Tool profile
Josys: cost, fit and limits
Josys is a SaaS and identity management platform made by Josys inc. that discovers shadow IT, automates app provisioning and deprovisioning, runs access reviews and governs AI agents for IT and security teams. Its pricing is based on identities.
What to know first
Josys sells one platform with custom pricing based on the number of identities, plus an advanced tier of workflow and policy features, and it prices professional services separately. A 14-day free trial of the full platform needs no credit card, and a free SaaS Health Check starts by connecting Josys to your environment. The pricing FAQ states SOC 2 Type 2 and ISO 27001, with a trust center linked.
Josys at a glance
| Maker | Josys inc. (privacy policy names Josys International Pte. Ltd.), Japan |
|---|---|
| Free plan | Free trial only |
| Entry price | Quote only |
| API access | Yes |
| Category | Best AI SaaS Management Software in 2026, rank 5 of 11 |
| Website | josys.com |
Who Josys is best for
Teams that want a hands-on trial
The 14-day full-platform trial without a credit card lets IT test discovery and provisioning on real data before a quote, which most vendors on this list do not offer.
Companies run on Microsoft or Google identity
Identity provider connections for Microsoft and Google are on the standard price line, so those shops can connect and discover apps without a custom connector project.
Security teams preparing for audits
Automated access reviews and audit-ready reports, including activity logs described for SOC 2 style audits, give a compliance owner evidence without manual spreadsheets.
Josys plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Standard Platform Price | Request quote | Identity provider connections for Microsoft and Google, custom applications, shadow IT discovery with risk ratings, app approval workflow and bulk provisioning and deprovisioning. |
| Advanced capabilities | Request quote | An advanced workflow scheduler, custom access policies, custom security alerts and custom reporting and analytics for a tailored setup. |
| Professional services | Not published | Implementation and professional service engagements, priced separately from the platform. No figure is shown for these engagements on the pricing page. |
| Free trial | $0 for 14 days | The full platform with no credit card required, and a free SaaS Health Check that begins by connecting Josys to your environment. |
Checked November 2026.
What Josys does
- Browser-based discovery
- Josys uses advanced browser-based discovery to find shadow IT and profile the risk of each app, giving security a risk rating and not only an inventory of names.
- App approval workflow
- Employees request apps and approvers decide inside the platform, which creates a record for audits and keeps unreviewed apps from reaching production. Approvers see the request in one place.
- Bulk provisioning and deprovisioning
- Role-based provisioning and a workflow scheduler move many users in and out of apps at once, which suits mergers, reorganizations and seasonal hiring. The pricing page lists bulk provisioning and deprovisioning as part of the standard line.
- Custom access policies and alerts
- Advanced capabilities add custom policies and security alerts, so a team can define what unusual access looks like in its own environment. The pricing page places these in the advanced tier, not the standard price line.
- AI Agent Discovery
- The site names AI Agent Discovery and Shadow AI governance for agents, machine identities and shadow accounts, and lists an AI Integration Builder. Detail on each was not read.
How Josys handles your data
The pricing FAQ states SOC 2 Type 2 and ISO 27001, and a trust center sits at trust.josys.com. The privacy policy names Josys International Pte. Ltd. and mentions Japan transfer rules, but no hosting region was stated on the pages we read. The legal footer links an AI Addendum, which was not opened, so whether customer data trains AI models and how long data is retained were not checked. A buyer should read the AI Addendum and the trust center before signing, and ask where the data of a European tenant would be stored.
Where Josys falls short in practice
- No published price. Pricing depends on the number of identities and governance needs, with no figure on the page, so cost comparison starts after a quote request. Ask what counts as an identity, for example contractors or service accounts.
- Services priced separately. Professional services are a separate line with no published price, so the total for implementation can exceed the platform quote and should be requested in writing.
- Integration scope on standard tier. The standard line names Microsoft and Google identity providers. Okta, listed on the site elsewhere, and other sources may need advanced capabilities or services, which should be confirmed.
Works with
Alternatives to Josys
Josys: common questions
Does Josys offer a free trial?
Yes. The pricing page lists a 14-day free trial of the full platform with no credit card required, and a free SaaS Health Check that starts by connecting Josys to your environment. Pricing after the trial is custom and based on the number of identities and governance needs.
How is Josys priced?
The pricing page shows custom pricing by the number of identities and governance requirements, in a standard platform line and an advanced capabilities line, both by quote. Professional services are priced separately with no published figure. Ask for all three lines in one proposal.
What certifications does Josys state?
The pricing FAQ states SOC 2 Type 2 and ISO 27001, and a trust center is linked at trust.josys.com. Neither report was opened for this review. Ask for the current SOC 2 report and its audit period before a procurement decision.
Can Josys find AI agents?
The site names AI Agent Discovery and Shadow AI governance covering AI agents, machine identities and shadow accounts. The pages do not describe detection methods or coverage, so test it in the trial with an AI tool or agent you know is already in use.
Does Josys have an API?
The site footer links Help Center and API Documentation, and the homepage states 350+ API-native app integrations. The pages we read do not describe rate limits or write coverage, so check the documentation for the actions you need to automate.