Opal review

Opal is an identity governance platform for managing access across employees, applications, infrastructure, non-human identities, and AI agents. The focus is not just assigning access: teams can review who or what has access, grant temporary privileges, set approval rules, and keep a record of changes.

Its access intelligence feature lets users query access relationships in plain English to find risks or indirect privilege paths. Access reviews surface risky access with explainable recommendations. Just-in-time access grants privileges when needed and revokes them automatically when work is done. For AI agents, Opal is designed to define what an agent can see, access, and execute.

The platform also supports version-controlled policies and workflows for approvals, plus searchable, exportable logs of access changes and admin actions. Opal’s scope is broad; the practical question for buyers is whether its pricing and credit allowances fit the size and activity of their identity program.

Opal’s clearest strength is its coverage of different identity types in one governance platform. The product description includes employees, applications, infrastructure, non-human identities, and AI agents, rather than treating agent access as separate from the rest of the access-control problem.

The feature set also addresses several stages of access management:

• Plain-English access queries are intended to expose risks and hidden privilege paths.
• Access reviews provide explainable recommendations about risky access.
• Just-in-time access can grant privileged access for a task and revoke it when the work is done.
• AI agent governance lets teams set what agents can see, access, and execute.
• Version-controlled policies support repeatable access rules and approval workflows.
• Searchable, exportable audit logs cover access changes and admin actions.

That combination may suit teams that need to connect access reviews, temporary privilege, policy approvals, and audit trails. The published plan structure also offers monthly Professional billing, rather than forcing every listed team plan into an annual commitment. Whether the credit allowance is enough depends on usage; the available material does not explain how credits map to specific actions.

The main buying constraint is the gap between the free entry plan and paid team plans. Creator is free forever, but it is capped at one seat and 500 one-time credits. Professional costs $39 per seat per month, includes 500 credits per seat per month, and is billed monthly. It has unlimited seats, but the published credit allowance remains a per-seat cap.

Business is listed at $99 per seat per month, billed annually, with a 10-seat minimum and 1,500 credits per seat per month. That minimum works out to $990 per month equivalent before annual billing. Enterprise requires at least 100 seats, uses custom credits, and adds a custom tiered annual platform fee. Enterprise pricing is custom for usage over 500,000 credits per month. Credit top-ups add 10% extra credits on purchases over 10,000 credits.

Annual pricing for plans other than Business is not published, and trial terms are not published. The pricing information also does not define what consumes a credit, making it harder to forecast spend from seat counts alone. Teams should confirm credit usage and any platform fees before comparing Opal’s total cost with another identity governance vendor.

Opal’s listed Creator plan is free, but it stops at one seat and 500 one-time credits. It is for trying the platform, not a larger team’s ongoing access program.

Professional costs $39 per seat per month, billed monthly, and includes unlimited seats plus 500 credits per seat each month. Business is $99 per seat per month, billed annually, with a 10-seat minimum and 1,500 monthly credits per seat. That is a 2.5× per-seat price jump from Professional, and you must pay annually and buy at least 10 seats.

Enterprise requires at least 100 seats; pricing and custom credits are not published. It also has a custom tiered annual platform fee. Credit top-ups add 10% extra credits on purchases over 10,000 credits, while Enterprise usage above 500,000 credits per month is custom-priced. The annual price for Professional and annual pricing for other plans are not published, so confirm the full commitment before budgeting.

Treat a move to Opal as an identity-and-policy migration, not just a seat swap. The product covers employee and non-human identities, AI agents, applications, and infrastructure, alongside access reviews, approvals, and just-in-time privileges. Before signing, inventory the identities and access rules you need to bring over, then ask Opal which can be imported and what requires rebuilding. Import support and migration effort are not published on the vendor's site.

Leaving deserves the same scrutiny. Opal lists searchable, exportable logs for access changes and admin actions, but that does not confirm exports for policies, identity relationships, or review history. Data portability and deletion terms are not published here; get those details in writing before moving critical workflows. The published sources include no Reddit posts or comments about why customers leave Opal, so we cannot substantiate a user-reported churn pattern. For either direction, verify export formats, retained history, and how approvals will work during the cutover.