Permiso review

Permiso is an identity security platform for tracking human, non-human, and AI identities across cloud, SaaS, and on-prem environments. Its stated job is to show what identities exist, what access they have, and whether their activity looks risky or suspicious.

The product description centers on a Universal Identity Graph, which connects identities to credentials, machines, agents, and their actions in real time. Permiso also says it assesses risk using usage patterns, exposure, and entitlements; flags stale access, overprivileged accounts, and risky combinations; and monitors for anomalies, lateral movement, and signs of compromise.

For AI agent security, Permiso says it tracks agent runs, tool calls, MCP invocations, and identity lineage. That makes the product broader than a conventional user-access inventory: it is intended to connect identities and activity across different types of environments. The practical question for a buyer is whether that coverage maps to the systems and identity risks they need to manage.

Permiso’s strongest pitch is coverage across identity types, not just employee accounts. The product description includes human, non-human, and AI identities, then links them to credentials, machines, agents, and activity. That can matter for teams trying to review access across cloud and SaaS alongside workloads and newer agent-based systems.

• Inventory and context: Permiso says it discovers identities and connects them through a Universal Identity Graph, giving security teams a way to relate accounts, credentials, machines, and actions.
• Exposure review: It says it flags stale access, overprivileged identities, high-risk accounts, and toxic combinations. Those are useful targets for access cleanup, not just incident response.
• Threat monitoring: The stated scope includes anomalous behavior, lateral movement, and signs of compromise.
• Agent visibility: Tracking agent runs, tool calls, MCP invocations, and identity lineage is a specific focus in the product description, rather than a generic AI-security claim.

For organizations that need those identity categories in one view, Permiso is worth evaluating against their current tools. The published information describes the coverage, but does not establish how deeply it connects to any particular environment.

The clearest drawback is price opacity. The pricing information available to us, checked November 7, 2026, is low-confidence and describes an Enterprise/custom offering with quote-based pricing. Monthly and annual prices are not published. It lists no starting price and no free plan; a free-trial term is not published. Buyers cannot use public rates to estimate a switch cost or compare tiers before talking to sales.

The published pricing details name no plan limits, identity caps, usage allowances, or add-on prices. That does not mean Permiso has no caps; it means we cannot verify them from the published information. Ask for the quote to spell out what counts toward pricing, which environments and identity types are included, and whether agent activity or integrations change the cost.

Public evidence here is also thin: the Reddit threads we read are about unrelated uses of the word “permiso,” not Permiso’s identity-security product. And while the product description lists broad capabilities, it does not document specific integrations, deployment requirements, or coverage limits. Buyers should verify those details before comparing it with an incumbent stack.

Permiso’s pricing is quote-based, and the published pricing information lists no dollar amount. The only listed option is Enterprise/custom, described for organizations seeking cloud identity security. Monthly and annual prices are both unpublished, so there’s no way to calculate a billing discount or compare the cost of each term from public figures here.

The record says Permiso has no free plan; whether it offers a free trial is not published. It lists no add-ons, but that does not confirm that every feature is included in a quote. Ask the sales team to spell out what the price covers, including identity volume, monitored environments, retention, support, and any AI-agent security features you need. Those limits and inclusions are not published in the material we have.

There’s no visible tier ladder, so we can’t call out a price jump between plans. The pricing record was checked on 2026-11-07 and marked low confidence. Treat it as a starting point for a quote request, not a complete rate card.

The published information doesn’t document a migration process, onboarding effort, integrations to configure, or data-export options. Before switching, ask Permiso how it discovers identities across your cloud, SaaS, and on-prem environments, what access it needs, and whether it can import existing identity or risk data. Confirm how to export inventory, findings, and activity history if you leave; those details aren’t published in the material we have.

Permiso’s identity inventory and Universal Identity Graph are central to its pitch, connecting identities with credentials, machines, agents, and actions. That makes coverage and continuity worth checking during a proof of concept: confirm which identity types and environments will be represented, and what happens to that graph if you stop paying. The published sources don’t establish that this creates lock-in; it’s a question to ask, not a proven drawback.

We weren’t given Reddit posts or user feedback about switching away, so we can’t report a recurring reason people leave. Get the exit terms and export commitments in writing before signing.