Corma

Corma is a software asset and identity access management platform for teams that need to connect application usage, licensing, and access control. It is strongest for organizations managing a varied SaaS estate, especially apps that are hard to monitor through standard APIs. Its free plan is a useful starting point, but automated governance sits in Pro and Enterprise pricing is custom.

Overview

Corma combines software discovery and cost oversight with controls for application access. Automatic discovery, usage analytics, renewal tracking, and license reclamation give IT and finance teams a shared view of the software estate; access workflows address who can use it. That breadth is useful when software ownership and access decisions span departments, though the plan split matters: some of the most consequential automation is reserved for Pro.

The company was founded in 2023 and is based in Paris. Corma says it is ISO/IEC 27001:2022 certified, adheres to GDPR, and encrypts service data in transit and at rest. Its web servers and databases run in EU data centers, with AWS used for hosting and compute. On-premise hosting is available on request as an Enterprise setup option.

Key features

Discovery, access, and provisioning

Corma’s Extractor Agent uses browser automation to gather roles and activity from SaaS administration pages when standard APIs do not expose that data. This is a practical distinction for organizations with apps that standard integrations leave partly opaque. Provisioning can use native API integrations or browser-based agents, including for apps without API, SSO, or SCIM support; however, automated provisioning is a Pro feature, not part of the entry paid plan.

Automated access reviews, approval flows, and audit-ready PDF and CSV reports support recurring governance work. These capabilities suit teams that need a formal review trail, but Freemium and Essential do not include automated access reviews.

Spend and integrations

Centralized contracts, invoice and contract scanning, unused-license discovery, expense dashboards, and pricing benchmarks connect access management to SaaS cost control. The integrations directory spans app, HR, finance, identity provider, ITSM, and browser-extension connections, including Google Workspace, Workday, Xero, and Microsoft Edge. Pro includes 200+ integrations; the Freemium plan is limited to 10 direct integrations and 10 managed apps.

Pricing

Corma uses a freemium model. Freemium costs nothing and includes identity-provider connection, a browser extension, SSO connection, and 10 apps. It is a reasonable way for a small team to start connecting identity and software visibility, but the app and integration caps constrain broader inventories.

Essential costs €3 a month, billed on annual engagement. It includes unlimited admin seats and apps, IdP integration, shadow IT detection, financial data input, and browser agents. The annual commitment is the trade-off for the lowest paid tier; it adds scale and discovery capabilities, but not the automated reviews, employee self-serve store, or automated provisioning listed for Pro.

Pro has custom pricing and includes automated access reviews, an employee self-serve store, automated provisioning, 200+ integrations, a communication bot, and unlimited apps. Enterprise also has custom pricing, starting at 1.000 users, and adds multi-SSO and multi-tenant support, custom integrations, a dedicated account manager, advanced security, custom SLAs, and on-premise hosting on request. That makes it an enterprise-scale option rather than a natural next step for smaller teams.

Platforms

Corma supports API, browser extension, self-hosted, web, and Windows. Its hosting choices include AWS-hosted service and an on-premise Enterprise setup on request.

Who it's for

Corma is a good fit for small teams beginning to organize software access, finance users seeking contract and expense visibility, and IT teams that need to uncover shadow IT or automate governance. Its browser-based collection and provisioning approach is particularly relevant where some applications lack standard API, SSO, or SCIM support. Organizations that need access reviews and automated provisioning should budget for Pro; teams with fewer than 10 apps may find Freemium sufficient to begin, while the Enterprise minimum makes that tier a poor fit for smaller organizations.

Pros and cons

• Pro: Browser automation can collect role and activity data from SaaS admin pages when standard APIs cannot, helping expose otherwise hard-to-see access.
• Pro: License, renewal, usage, contract, and expense features bring software governance and cost oversight into one platform.
• Con: Freemium is capped at 10 apps and 10 direct integrations, limiting its reach for a growing software estate.
• Con: Automated reviews and provisioning are Pro features, and Pro and Enterprise both require custom pricing.
• Con: Essential is billed on annual engagement, so its low monthly price comes with a commitment.

Alternatives

Consider ManageEngine SaaS Manager Plus if a web-based option capped at two applications after its trial is enough, or if its yearly plan for up to five apps better suits a small inventory. SpendVera is another web-based freemium choice: its Free plan covers up to 10 subscriptions and core cost transparency, while Growth covers up to 50 subscriptions for €29 a month.

Teisko may suit teams prioritizing a free browser-extension and web plan with unlimited apps, up to 100 managed users, invoice extractions, and a limited number of access reviews. For pricing insights on software products through a Chrome extension, consider Vendr. BetterCloud is an alternative for basic license-utilization and contract management or a 21-day File Governance trial.

TechStackTrack is another web-based freemium alternative. For a paid modular enterprise IT knowledge-management solution, consider USU Knowledge Management. Zluri is a paid alternative with custom pricing.

Browse more options in SaaS Management Platforms or Identity Governance Software.

Verdict

Corma is best for organizations that want software usage, spend, and access governance in a single system, especially when browser-based collection can fill gaps left by standard integrations. Its breadth and support for apps without API, SSO, or SCIM are the main reasons to choose it. Look elsewhere if a predictable published price is essential or if you need automated access reviews and provisioning without moving beyond the entry tiers.