Avatier launches AI identity platform with pay-per-action

Avatier has launched Identity Anywhere 2027, an AI-native identity platform built on the Model Context Protocol. The product introduces a pricing model based on completed identity actions.

Customers can start using the platform without upfront software licensing and pay only when specific identity tasks are completed and verified. Those tasks include authentication, password resets, account unlocks, identity verification, access approvals, policy enforcement and lifecycle changes, which Avatier describes as Secure Outcomes.

Identity and access management software has traditionally been sold through user-based licences, software modules and professional services engagements. Avatier is trying to shift that model by tying charges to individual actions that meet policy and audit requirements.

A global healthcare provider with more than 100,000 identities is already piloting the platform in its AI and MCP environment, according to Avatier. The system is designed to work with existing enterprise identity and software products rather than require a full replacement.

That includes integrations with Microsoft, Okta, SailPoint, Saviynt and ServiceNow. Organisations can deploy the platform alongside existing systems and compare results before deciding on broader architectural changes.

Creator model

Avatier is positioning the release around the growing use of AI assistants in enterprise IT teams. Identity Anywhere 2027 lets teams create and adapt identity workflows through tools they already use, including Anthropic Claude Code, Microsoft Copilot and OpenAI Codex.

The platform uses MCP services to help organisations design identity experiences around users, applications, infrastructure, internal policies and regulatory requirements. Those requests remain subject to authentication, authorisation, delegated authority, policy enforcement and audit controls, with the platform determining whether an action is permitted and recording what happened.

Model Context Protocol has emerged as an open standard intended to let AI assistants interact with software systems in a structured way. In identity management, that raises questions about whether companies can show who performed an action, what authority was used and whether the activity complied with policy.

Audit trail

Each completed action records the identity involved, the initiating agent or experience, the authorisation context, the policy applied, the action taken and the final result. Avatier argues these records are increasingly important as AI agents interact with regulated systems and sensitive data.

MarketsandMarkets has projected that the identity and access management market will grow from USD $25.96 billion in 2025 to USD $42.61 billion by 2030. Against that backdrop, vendors are under pressure to show clearer returns on spending while responding to a broader mix of human, machine and AI-driven access requests.

Under the new model, pricing depends on environment size, expected usage, security requirements and the Secure Outcomes deployed. Deployment services are included, and Avatier is offering a 45-day refund guarantee for customers that move into paid service.

That commercial structure is part of Avatier's broader argument that identity systems should be bought on the basis of measurable completed work rather than software ownership. The approach also reflects a wider trend in enterprise software towards usage-based charging, though such models have been less common in identity governance products.

"Identity management has measured value by the wrong things for decades," said Nelson Cicchitto, Founder and Chief Executive Officer of Avatier.

"For 30 years, enterprises have paid for users, software modules, implementation projects and consulting hours before knowing whether the technology would deliver results. Identity Anywhere 2027 changes the unit of value from software ownership to verified identity work. Avatier earns the customer's business when a secure, policy-compliant outcome is completed," Cicchitto said.

Avatier also framed the release around auditability as AI systems take on more operational roles in enterprise environments. Auditors are increasingly asking not only whether safeguards such as multi-factor authentication exist, but also for evidence showing which identity accessed a system and under what authority, the company said.

Dr. Sam Wertheim outlined that position in comments accompanying the launch.

"Auditors are moving beyond asking whether an organization has MFA," said Dr. Sam Wertheim, Chief Information Security Officer of Avatier.

"They want to know which human or AI identity touched a regulated system, what authority it used, what policy was enforced and where the evidence is. Identity Anywhere 2027 generates that evidence with every completed identity action. If an organization cannot audit an AI-initiated identity action, it does not fully control it," Wertheim said.