Identity governance AI agents
Three verified listings tagged for identity governance or access reviews: Lumos Albus, Microsoft Entra Conditional Access Optimization Agent and Opal Paladin. Fields come from the open dataset (vendor pages, HQ, tasks, published pricing and sources). This is not a ranking or score.
| Field |  Lumos Albus (identity governance agent) |  Microsoft Entra Conditional Access Optimization Agent |  Opal Paladin |
|---|---|---|---|
| Vendor | Lumos | Microsoft | Opal Security |
| HQ | United States · North America | United States · North America | United States · North America |
| Primary category | Security | Security | Security |
| Also listed in | Security, Compliance | Security | Security |
| Summary | AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security Copilot agent in Microsoft Entra that scans a tenant for users, apps and agent identities not covered by Conditional Access, recommends or updates policies and applies one-click remediation. | AI identity agent in Opal that reviews access requests, investigates context and approves, denies or escalates with recorded reasoning. |
| Framework tags (Agent Index) | — | — | — |
| Frameworks (vendor-claimed) | — | — | — |
| Capabilities / tasks | identity governance, access reviews, risk assessment | identity governance, policy management, remediation | identity governance, access reviews |
| Pricing (as published) | Not published | No standalone price. Requires Microsoft Entra ID P1 or higher plus Security Copilot security compute units (Microsoft Learn says a run averages under one SCU); Microsoft says Security Copilot agents are also made available to Microsoft 365 E5 customers. Check Microsoft's Security Copilot pricing for SCU rates. | Not published for Paladin. |
| Pricing model | quote | quote | quote |
| Primary source | https://www.lumos.com/products/albus | https://learn.microsoft.com/en-us/entra/security-copilot/conditional-access-agent-optimization | https://docs.opal.dev/docs/paladin/access-request |
| Last checked | 2026-10-18 | 2026-10-18 | 2026-10-18 |
| Official site | https://www.lumos.com/products/albus | https://learn.microsoft.com/en-us/entra/security-copilot/conditional-access-agent-optimization | https://docs.opal.dev/docs/paladin/access-request |
Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.