Lutril vs Torii
Torii is a SaaS and AI management platform, a Gartner Magic Quadrant Leader, that added access governance, temporary access and Slack and Teams agents through 2026. Lutril is access governance for employees and AI agents, hosted in the EU, with an MCP proxy and prompt DLP. Where each fits.
Cette page n’est pas encore traduite. Voici la version anglaise.
Réponse courte
Choose Torii if SaaS management is the anchor, with spend, renewals and licence data alongside discovery, and you want the access governance features it shipped in 2026: temporary access, request agents in Slack and Teams, review remediation. Choose Lutril if the anchor is access governance for employees and AI agents: policy-driven requests in Slack, Teams and the app UI, reviews that execute, HRIS-driven lifecycle, and an MCP proxy that enforces policy on every agent tool call with prompt DLP, in the EU and in French. Torii documents that EU customers use its US instance and recommends pairing with a separate runtime DLP layer.
D'où part chaque produit
Torii
Take control of every app, licence and AI tool: a SaaS and AI management platform with three product lines (SaaS management, identity governance, AI management), a Leader in Gartner's Magic Quadrant for SaaS Management Platforms for the third year in 2026. New York and Israel, founded 2017, $65M raised with a Series B led by Tiger Global in 2022.
Lutril
Access governance for employees and AI agents: discovery from Google Workspace and Microsoft 365, a Chrome extension and code scanning; requests in Slack, Teams and the app UI with automatic expiry; reviews that revoke; HRIS-driven lifecycle; and an MCP proxy with prompt DLP and a global kill switch. Hosted in France, in French and English.
Capacité par capacité
| Capacité | Torii | Lutril |
|---|---|---|
| SaaS discovery from IdP sign-in and OAuth grants (Google Workspace, Microsoft 365) | OuiGoogle Workspace and Microsoft 365 integrations pull users, usage and third-party appsSource 3 | OuiGoogle Workspace and Microsoft 365 sign-in signals and OAuth grants, from the day you connect |
| Browser extension for shadow IT and shadow AI discovery | OuiExtension detects logins to business applicationsSource 4 | OuiChrome extension for the SaaS and AI tools that skip SSO |
| Access reviews whose keep-or-remove decisions execute the revocation | OuiSince August 2026: reviewers trigger an action and Torii resyncs the appSource 5 | OuiDecisions execute in the connected tool; proof in the campaign export |
| Access requests and approvals in Slack | OuiSlack agent for catalogue requests; approve or deny in SlackSource 6 | OuiRequests, approvals and expiry warnings in Slack |
| Access requests and approvals in Microsoft Teams | OuiTeams agent for requests; approvals inline in TeamsSource 7 | OuiSame flow in Microsoft Teams, and in the app UI |
| Just-in-time, time-boxed access that expires on its own | OuiTemporary access with deprovisioning workflows and admin-set durationsSource 8 | OuiOne hour to seven days; an approver can shorten, never extend; auto-revoked |
| Onboarding triggered by the HRIS | OuiWorkday, BambooHR, HiBob, Rippling, Personio, SuccessFactors and moreSource 9 | OuiLucca, PayFit and Eurécia native; other HRIS through the MCP endpoint |
| Offboarding that deprovisions across SaaS, including apps outside SSO | OuiRevokes every app, including the ones the IdP never sawSource 10 | OuiNative connectors plus a universal MCP endpoint for any tool with an API |
| Shadow AI discovery: AI tools and agents in use | PartielAI tools discovered with sign-up alerts; AI agent discovery not documentedSource 11 | OuiSign-in logs, mailbox scanning, Chrome extension and code scanning |
| AI agent registry with an accountable owner | PartielService accounts, bots and API keys get a human owner; AI agents not namedSource 12 | OuiOwner, model and scopes on every agent; offboarded like an employee |
| MCP proxy or gateway enforcing policy on agent tool calls | Non proposéTorii's MCP server exposes Torii data to assistants; no enforcement on agent tool callsSource 13 | OuiLutril MCP proxy: policy on every call, WORM log, global kill switch |
| Prompt-level DLP and redaction for LLM traffic | Non proposéTorii recommends pairing with a runtime DLP layerSource 14 | OuiDetect and redact PII and secrets in prompts, per-model policy |
| EU hosting and a French-language product | Non proposéEU customers use the US instance; French UI not documentedSource 15 | OuiOVHcloud, France; product and documentation in French |
| Compliance evidence exports for SOC 2 and ISO 27001 | PartielFull decision trail export; no SOC 2 or ISO formatted package documentedSource 16 | OuiCampaign export with decisions and revocation proof, one link |
| Native integrations | PartielHundreds of pre-built integrations; no figure publishedSource 1 | OuiMore than 55 native connectors plus the universal MCP endpoint |
| Published pricing | Non proposéPricing page without figures; access governance requires the Identity moduleSource 2 | Non proposéOn request |
Choisissez Torii si
- Licences, renewals and spend are the first problem and access is the second.
- You want a Gartner Leader for SaaS management with discovery from finance systems as well as the IdP.
- US hosting is acceptable and you can pair a separate DLP product for AI traffic.
Choisissez Lutril si
- Access governance is the job, and AI agents are already part of it: you need a proxy on each MCP tool call, prompt DLP and a kill switch in one product.
- Your data has to stay in the EU, or your team works in French.
- You want one product rather than separate SaaS management, identity and AI management modules.
- Audit evidence should come out as one link with decisions and revocation proof, mapped to SOC 2 and ISO 27001.
Les questions que se posent les acheteurs
Does Torii do access governance now?
Yes. Torii's product updates show access governance going generally available in June 2026, temporary access in July, Slack and Teams request agents in June and July, and automated review remediation in August. It requires the Torii Identity module. Lutril has been access governance from the start, with AI agents governed the same way as employees.
Does Torii govern AI agents through MCP?
Torii offers an MCP server that lets assistants query Torii data, and its own articles state it has no on-premise runtime control and recommend pairing it with a runtime DLP layer. Lutril's MCP proxy sits in front of your SaaS tools, enforces policy on each agent call, redacts sensitive data in prompts and can pause any agent instantly.
Where does Torii store data for European customers?
Torii's GDPR documentation states that EU citizens may use its US instance, and its sub-processor list is US-based, with standard contractual clauses for transfers. Lutril is hosted at OVHcloud in France.
Which one is better for shadow IT discovery?
Both discover from the identity provider and a browser extension. Torii adds finance-system discovery for spend. Lutril adds mailbox scanning for sign-up receipts and code scanning for agents in GitHub and GitLab, then puts every discovered app or agent under access governance with an owner and a decision.
Sources
- 1Torii homepageconsulté le 2 septembre 2026
- 2Torii pricingconsulté le 2 septembre 2026
- 3Torii, Google Workspace integrationconsulté le 2 septembre 2026
- 4Torii, browser extensionconsulté le 2 septembre 2026
- 5Torii product updates, access reviews automated remediationconsulté le 2 septembre 2026
- 6Torii product updates, Slack agent for app catalogconsulté le 2 septembre 2026
- 7Torii product updates, Teams agent for app catalogconsulté le 2 septembre 2026
- 8Torii product updates, temporary access managementconsulté le 2 septembre 2026
- 9Torii, department-based onboarding workflowconsulté le 2 septembre 2026
- 10Torii, real-time offboarding workflowconsulté le 2 septembre 2026
- 11Torii, AI management platformconsulté le 2 septembre 2026
- 12Torii, non-human identitiesconsulté le 2 septembre 2026
- 13Torii, introducing Model Context Protocol in Toriiconsulté le 2 septembre 2026
- 14Torii, six tools for AI governance and policy enforcementconsulté le 2 septembre 2026
- 15Torii, GDPRconsulté le 2 septembre 2026
- 16Torii, identity governance platformconsulté le 2 septembre 2026
- 17Torii, Gartner Magic Quadrant for SaaS Management Platformsconsulté le 2 septembre 2026
- 18Torii, Series B led by Tiger Globalconsulté le 2 septembre 2026
Cette page a été rédigée par Lutril. Les faits concernant Torii proviennent de leur documentation publique au 2 septembre 2026 ; la mention « Non documenté » signifie que nous n'avons trouvé aucune source publique qui confirme ou infirme la capacité. Une erreur ? Écrivez à hello@lutril.com et nous corrigerons.