Saviynt has expanded its partnership with Zscaler, whose venture arm also joined Saviynt's recent Series B funding round.
The broader tie-up aims to link identity governance with access enforcement in Zero Trust security models used by large organisations.
An initial area of integration focuses on removing standing privileges through just-in-time access. The approach is designed to replace older access methods that rely on tickets, VPNs, group memberships and persistent credentials, which can leave elevated access in place longer than intended.
Under the arrangement, Saviynt manages identity governance, validates access requests and provisions time-limited entitlements. Zscaler applies those decisions at session initiation through its Zero Trust Exchange platform.
The partnership comes as companies face more complex access requirements across cloud systems, artificial intelligence tools and distributed workplaces. Identity has become a central element in Zero Trust models, which are built on verifying users and systems before access is granted and maintained.
The combined offering is intended to support least-privileged access across users, applications and infrastructure. It is also meant to give customers end-to-end visibility across the privileged access lifecycle for audit and compliance work.
Initial focus
The first phase of the expanded partnership centres on just-in-time access controls, including approval of access requests, policy validation and automatic revocation once the authorised period ends.
The system is also intended to improve oversight of third-party access through tighter onboarding, delegated controls and built-in expiry. Another aim is to enforce identity-aware access policies at the start of a session so access reflects current conditions.
For many enterprises, privileged access remains spread across multiple tools and processes. That fragmentation can make it harder to track who has access to what, when access was granted and whether it is still justified.
"Zero Trust strategy is ultimately driven by the quality of identity decisions and how rigorously they are enforced," said Anirudh Sen, Senior Vice President of Products at Saviynt. "With Zscaler, we're helping customers move to a model where access is continuously verified, context-aware, and designed to expire. This marks an important step in delivering a Zero Trust approach to Identity Security."
Funding link
Zscaler Ventures' participation in Saviynt's Series B round adds a financial dimension to the commercial relationship. Other investors in the financing included KKR, Carrick Capital Partners, Ten Eleven and Sixth Street Growth.
No value was disclosed for Zscaler Ventures' investment. The funding will support joint work as identity security takes on a larger role in protecting organisations using AI systems.
The partnership also extends beyond access governance. Saviynt has joined Zscaler's Project AI-Guardian as a Technology Alliance Partner, placing the identity specialist within a broader effort focused on securing AI deployments.
That move reflects a wider shift in cyber security, as suppliers try to address not only workforce access but also machine identities, automated processes and AI-driven systems. As companies deploy more AI tools, controlling who or what can reach data and applications has become more difficult.
Both companies plan to extend the integration into additional AI and infrastructure access scenarios, though they did not provide further detail on timing or product scope.
"Zscaler and Saviynt help organisations accelerate Zero Trust adoption by bringing identity governance and inline enforcement together," said Joby Menon, Senior Vice President of Product Management at Zscaler. "By combining them, we enable organisations to reduce standing privilege, improve visibility across the access lifecycle, and better protect users, applications, and data."