking, and spend forecasting sit here, which is the part of license management most teams still run in spreadsheets.
Zluri Pros & Cons
Zluri does its best work finding apps and certifying who should reach them; its worst is anywhere a buyer needs a published number or a written answer.
What Users Say
What users consistently praise:
- Lifecycle automation is the most-cited win. Onboarding and offboarding automation comes up more than any other positive, described as cutting provisioning to minutes and stopping spend on departed employees.
- Shadow-IT discovery surfaces what other tools miss. Reviewers describe Zluri finding browser-installed and employee-adopted tools IT had no visibility into.
- License reclamation shows up as money. Reviewers credit it with identifying overlapping subscriptions, flagging renewals ahead of time, and stopping unwanted auto-renewals.
- Support quality stands out. Quality of support is the highest-scoring criterion in the category, above Zylo and BetterCloud, with reviewers describing a team that is reachable and follows through during implementation.
- Integration breadth supports cross-stack visibility. Reviewers credit Zluri with pulling HR, finance, and identity data into a single inventory instead of leaving it spread across four consoles.
What users consistently complain about:
- Integration gaps are the recurring complaint. When a direct connector doesn’t exist, or when a vendor’s API doesn’t expose everything Zluri needs, the gap comes back as manual work. Reviewers also report waiting on connectors that were still in active development at the time they bought.
- Custom reporting needs manual exports. Standard report templates can’t accommodate unusual data slices or team-specific metrics, so users export data and finish the analysis in spreadsheets.
- Implementation effort scales with the estate. Getting fully operational takes substantial upfront work, and the burden tracks app count and the mix of data sources rather than being a fixed cost.
- Pricing is opaque and modules escalate it. No published pricing exists, and practitioners report that adding the automation and provisioning modules roughly doubled their quote.
- Documentation is thin enough to force live training. Reviewers describe a feature-rich platform with extended ramp time and almost no written or downloadable guidance, so onboarding depends on hands-on sessions with the vendor rather than self-service docs.
Where reviewers diverge:
- Pricing. Buyer platforms don’t surface pricing as a top complaint; the practitioner thread is almost entirely about it, with specific dollar figures and steep module escalation. It is the sharpest buyer-versus-practitioner split on the tool.
- Whether the ramp is heavy. Buyer-platform reviewers describe a long ramp and almost no written documentation, while the same platforms rate implementation support at the top of the category. Reviewers agree the vendor helps and disagree about whether the product should need that much help.
Zluri Pricing
Zluri’s pricing is quote-only, so the only figures that exist come from third parties and practitioners rather than from Zluri.
Rates come from Zluri sales. All pricing information verified August 2026.
Gotchas:
- Zluri publishes no rate card. The pricing URL redirects to a demo request form with no plan names, tiers, per-user prices, or billing intervals.
- Third-party benchmark data from Vendr (2025 estimates, not official Zluri figures) puts the median annual contract at $36,820, with a $14,045 to $75,900 range and a $50,000 redline threshold.
- One practitioner on r/ITManagers reported a $15,000 base quote per year before add-ons, which sits close to Vendr’s low end rather than contradicting it.
- The same thread reports that adding the automation and provisioning modules roughly doubled the quote, and that cost scales quickly with user count.
- Billing is annual or monthly, per Vendr. Add-ons priced separately include implementation, onboarding and training, access reviews and certifications, and the lifecycle management module.
- No free tier is disclosed on any official page.
Is Zluri Worth It?
Yes, if your team sits in the 500-10,000 employee range, runs a mostly-SaaS portfolio, and needs access reviews, lifecycle automation, SaaS spend visibility, and identity security posture management in one platform. Teams carrying SOX, SOC 2, or ISO 27001 obligations without a dedicated identity-engineering function get the most value. Tipalti identified over $100,000 in potential savings within eight months of its rollout.
Look elsewhere if you need a published price before you engage sales. Zluri also isn’t an authentication tool: teams whose core need is SSO and login security want dedicated IAM platforms rather than a governance layer above them. Between the two closest alternatives, Torii is the stronger pick if deeper workflow customization is the deciding factor, and Zylo if the priority is spend-first SaaS management with renewal benchmarking.
Zluri vs Torii
Torii and Zluri overlap most on SaaS discovery and spend, and separate on identity governance. Torii is the stronger spend and workflow tool; Zluri carries the deeper governance layer.
Where Torii wins: it ties app discovery to usage, license, and spend data rather than login data alone, so a spend decision rests on how a tool gets used. It also leads on workflow customization.
Where Zluri wins: it ships access reviews, segregation-of-duties enforcement, identity security posture management, and non-human identity governance as named modules, and it surfaces AI-tool usage in real time. Torii markets its own identity governance platform, so treat this as a depth difference to test in a demo rather than a capability gap.
Zluri Alternatives
Teams that leave Zluri usually want deeper workflow customization or spend-first SaaS management.
- Torii: Pick this if deeper workflow customization is the deciding factor. Torii covers the same SaaS discovery and spend ground as Zluri, without the identity governance layer on top.
- Zylo: Pick this if you are an enterprise procurement or FinOps team that needs financial-grade SaaS spend visibility and renewal benchmarking. Zylo was a Leader in the 2025 Gartner Magic Quadrant for SaaS Management Platforms.
How Zluri Works With Siit
Siit does not integrate directly with Zluri. Where Zluri governs who has access, Siit handles the inbound request layer. Employees submit requests in Slack or Microsoft Teams, Siit’s AI triages them, and approvals route to whoever owns the app.
Once an approval lands, provisioning and access actions execute through Okta, while Microsoft Entra ID supplies directory sync and group membership.
Routing every access request through one intake layer means the approval trail an auditor needs and the answer an employee needs come out of the same request. Employees ask where they already work and get an answer there, instead of learning a second portal.
