Josys is an identity governance platform for organisations whose people, accounts and AI agents are spread across hundreds of SaaS applications. It is built for IT and security teams, and for the managed service providers who run IT for many client organisations at once.
The company started in SaaS management and has since moved into identity governance, so human, machine and AI agent identities are governed from the same platform.
At A Glance
| Vendor | Josys |
|---|---|
| Category | Identity governance and SaaS management |
| Identities covered | Employees, unmanaged and privileged identities, AI agents, SaaS accounts, devices |
| Deployment | Multi-tenant cloud service |
| Agentic AI | AI Agent Discovery and Governance, Josys AI, AI Integration Builder |
| Customers | ebbo, Mach49, Hanshin Construction, H.I.S. |
| Founded | 2022 |
| Market classification | Identity Governance & Administration |
What Josys Does
IT and security teams often cannot say which SaaS apps their company uses, who has accounts in them, or whether a leaver still has access weeks later. Josys starts by building that inventory, then keeps it under control: access follows HR data rather than tickets, and policy is checked continuously rather than once a quarter. The same approach now has to cover AI agents, which teams can switch on without telling IT and which hold real access of their own.
Products
Discover
Discover answers the first question: what is out there. It finds applications and identities, including shadow IT and AI agents, through native app integrations, login data and browser activity. For custom or niche web apps without an integration, the AI Integration Builder is a self-serve, no-code tool that learns a workflow by recording browser actions.
Govern
Govern handles the access lifecycle. Onboarding and offboarding are automated, access requests and approvals run through defined workflows, and access reviews keep a full audit trail for auditors.
Monitor
Monitor focuses on identity threats. Identity Threat Monitoring watches stealer logs, dark web forums and paste sites for leaked employee credentials and, on a match, revokes access across connected apps. It also surfaces unmanaged identities that sit outside normal governance.
Secure And Advanced Experience
Secure checks posture: shadow IT, MFA and SSO enforcement, policy drift and privileged access. Advanced Experience adds autonomous policy workflows with more than 60 pre-built templates aligned with NIST 800-53, ISO 27001, CIS Controls, NIS2, HIPAA, CMMC and DORA, plus licence and cost optimisation and cloud-based device asset tracking.
How It Works
Josys runs as a cloud service on a multi-tenant control plane, and new capabilities are added to that same control plane for existing customers. Customers can keep their data in a US region or in Japan, with customer and application data stored in-region. Data comes in through more than 300 native SaaS integrations that track licences, usage and expenses and import user profiles from identity providers. Many more apps are covered through login data and browser activity, and audit logs show user activity. MSPs manage all client environments and alerts from a Multi-Tenant Portal.
Identities And Systems Covered
| Human users | Employees across their lifecycle, with access driven by employee attributes and HR-linked workflows |
|---|---|
| AI agents | Agents built on Microsoft Copilot, Anthropic Claude or custom LLM frameworks, each inventoried, given an owner and mapped to its access |
| Unmanaged and privileged identities | Accounts outside normal governance and privileged access |
| Systems | SaaS applications such as Microsoft 365, Salesforce, Slack, Zoom, GitHub, Atlassian, Box and Adobe, plus devices |
Agentic AI Capabilities
AI Agent Discovery And Governance
AI Agent Discovery and Governance brings AI agents into the same governance model as people. Previously unseen agents are surfaced automatically, so an agent that a team switched on without telling IT still ends up with an accountable owner and reviewed access.
Josys AI
Josys AI adds AI risk scoring, access recommendations and identity classification across the platform, so reviewers see which accounts and apps deserve attention first instead of working through every entry in order.
Integrations
| Area | Integrations |
|---|---|
| Identity and access | Microsoft Entra ID, Google Workspace, Okta, Auth0, AWS IAM Identity Center, 1Password, Bitwarden |
| HR | BambooHR, 15Five, Deputy, Bonusly |
| IT services and devices | NinjaOne, Lanscope, Addigy, ConnectWise PSA |
| Generative AI | OpenAI, Cursor AI |
Company Background
| Founded | 1 February 2022. |
|---|---|
| Headquarters | Tokyo, Japan. |
| Ownership | Part of the RAKSUL INC. group. |
| Leadership | Yasukane Matsumoto, Chief Executive Officer; Mahabaleshwar Bhat, Chief Product Officer. |
| Scale | More than 1,000 reported organisations and MSPs across APAC and North America. |
| Certifications | SOC 2 Type 2 and ISO 27001. |
| Recognition | Included in the Gartner Magic Quadrant for SaaS Management Platforms (2025). |
Note: This overview is compiled from Josys’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.