SailPoint

Security for AI Identity Access also known as SailPoint Technologies, SailPoint, Inc.

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Advanced: Market readiness of 31 or above. Above the typical band, which few analyzed companies reach.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2005
Last updated 2026-08-12

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

SailPoint is a public identity-governance company whose strength is scale and incumbency, not a single feature. Annual recurring revenue reached $1.125 billion in the fiscal year ended January 2026, up 28%, KuppingerCole's current governance Leadership Compass names it an Overall Leader, and Gartner Peer Insights customers rate it 4.8. Its platform is wired into large enterprises, where two decades of access certifications and connectors make switching costly, an inference rather than a documented cost. Agent Identity Security, generally available since September 2025, governs AI agents as one identity class there, which a larger identity vendor could reproduce. The embedded platform and disclosed traction are the durable advantage, strongest where the buyer already runs SailPoint.

Sourced Details

Description Enterprise identity security company whose Identity Security Cloud governs access for human, machine, and AI agent identities, with an Agent Identity Security line that governs AI agents as first-class identities. [f1]
Founded 2005 [f2]
HQ Austin, Texas, USA [f1]
Subsidiaries Entro Security (Tel Aviv-based non-human-identity and credentials security vendor. SailPoint completed the acquisition on June 29, 2026. Calcalist valued the deal at approximately $200 million.)
Latest funding Nasdaq IPO February 2025 (ticker SAIL), 60,000,000 shares at $23.00 per share [f3]

Products

Product What it does
Agent Identity Security Governs AI agents as first-class identities, aggregating them across clouds and agent platforms, aligning ownership with role changes, and reviewing and revoking their access in one governed view.
Identity Security Cloud SaaS identity governance platform that discovers, manages, and governs access across human, machine, and AI agent identities for large enterprises.
SailPoint Agentic Fabric SailPoint positions Agentic Fabric as security for the agentic enterprise, bringing clarity and control for non-human identities from discovery to remediation.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

SailPoint Agent Identity Security aggregates AI agents across clouds and agent platforms as governed identities, aligns ownership with role changes, and reviews and revokes their access. This line is mapped to the AI Defense Matrix. [f4]

Cyber Defense Matrix

IdentifyProtectDetectRespondRecover
Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware.
Applications Software, interactions, and application flows on the devices.
Networks Connections and traffic flowing among devices and apps, plus communication paths.
Data Content at rest, in transit, or in use across devices, apps, and networks.
Users The people using the devices, apps, networks, and data.

SailPoint Identity Security Cloud discovers human and machine identities, governs and certifies their access to applications, and detects access risk across the enterprise. These identity governance capabilities are mapped to the Cyber Defense Matrix. [f1]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Advanced 31 /40 Advanced: Market readiness of 31 or above. Above the typical band, which few analyzed companies reach.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 SailPoint names a precise buyer, the enterprise identity and security leaders it markets to, in an analyst-tracked category KuppingerCole defines and where it lists SailPoint an Overall Leader (s1, s13). The pain is real but framed by SailPoint and analysts rather than independently quantified across multiple non-vendor sources. [s1, s2, s13]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 4/5 Identity Security Cloud documents concrete governance, IdentityAI, and agent mechanics on detailed product pages, and a public developer community exposes the APIs, SDKs, and connector framework that extend it (s2, s16, s17). KuppingerCole rates the platform an Overall Leader and Gartner Peer Insights customers score it 4.8 from 197 verified reviews, external validation beyond marketing (s13, s15). [s2, s16, s17, s13, s15]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 3/5 Identity governance is an established budget line with a credible AI-agent tailwind SailPoint names, but the demand evidence for the newer agent class concentrates in the September 2025 launch and design-partner interest rather than multiple independent buyer-side signals within the window (s3, s9, s14). [s3, s9, s14]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 4/5 SailPoint is a two-decade identity company, public on Nasdaq since February 2025, with founder Mark McClain leading as CEO and a verifiable governance record reported independently (s4, s5, s14). That is sustained, publicly verifiable standing, level with the identity peers that hold comparable public records. [s1, s4, s5, s14]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 5/5 SailPoint discloses substantial and rising traction, $877 million in ARR growing 29% with roughly 80% more customers above $1 million ARR (s14), the kind of third-party-reported revenue scale that clears the top mark. KuppingerCole names it an IGA Overall Leader and Gartner Peer Insights customers rate it 4.8 from 197 reviews, corroborating its standing (s13, s15). [s14, s13, s15]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 4/5 As a public company SailPoint disclosed greater-than-rule-of-40 performance for fiscal 2025, the SaaS balance of ARR growth and operating margin alongside 29% ARR growth, confirmed efficient growth at scale rather than the unverifiable private default (s14). It holds below the top rung because GAAP profitability is not independently established given the leveraged buyout. [s14, s4]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 4/5 Identity governance is an established category buyers place without coaching, and independent analysts confirm SailPoint's standing, KuppingerCole naming it an Overall Leader and Gartner Peer Insights customers rating it 4.8 (s13, s15, s1). It holds at 4 because SailPoint leads alongside Saviynt, IBM, Oracle, and Microsoft rather than defining the category by itself. [s13, s15, s1]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 4/5 At whole-company scope SailPoint is the incumbent, with two decades of access certifications, connectors, and audit trails embedded across enterprise deployments and a widening install base evidenced by roughly 80% growth in customers over $1 million of ARR (s14, s1). That deep workflow embedding and procurement position is a structural moat bundling alone would not replicate. [s14, s1, s4]
Business Risks Platform incumbents Okta and Microsoft could bundle comparable identity-governance and agent controls into products their shared enterprise buyers already license, compressing SailPoint's standalone value…
  • Platform incumbents Okta and Microsoft could bundle comparable identity-governance and agent controls into products their shared enterprise buyers already license, compressing SailPoint's standalone value.
  • The Agent Identity Security line shows only named design partners in the public record, not a roster of paying agent-governance customers distinct from the broader install base, so agent-line adoption is unproven.
  • Thoma Bravo remains a major shareholder after the 2022 take-private and 2025 relisting, concentrating strategic influence with the private-equity owner.
  • A material slowdown in ARR growth would test the greater-than-rule-of-40 balance that SailPoint's public equity story depends on.
Problem & Market SailPoint sells into a budget line large enterprises already fund, identity governance and administration, and the buyer is the enterprise identity team answering to the CISO. KuppingerCole tracks identity governance as a defined analyst category and names SailPoint an Overall Leader within it, so the problem and the buyer are well established rather than something SailPoint has to define. The newer pressure is non-human identity. SailPoint frames AI agents and machine accounts as an explosion of identities most organizations cannot see or govern, and extends the same certification and least-privilege controls to them. That pain is real and recognized by SailPoint's existing buyers, though it is framed more by SailPoint and analysts than quantified independently across multiple non-vendor sources…

SailPoint sells into a budget line large enterprises already fund, identity governance and administration, and the buyer is the enterprise identity team answering to the CISO. KuppingerCole tracks identity governance as a defined analyst category and names SailPoint an Overall Leader within it, so the problem and the buyer are well established rather than something SailPoint has to define.

The newer pressure is non-human identity. SailPoint frames AI agents and machine accounts as an explosion of identities most organizations cannot see or govern, and extends the same certification and least-privilege controls to them. That pain is real and recognized by SailPoint's existing buyers, though it is framed more by SailPoint and analysts than quantified independently across multiple non-vendor sources. [s1, s2, s13]

Product Capabilities SailPoint Identity Security Cloud discovers, certifies, and governs access for human, machine, and AI agent identities across on-premises and cloud environments, the work the company has refined for two decades. IdentityAI adds machine-learning access modeling, peer-group analysis, and outlier risk scoring that turn a customer's access history into role and certification recommendations. The platform's depth shows in signals beyond marketing. A public developer community documents the APIs, SDKs, and connector framework that extend Identity Security Cloud, KuppingerCole rates the platform an Overall Leader, and Gartner Peer Insights customers score it 4.8 across 197 verified reviews. Agent Identity Security, generally available since September 2025, applies the same entitlement-level governance to AI agents that SailPoint already operates for human access…

SailPoint Identity Security Cloud discovers, certifies, and governs access for human, machine, and AI agent identities across on-premises and cloud environments, the work the company has refined for two decades. IdentityAI adds machine-learning access modeling, peer-group analysis, and outlier risk scoring that turn a customer's access history into role and certification recommendations.

The platform's depth shows in signals beyond marketing. A public developer community documents the APIs, SDKs, and connector framework that extend Identity Security Cloud, KuppingerCole rates the platform an Overall Leader, and Gartner Peer Insights customers score it 4.8 across 197 verified reviews. Agent Identity Security, generally available since September 2025, applies the same entitlement-level governance to AI agents that SailPoint already operates for human access. [s2, s3, s9, s16, s13, s15]

Competitive Positioning SailPoint competes against both platform incumbents and identity-governance peers. Okta and Microsoft reach the same enterprise identity teams and can extend agent and governance controls into products buyers already own, which is the main pressure on any single SailPoint feature. Against governance peers Saviynt and Veza, SailPoint's edge is the depth and reach of an installed platform rather than any one capability. KuppingerCole lists SailPoint among the identity-governance Overall Leaders alongside Saviynt, IBM, Oracle, and Microsoft, an established category with several capable rivals. The structural position comes from the access certifications, connectors, and audit trails enterprises have wired into Identity Security Cloud over two decades, which a newer entrant cannot assemble quickly…

SailPoint competes against both platform incumbents and identity-governance peers. Okta and Microsoft reach the same enterprise identity teams and can extend agent and governance controls into products buyers already own, which is the main pressure on any single SailPoint feature.

Against governance peers Saviynt and Veza, SailPoint's edge is the depth and reach of an installed platform rather than any one capability. KuppingerCole lists SailPoint among the identity-governance Overall Leaders alongside Saviynt, IBM, Oracle, and Microsoft, an established category with several capable rivals. The structural position comes from the access certifications, connectors, and audit trails enterprises have wired into Identity Security Cloud over two decades, which a newer entrant cannot assemble quickly. [s1, s2, s13]

Go-to-Market & Traction SailPoint's traction is substantial and publicly disclosed…

SailPoint's traction is substantial and publicly disclosed. It grew annual recurring revenue 29% to $877 million in fiscal 2025 and finished the year with roughly 80% more customers carrying over $1 million of ARR, figures it discloses in its public-company investor reporting.

Independent recognition corroborates its market standing. KuppingerCole names SailPoint an identity-governance Overall Leader, and Gartner Peer Insights customers rate it 4.8 from 197 reviews with 96% willing to recommend. For the newer Agent Identity Security line specifically, the public proof is still limited to named design partners such as CVS, Equinix, NVIDIA, and VSP, so agent-line adoption beyond co-development is the open question. [s14, s13, s15, s10]

Team & Credibility SailPoint is a two-decade identity company that returned to Nasdaq in February 2025 under the ticker SAIL, selling 60 million shares at $23.00 per share. Founder Mark McClain leads it as CEO, and the company sustained its governance position through a first public listing, a 2022 take-private by Thoma Bravo, and the 2025 relisting. That record is independently reported. Thoma Bravo took SailPoint private in 2022 for $6.9 billion and remained a major shareholder into the relisting, so a private-equity owner continues to shape strategic direction alongside public shareholders…

SailPoint is a two-decade identity company that returned to Nasdaq in February 2025 under the ticker SAIL, selling 60 million shares at $23.00 per share. Founder Mark McClain leads it as CEO, and the company sustained its governance position through a first public listing, a 2022 take-private by Thoma Bravo, and the 2025 relisting.

That record is independently reported. Thoma Bravo took SailPoint private in 2022 for $6.9 billion and remained a major shareholder into the relisting, so a private-equity owner continues to shape strategic direction alongside public shareholders. [s1, s4, s5, s14]

Trust Readiness SailPoint publishes a trust center documenting its attestations for Identity Security Cloud. It completes SOC 1 Type 2 and SOC 2 Type 2 audits annually and operates an ISO 27001 and SOC 2 information security management system. These are the enterprise table stakes a regulated buyer expects, held at the company and Identity Security Cloud level, and SailPoint does not publish a separate Agent Identity Security certification scope. Product security is tested in the field. In December 2024 the National Vulnerability Database recorded a critical access-control flaw in the on-premises IdentityIQ product, CVE-2024-10905, that allowed access to files that should have been protected, which SailPoint addressed in fixed patch levels for the affected versions. The disclosure shows both real exposure in the older deployment model and a working advisory and patch process…

SailPoint publishes a trust center documenting its attestations for Identity Security Cloud. It completes SOC 1 Type 2 and SOC 2 Type 2 audits annually and operates an ISO 27001 and SOC 2 information security management system. These are the enterprise table stakes a regulated buyer expects, held at the company and Identity Security Cloud level, and SailPoint does not publish a separate Agent Identity Security certification scope.

Product security is tested in the field. In December 2024 the National Vulnerability Database recorded a critical access-control flaw in the on-premises IdentityIQ product, CVE-2024-10905, that allowed access to files that should have been protected, which SailPoint addressed in fixed patch levels for the affected versions. The disclosure shows both real exposure in the older deployment model and a working advisory and patch process. [s6, s11]

Competitors Saviynt, Okta, Microsoft, Veza…
Company Relationship Note Compare
Saviynt competes with Identity governance and administration peer selling to the same enterprise identity buyers, with its own agent and non-human identity capabilities.
Okta competes with Identity platform that reaches the same enterprise buyers and can extend agent identity governance into products customers already license. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Microsoft competes with Microsoft Entra reaches enterprise identity teams and is building agent identity controls into the Microsoft stack buyers already own. N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product.
Veza competes with Access governance vendor extending its platform to agentic AI identities for the same enterprise access-governance buyer.

Add analyzed competitors to compare them side by side with SailPoint.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 14 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

SailPoint's position rests on the setup each customer builds up over years. Its governance platform is embedded in large enterprises, where two decades of access certifications and connectors imply a costly switch, though the cited record does not size the exit. SailPoint disclosed $1.125 billion in annual recurring revenue growing 28% for the fiscal year ended January 2026, with SaaS annual recurring revenue growing 38%. A funded identity rival could reproduce the agent-governance capability and the SOC and ISO attestations, and no named cross-customer data asset appears in the record, so neither the data position nor the attestations is documented as an advantage. SailPoint is strongest for enterprises already standardized on it, weakest as a standalone agent pick.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 SailPoint delivers governance software the customer configures and runs, discovery, certification, and access review across human, machine, and agent identities, sold as a SaaS platform rather than a managed service that accepts accountability for outcomes (s2, s9, s19). That is the software-product level the identity-governance peers share.
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 SailPoint has governed identity for large organizations for over 20 years, and the disclosed 80% growth in customers carrying more than $1 million of annual recurring revenue is traction in large accounts rather than evidence of what a migration would cost (s1, s14). The mechanism the record does document is the connector and API surface an enterprise wires its applications into (s16), which is rung 2's integrations rather than a sized exit, and the cost of leaving stays unmeasured, so the documented case is meaningful friction and not a genuinely expensive migration.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 1/3 SailPoint holds table-stakes SOC 1, SOC 2, and ISO 27001 attestations for Identity Security Cloud and runs a corporate security program stated to accord with ISO 27001 and SOC 2, the cited trust page does not identify Agent Identity Security as a separate certification scope, and no regulatory mandate appears that a funded rival could not reproduce (s6, s1), so the score holds at the peer baseline.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 Governing and certifying access for human, machine, and agent identities at enterprise scale across the major cloud and agent platforms requires years of specialized engineering (s2, s3).
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 3/3 SailPoint's buyer is the large enterprise carrying audit obligations, evidenced by disclosed growth in customers carrying over $1 million of annual recurring revenue and by governance and compliance being the job the platform is sold to do (s14, s1). Procurement and audit friction at replacement put the buyer above earlier-stage segments.
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 3/3 The platform is the governance control plane an enterprise wires its applications into, through a documented connector and integration framework and a public developer API surface, and administrative access to those systems is granted through it at the moment of use, only for the duration a task requires (s16, s2, s21). SailPoint can therefore mediate administrative access rather than sit beside it, and that connector, API, and control-plane role is an infrastructure position rather than an end-user application.
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 1/3 IdentityAI applies machine learning and peer-group analysis to each customer's own access history and entitlements, real capability but a within-tenant model a funded rival could rebuild, and no named non-public cross-customer dataset is documented (s17, s2), so the score holds at the baseline.
Strategic Market Segmentation SailPoint sells to large enterprises that already run formal identity governance, the segment KuppingerCole tracks and where its current Leadership Compass lists SailPoint among the Overall Leaders. The buyer is the enterprise identity team, and SailPoint disclosed roughly 80% growth in customers carrying over $1 million of annual recurring revenue in the year ended January 2025, a precise, high-value segment. The Agent Identity line extends that same buyer to AI agents rather than reaching a new segment. Design partners named in the September 2025 platform announcement, such as CVS, Equinix, and NVIDIA, are the kind of large enterprise that already buys identity governance, which keeps the segmentation consistent but ties the agent line to enterprises standardizing on SailPoint…

SailPoint sells to large enterprises that already run formal identity governance, the segment KuppingerCole tracks and where its current Leadership Compass lists SailPoint among the Overall Leaders. The buyer is the enterprise identity team, and SailPoint disclosed roughly 80% growth in customers carrying over $1 million of annual recurring revenue in the year ended January 2025, a precise, high-value segment.

The Agent Identity line extends that same buyer to AI agents rather than reaching a new segment. Design partners named in the September 2025 platform announcement, such as CVS, Equinix, and NVIDIA, are the kind of large enterprise that already buys identity governance, which keeps the segmentation consistent but ties the agent line to enterprises standardizing on SailPoint.

Product Capabilities & AI Advantages The SailPoint platform governs access for human, machine, and agent identities, and IdentityAI adds machine-learning access modeling, peer-group analysis, and outlier risk scoring that convert access history into role and certification recommendations. A public developer community documents the APIs, SDKs, and connector framework that extend the platform. The capability rests on two decades of governance engineering rather than a new build, and KuppingerCole and Gartner Peer Insights independently rate the platform highly. SailPoint now sells the human and agent sides as Human Fabric and Agentic Fabric, describing Human Fabric as the evolution of Identity Security Cloud, and applies the same entitlement-level governance to AI agents, though those agent controls are reproducible by a larger identity platform…

The SailPoint platform governs access for human, machine, and agent identities, and IdentityAI adds machine-learning access modeling, peer-group analysis, and outlier risk scoring that convert access history into role and certification recommendations. A public developer community documents the APIs, SDKs, and connector framework that extend the platform.

The capability rests on two decades of governance engineering rather than a new build, and KuppingerCole and Gartner Peer Insights independently rate the platform highly. SailPoint now sells the human and agent sides as Human Fabric and Agentic Fabric, describing Human Fabric as the evolution of Identity Security Cloud, and applies the same entitlement-level governance to AI agents, though those agent controls are reproducible by a larger identity platform.

Sales Engagement & Go-to-Market SailPoint reaches buyers through a partner ecosystem it documents publicly, spanning delivery, advisory, regional, and managed-service partner types whose global partners, in SailPoint's description, offer consulting, implementation, and ongoing management of its solutions (s18). The size of its direct sales organization is not in the cited record, so an established enterprise field motion is an inference from public-company scale. Annual recurring revenue reached $1.125 billion in the fiscal year ended January 2026, up 28%, with SaaS annual recurring revenue up 38%, and Gartner Peer Insights customers rate it 4.8 with 96% willing to recommend. For the Agent Identity line specifically, the cited materials name design partners CVS, Equinix, NVIDIA, and VSP, not a roster of paying agent-governance customers. The line is likely sold through the existing enterprise identity motion, an inference from SailPoint's scale rather than a documented agent-product channel…

SailPoint reaches buyers through a partner ecosystem it documents publicly, spanning delivery, advisory, regional, and managed-service partner types whose global partners, in SailPoint's description, offer consulting, implementation, and ongoing management of its solutions (s18). The size of its direct sales organization is not in the cited record, so an established enterprise field motion is an inference from public-company scale. Annual recurring revenue reached $1.125 billion in the fiscal year ended January 2026, up 28%, with SaaS annual recurring revenue up 38%, and Gartner Peer Insights customers rate it 4.8 with 96% willing to recommend.

For the Agent Identity line specifically, the cited materials name design partners CVS, Equinix, NVIDIA, and VSP, not a roster of paying agent-governance customers. The line is likely sold through the existing enterprise identity motion, an inference from SailPoint's scale rather than a documented agent-product channel.

Pricing Model SailPoint publishes its packaging without prices…

SailPoint publishes its packaging without prices. The suites page names Standard, Business, Business Plus, and Agentic Business tiers with per-suite add-ons such as Cloud Infrastructure Entitlement Management and Non-Employee Risk Management, and every tier routes to a demo booking rather than a list price (s22). The Agent Identity Security product page carries no price either (s2). Routing every tier to a demo rather than a price fits the enterprise buyer.

Disclosed recurring-revenue growth confirms a subscription model (s19), but the published packaging states one allotment and no prices. The suites page grants Agentic Business and Agentic Business Plus customers an initial one-time allotment of five non-human identities for each human identity, a ratio it says will not fall below five to one at general availability, while the rate for usage beyond that allotment stays unpublished (s22). The agent line's price is therefore inferred from the enterprise-suite motion rather than documented.

Product Delivery & Operations SailPoint delivers Identity Security Cloud as a SaaS service, and SailPoint states it completes SOC 1 Type 2 and SOC 2 Type 2 audits of that service annually, an established operational posture (s6). Agent Identity Security ships on the same platform (s2). Delivery is governance software rather than a managed service that accepts accountability for outcomes, so the customer's identity team is the party that operates the governance program, sets its policies and reviews, and owns its results. The cited record does not define that split of operational accountability, so it reads as an inference from the software delivery model rather than a documented responsibility allocation…

SailPoint delivers Identity Security Cloud as a SaaS service, and SailPoint states it completes SOC 1 Type 2 and SOC 2 Type 2 audits of that service annually, an established operational posture (s6). Agent Identity Security ships on the same platform (s2).

Delivery is governance software rather than a managed service that accepts accountability for outcomes, so the customer's identity team is the party that operates the governance program, sets its policies and reviews, and owns its results. The cited record does not define that split of operational accountability, so it reads as an inference from the software delivery model rather than a documented responsibility allocation.

Earning Customers' Trust SailPoint publishes a trust center with attestations for Identity Security Cloud, completing SOC 1 Type 2 and SOC 2 Type 2 audits annually and running an ISO 27001 and SOC 2 information security management system. The certification and the annual audits are stated for Identity Security Cloud, while the corporate security program is described as an information security management system established in accordance with ISO 27001 and SOC 2, and the cited trust page does not identify a separate Agent Identity Security certification scope. Attestations at this level read as a credibility floor for the enterprise identity buyer rather than a differentiator, since a funded rival could obtain comparable audits, and the cited record carries no peer-certification comparison. Product security is also tested in the field: in December 2024 the National Vulnerability Database recorded a critical access-control flaw in the on-premises IdentityIQ product, CVE-2024-10905, which SailPoint addressed in fixed patch levels for the affected versions…

SailPoint publishes a trust center with attestations for Identity Security Cloud, completing SOC 1 Type 2 and SOC 2 Type 2 audits annually and running an ISO 27001 and SOC 2 information security management system. The certification and the annual audits are stated for Identity Security Cloud, while the corporate security program is described as an information security management system established in accordance with ISO 27001 and SOC 2, and the cited trust page does not identify a separate Agent Identity Security certification scope.

Attestations at this level read as a credibility floor for the enterprise identity buyer rather than a differentiator, since a funded rival could obtain comparable audits, and the cited record carries no peer-certification comparison. Product security is also tested in the field: in December 2024 the National Vulnerability Database recorded a critical access-control flaw in the on-premises IdentityIQ product, CVE-2024-10905, which SailPoint addressed in fixed patch levels for the affected versions.

Platform Strategy & Ecosystem Positioning SailPoint's platform position is its strongest structural asset…

SailPoint's platform position is its strongest structural asset. The platform is the governance control plane an enterprise wires its applications into, and its long-running connector and access-review model creates incumbent friction in mature deployments. A public developer community exposes the APIs, SDKs, and connector framework that extend identity services to other applications (s16). Administrative access to those systems is granted through the platform at the moment of use, only for the duration a task requires (s21).

The ecosystem reach makes the agent line a feature of an embedded control plane rather than a standalone tool, the main reason an existing SailPoint enterprise would extend agent governance on the platform it already runs. SailPoint completed its acquisition of Entro Security, a non-human-identity and credentials vendor, in June 2026 (s20), in a deal Calcalist valued at approximately $200 million (s7), which deepens its non-human-identity and secrets coverage.

Team & Execution Capability SailPoint is a two-decade identity company that returned to Nasdaq in February 2025 under the ticker SAIL, in an offering of 60 million shares at $23.00 per share, 57.5 million of them issued and sold by SailPoint and 2.5 million sold by existing stockholders, with founder Mark McClain leading as CEO. It sustained its governance position through a first public listing, a 2022 take-private, and the 2025 relisting. The record is independently reported. Thoma Bravo took SailPoint private in 2022 for $6.9 billion and remained the owner into the 2025 relisting (s4). What that ownership now means for board rights or strategic direction is not documented in the cited record…

SailPoint is a two-decade identity company that returned to Nasdaq in February 2025 under the ticker SAIL, in an offering of 60 million shares at $23.00 per share, 57.5 million of them issued and sold by SailPoint and 2.5 million sold by existing stockholders, with founder Mark McClain leading as CEO. It sustained its governance position through a first public listing, a 2022 take-private, and the 2025 relisting.

The record is independently reported. Thoma Bravo took SailPoint private in 2022 for $6.9 billion and remained the owner into the 2025 relisting (s4). What that ownership now means for board rights or strategic direction is not documented in the cited record.

Sources

Company Detail Sources (4)
Id Source Tier Accessed
f1 About SailPoint official 2026-06-25
f2 SiliconANGLE: SailPoint targets $1.05B in Nasdaq IPO as Thoma Bravo takes company public again press 2026-06-25
f3 SailPoint announces pricing of upsized initial public offering official 2026-06-25
f4 SailPoint Agent Identity Security official 2026-06-25
Profile Analysis Sources (16)
Id Source Tier Accessed
s1 About SailPoint
“For over 20 years, SailPoint has helped the world's largest organizations secure and govern every identity, human, machine, and now AI.”
official 2026-06-25
s2 SailPoint Agent Identity Security
“Agent Identity Security brings AI agents, their users, and the tools they access together in one governed view.”
official 2026-06-25
s3 SailPoint ushers in new era of adaptive identity with the SailPoint Platform
“AUSTIN, Texas, September 30, 2025, SailPoint, Inc. (Nasdaq: SAIL), a leader in enterprise identity security, kicked off its 2025 Navigate series. The company also released new innovations including Agent Identity Security.”
official 2026-06-25
s4 SiliconANGLE: SailPoint targets $1.05B in Nasdaq IPO as Thoma Bravo takes company public again
“The private equity firm has owned SailPoint since it acquired the company for a second time in 2022 for $6.9 billion. Founded in 2005, SailPoint specializes in identity security solutions.”
press 2026-06-25
s5 SailPoint announces pricing of upsized initial public offering
“SailPoint, Inc. today announced the pricing of its upsized initial public offering of 60,000,000 shares of its common stock at a public offering price of $23.00 per share. The shares are expected to begin trading on Nasdaq Global Select Market on February 13, 2025 under the ticker symbol "SAIL".”
official 2026-06-25
s6 SailPoint Trust Center Cybersecurity
“SailPoint completes a SOC 1 Type 2 and SOC 2 Type 2 audit of the Identity Security Cloud service annually. In accordance with ISO 27001 and SOC 2, SailPoint has established an Information Security Management System (ISMS).”
official 2026-06-25
s7 Calcalist: SailPoint acquires Entro Security in $200 million deal
“SailPoint acquires Israeli cyber startup Entro Security in $200 million deal.”
press 2026-06-25
s8 AI Defense Matrix Catalog mapping for SailPoint Agent Identity Security
“Governs AI agents as first-class identities, aggregating them across clouds and agent platforms, aligning ownership with role changes, and reviewing their access.”
other 2026-06-25
s9 SecurityBrief: SailPoint enhances identity and data security with AI-driven tools
“SailPoint also announced the general availability of Agent Identity Security (AIS), intended to secure AI agents at the entitlement level.”
press 2026-06-25
s10 StockTitan: SailPoint Launches AI-Powered Identity Security Platform with CVS, NVIDIA
“SailPoint sets the direction for unifying identity, data and security with design partners CVS, Equinix, NVIDIA, VSP, and more.”
press 2026-06-25
s11 NVD CVE-2024-10905 critical access-control flaw in SailPoint IdentityIQ
“IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected.”
research 2026-06-30
s13 KuppingerCole Leadership Compass: Identity Governance and Administration
“The Overall Leaders are Saviynt, EmpowerID, SailPoint, IBM, Ping Identity, Broadcom, Oracle, One Identity, Identity Plus, OpenText, RSA, Omada, SAP, Netwrix, BAAR-IGA, CoffeeBean Technology, ZertID, Microsoft.”
research 2026-06-30
s14 SailPoint Announces Strong Fiscal Fourth Quarter and Full Year 2025 Financial Results
“Grew ARR 29% year-over-year to $877 million. Finished the year with an ~80% year-over-year increase in the number of customers with more than $1 million of ARR, and a year of greater than rule of 40 performance.”
official 2026-06-30
s15 SailPoint recognized as a 2026 Gartner Peer Insights Customers Choice for Identity Governance and Administration
“SailPoint received a 4.8 out of 5 overall rating in the report, with 197 reviews over the reporting timeframe between August 1, 2024 and January 31, 2026. Of respondents, 96% noted their willingness to recommend SailPoint.”
official 2026-06-30
s16 SailPoint Developer Community
“Get started with Identity Security Cloud. Make your first API call. Build a Transform. Build a SaaS Connector.”
official 2026-06-30
s17 SailPoint IdentityAI
“Get automated recommendations for certifications and access approvals based on peer group analysis, identity attributes, and access activity.”
official 2026-06-30
Deep-Dive Sources (20)
Id Source Tier Accessed
s1 About SailPoint
“For over 20 years, SailPoint has helped the world’s largest organizations secure and govern every identity—human, machine, and now AI.”
official 2026-08-12
s2 SailPoint Agent Identity Security
“Agent Identity Security brings AI agents, their users, and the tools they access together in one governed view.”
official 2026-08-12
s3 SailPoint ushers in new era of adaptive identity with the SailPoint Platform
“As part of its series of announcements, the company also released new innovations including Agent Identity Security and Observability & Insights, plus significant updates to both Data Access Security and Atlas.”
official 2026-08-12
s4 SiliconANGLE: SailPoint targets $1.05B in Nasdaq IPO as Thoma Bravo takes company public again
“The advisory fee for Thoma Bravo is of interest, as the private equity firm has owned SailPoint since it acquired the company for a second time in 2022 for $6.9 billion.”
press 2026-08-12
s5 SailPoint announces pricing of upsized initial public offering
“today announced the pricing of its upsized initial public offering of 60,000,000 shares of its common stock at a public offering price of $23.00 per share.”
official 2026-08-12
s6 SailPoint Trust Center Cybersecurity
“SailPoint completes a SOC 1 Type 2 and SOC 2 Type 2 audit of the Identity Security Cloud service annually.”
official 2026-08-12
s7 Calcalist: SailPoint acquires Entro Security in $200 million deal
“Financial terms of the transaction were not disclosed, but Calcalist has learned that the deal is valued at approximately $200 million.”
press 2026-08-12
s9 SecurityBrief: SailPoint enhances identity and data security with AI-driven tools
“SailPoint also announced the general availability of Agent Identity Security (AIS), intended to secure AI agents at the entitlement level.”
press 2026-08-12
s10 StockTitan: SailPoint Launches AI-Powered Identity Security Platform with CVS, NVIDIA
“With a wave of new capabilities, SailPoint sets the direction for unifying identity, data and security with design partners CVS, Equinix, NVIDIA, VSP, and more”
press 2026-08-12
s11 NVD CVE-2024-10905 critical access-control flaw in SailPoint IdentityIQ
“IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected.”
research 2026-08-12
s13 KuppingerCole Leadership Compass: Identity Governance and Administration (IGA), May 2026 edition
“SailPoint Overall Leader”
research 2026-08-12
s14 SailPoint Announces Strong Fiscal Fourth Quarter and Full Year 2025 Financial Results
“Finished the year with an ~80% year-over-year increase in the number of customers with more than $1 million of ARR”
official 2026-08-12
s15 SailPoint recognized as a 2026 Gartner Peer Insights Customers Choice for Identity Governance and Administration
“SailPoint received a 4.8 out of 5 overall rating in the report, with 197 reviews over the reporting timeframe between August 1, 2024 and January 31, 2026. Of respondents, 96% noted their willingness to recommend SailPoint.”
official 2026-08-12
s16 SailPoint Developer Community
“Identity Security Cloud API specifications and getting-started essentials.”
official 2026-08-12
s17 SailPoint IdentityAI
“Get automated recommendations for certifications and access approvals based on peer group analysis, identity attributes, and access activity.”
official 2026-08-12
s18 SailPoint Our Partner Ecosystem
“Our global partners offer consulting, implementation, and ongoing management of SailPoint solutions and integrations you can count on.”
official 2026-08-12
s19 StockTitan: SailPoint 8-K carrying the fiscal fourth quarter and full year 2026 earnings release
“Total ARR was $1.125 billion, an increase of 28% year-over-year. SaaS ARR was $746 million, an increase of 38% year-over-year.”
press 2026-08-12
s20 SailPoint completes acquisition of Entro Security to secure agentic identities
“today announced it has completed its acquisition of Tel Aviv-based Entro Security, a pioneer in non-human identity (NHI) and credentials security.”
official 2026-08-12
s21 SailPoint eliminates blind spots with unified protection across human, non-human, and AI agent identities
“Just-In-Time Provisioning (JIT-P) to grant administrative access only for the exact duration a task requires.”
official 2026-08-12
s22 SailPoint Suites
“Our suites build on each other to meet your evolving identity security needs for human and non-human identities.”
official 2026-08-12

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.