The main feature missing is automatic user provisioning (your version of SCIM?). Access review is nice and also not just for enterprises, as many businesses today need to be SOC 2 / ISO 27001 compliant, but since its a quarterly process it's less critical.
I agree with you. SOC/ISO27001 became more popular. Even quarterly access reviews are already pain the more people you have. Documenting all the things is a lot of work.
However, feel free to try our product or contact us to get a live demo :-)