Zygon

Zygon is a lightweight Identity Governance and Administration (IGA) platform designed for IT and security teams managing cloud identity sprawl across modern SaaS environments. The platform provides a consolidated inventory of cloud identities by connecting to one or more identity providers and performing multi-source automatic discovery to surface shadow IT accounts and unmanaged identities. Zygon automates identity lifecycle workflows including account provisioning, deprovisioning, and access requests — including for applications that do not support SCIM. It supports complex approval and delegation flows and exposes an API for extending automation to off-platform workloads. Access management is handled through a workflow engine that supports Just-in-Time (JIT) provisioning and provides a full picture of access grants across an organization's application stack. A browser extension called Copilot allows teams to import user lists from SaaS apps without an API and compare them against expected collaborators. The platform integrates natively with Slack and Microsoft Teams, placing access request workflows where users already work. It supports access reviews and generates to-do assignments automatically. Security alerting features allow teams to detect risky authentication behaviors (e.g., password-only, missing MFA, or SSO usage), configure alerting rules, and engage directly with affected users for remediation. Zygon also includes an Auto-Provisioning Atlas, a database of authentication and provisioning methods for SaaS apps, covering SCIM, SSO, JIT, and deprovisioning support. The platform is used in compliance workflows supporting standards such as ISO 27001 and SOC 2.