SailPoint is theleader in Identity Security. SailPoint customers represent half of the Fortune 500 and half of the ASX 50. This customer strength provides us with a great community of customers, partners and analysts who trust SailPoint and our team to solve complex challenges. SailPoint continues to grow globally and expanding our global presence creates opportunities for top salespeople to become a part of our awesome culture.
We are recognized by analysts such as Gartner, Forester and Kuppinger Cole as the leader in the market and we continue to push ourselves to define the market rather than follow what the analysts or competitors are marketing.Organizations struggle to understand who has access to what applications and data, and we help them answer these key questions. Identity security is the central control point for risk management for the enterprise.
We are proud of our team and the culture we have built which has led to our employees voting us “best places to work” – 15 years in a row.
The role:
We are seeking anAccount Executive, to sell our Identity Security Solution within Public Sector (with a high proportion being Central Government).
To excel, the position requires an account executive:
Who is a skilled communicator in first engagements and discovery callsanalyzingthe prospects needs to qualify an opportunity.
Who will be highly proficient in understanding and presenting the value of SailPoint solutions and how they compare to Microsoft, Okta, and Saviynt.
Who will provide a superior customer experience from the first discovery call and leverage their skills in competitively positioning our solutions and a broader value proposition including partnerservices.
Who can lead a virtual team of partner resources, presales, partner manager, deal desk, professional services, BVA team, and customer success to deliver sales wins and customer success.
Who does notoperate independently, instead sells as a team.
Who can act as the quarterback; take initiative and prep the team on what is needed from them priorto calls.
Who can make good decisions about whoshould engage and whenand make people accountable for following through.
Who can create a territory or opportunity plan, which includes the steps you believe are required to get from discovery to the next steps in the sales cycle.
Who will work closely with the leadership team to refine your ideas and make your sales strategy as effective as possible.
Responsibilities:
Exceed revenue quota goals on a quarterly and yearly basis.
Effectively address each customer’s and partner’s unique inquiries by providing accurate information and tailored solutions that align with their specific needs and interests.
Develop business plans, which align to your assigned territory.
Strategically engage with customers and business partnersto maintaina high level of customer service that aligns withSailPoint’s core values.
Collaborate with marketing to develop and execute marketing plans
through/with partners and end users.
Pursue all leads supplied and ensure internal systems are updated.
Lead the appropriate technical resources to demonstrate SailPoint's advantages to the customer.
Follow-up with customers and partner with post-sale teamto
ensure consistent and ongoing coverage of account, including new sales
opportunities.
Own and oversee all aspects of the sales cycle, including qualifying,
presentations, demonstrations, RFP responses, negotiations, and the closing
process.
Fosters a deep understanding of the territory,includingcustomers, prospects, partners, influencers, and competitors.
Understand and communicate all product and technological strategies
employed by competitive and complimentary organizations in the SailPoint market space.
Effectively initiate, navigate, and manage discussions across all levels of a customer’s organization, from business stakeholders to technical decision-makers.
Utilize all channel management and reporting tools, including accurate forecasting and Salesforce hygiene.
The path to success:
1-month milestones:
Establish plan for existing customers clearly identifying opportunities for uplift over coming years and understanding account potential.
Segment account list into your top 20 focused accounts & the Top 3 Big Bet accounts within this list.
Meet with old account managers to capture any history.
Meet with partners of existing accounts to understand their position and services offered.
Work with Marketing Manager on marketing plan.
Work with Channel Manager on channel plan.
2-month milestones:
Create a stakeholder map for key partners that are influencers in
your Top 20 accounts and devise your approach to connect with them.
DemonstrateSalesforce hygiene with regular, accurate activity and
updates.
Met weekly with sales management to keep Salesforce and Clari up to date.
3-month milestones:
Complete territory plan andpresent to Sales Management:
Existing account overview and account potential
Prioritized accounts with account potential
Clean pipeline of potential 2025 opportunities to establishgap to target
Marketing and channel engagement plans to close the Gap to target
Customer references / case studies planned
Pipeline growth plan
Meet with all existing customers and identify opportunities to extend the value they arereceiving from SailPoint.
Lead an operating cadence with virtual team
Achieve “1st Mate” enablement badge.
4-month milestones:
Create account plans for key accounts.
Create opportunity plans for key opportunities.
Present forecast for self-generated opportunity & expected time to 1st
sale.
Develop strategies to approach Top 20 accounts - present to
management.
Relationship maps in Salesforce are completed - customers from Top 20 accounts know who you are.
Showing progress through sales stages for any inbound/inherited opportunities (sales cycle5-40).
Present SailPoint value proposition in front of manager via either:customer / prospect or internally.
6-month milestones:
Built a Pipeline of 2 to 3 times target comprising.
Existing customer pipeline
Progress existing pipeline
New Pipeline
Refine “go to market” for this market segment highlighting key messaging when competing with Microsoft and Okta, benefits of working with partner, pricing challenges, etc.
Complete your Captains badge on HighSpot.
Education:
Preferred but not required: Bachelor's degree or global equivalent in an IT, business or sales related field.
Travel:
Business travel of approximately 50 percent yearly is expected for this position.
SailPoint is an equal opportunity employer, and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
SailPoint is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability. We evaluate applicants using job-related, objective, and non-discriminatory criteria. Our job titles, job descriptions, and recruitment processes are intended to be gender-neutral and to support equal pay for equal work or work of equal value.
As a part of the total compensation package, this role may be eligible for participation in one of our performance-based cash compensation programs - the SailPoint Corporate Bonus Plan or a role-specific commission plan, along with potential eligibility for equity participation. SailPoint maintains salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. The base salary for this role will be in this range from (min-max, LOCAL CURRENCY):
Additional offerings include a variety of benefits, including health, retirement, EAP, leave support, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on location, date of hire, schedule type, and the applicability of collective bargaining agreements or local statutory requirements. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
SailPoint provides identity security solutions to help enterprises manage and secure digital identities. Its products IdentityIQ, IdentityNow, and File Access Manager offer identity governance, access provisioning, certification, and file access control to ensure compliance and reduce risk. The platform uses AI and machine learning to improve access decisions and detect anomalies across on‑premises and cloud environments. The company operates on a subscription model that combines software licenses, maintenance, and professional services, aiming to help large organizations meet regulatory requirements and minimize identity-related risk.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Austin, Texas
Founded
2004
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
SailPoint, Inc. (Nasdaq: SAIL), a leader in enterprise identity security, today unveiled SailPoint Accelerated Application Management, a breakthrough solutio...
SailPoint unveils AI identity agents, runtime controls at Navigate. SailPoint (NASDAQ:SAIL) used its Navigate conference briefing to outline product updates centered on securing both human and AI identities, including autonomous agents, runtime authorization controls, expanded cloud infrastructure support and a redesigned user interface. Chandra Gnanasambandam, SailPoint's executive vice president of product and chief technology officer, said the company views identity security as a combined "human plus AI" challenge rather than one requiring separate platforms. He said large enterprises may face tens of millions of agentic interactions per day as AI agents interact with large language models, APIs and data systems. Autonomous agent vision and runtime controls. Gnanasambandam introduced SailPoint's vision for autonomous identity agents, grouped into red, blue and green categories. Red agents would identify potentially risky or unauthorized activity, such as an AI agent accessing information beyond its owner's permissions. Blue agents would investigate and, if warranted, stop the activity. Green agents would focus on "peacetime" governance tasks, including automation of access-certification processes. He said SailPoint has signed one of the world's largest banks as a design partner for a green certification agent, with a targeted delivery timeframe of December or January. The company also said its platform can support least-privilege and zero-standing-privilege access models for both humans and AI. SailPoint described its role as a policy decision point that evaluates whether access should be permitted in real time, even after a user or agent has been authenticated by an identity provider such as Okta, Microsoft Entra or Ping. Gnanasambandam said identity providers primarily handle authentication, while SailPoint's platform is intended to provide fine-grained authorization based on identity context, access behavior, policy compliance and risk. Entro integration and Agentic Fabric capabilities. SailPoint said its Agentic Fabric and Entro, which SailPoint acquired roughly 90 days before the briefing, are expected to be fully integrated and generally available in November. The company also said that a majority of the capabilities discussed during the presentation are expected to be generally available by Nov. 1 or by the end of the year, with a smaller group planned for the first quarter of the following year. Levent Besik, SailPoint's chief product officer, demonstrated the Agentic Fabric, which the company said is designed to inventory AI agents, non-human identities and credentials across enterprise environments. The platform uses connectors, endpoint sensors, browser plugins and integrations with AI, SaaS, security information and event management, and data-security platforms, according to Besik. In the demonstration, SailPoint showed how security administrators could review an AI agent's owner, credentials, activity history, access graph and risk factors. Besik said the platform can identify issues including unsanctioned AI platforms, exposed credentials, access to production systems and anomalous behavior. Administrators can deactivate agents, rotate credentials or establish authorization policies from the platform, he said. SailPoint also highlighted scheduled audit reports designed for frameworks including GDPR, HIPAA and the EU AI Act. Besik said the reports can be exported, scheduled and customized. The company plans to unify similar audit capabilities across its agentic and human-focused offerings. Human identity updates. Dan Martillotti, SailPoint's vice president of product management, outlined additions to the company's Human Fabric. These include posture management intended to show identity risk across human and non-human identities, along with recommended remediation actions. The company said it has automated the creation of entitlement descriptions when applications are onboarded and added tools to assess privilege severity. SailPoint also introduced "effective privilege" views intended to reveal access that may be inherited indirectly through roles and groups. For end users, SailPoint demonstrated an agentic access-request experience that can recommend entitlements based on a user's role and needs. For privileged access, the platform supports just-in-time sessions in which access is provisioned when a user begins a task and removed when the session ends. Martillotti also described certification automation that can recommend retaining or revoking access based on policy guardrails, such as whether privileged access has been used recently. Customer demand shifts toward action and compliance. In response to analyst questions, Gnanasambandam said customer conversations have shifted from discovery of agents and credentials toward acting on identified risks. He cited credential rotation, immediate removal of exposed access and runtime controls as key customer priorities. He also said audit and compliance discussions have increased, particularly around accountability and fine-grained controls for AI systems. SailPoint said its Agentic Fabric can operate alongside customers' existing IdentityIQ deployments and can connect to IdentityIQ to incorporate human identity context without requiring a migration. About SailPoint (NASDAQ:SAIL). SailPoint, Inc (NASDAQ:SAIL) is an identity security company that helps organizations manage and protect digital identities and access to applications, data, and other technology resources. Its software is designed to help enterprises determine who should have access to specific resources, enforce access policies, and identify and address inappropriate or excessive access. The company's offerings include its cloud-based identity security platform, which supports identity governance, access management, lifecycle automation, compliance, and analytics.
Workday's Rob Enslin says C1's real rival is SailPoint, as APJ customers ask how to stop experimenting with AI. Alex Zaharov-Reutt, Global AI and Technology Editor | Published 16 Oct 2026 The Asia Pacific and Japan media roundtable at Workday Rising 2026 started with the Ashes. An Australian journalist pointed out that a colleague moving home from Singapore was "coming back at the right time," because cricket season was coming and "we get to beat the English." But then we got into the real discussion - Workday, AI, real value and much more. Then Workday President, Asia Pacific, John Lombard, offered the room a deal. He'd been at Workday "three months and four days," he said, "so ask me anything. I can answer everything," he joked, good-naturedly, although he has obviously hit the ground running. The man most of the questions went to, though, was Workday President and Chief Commercial Officer, Rob Enslin, who joined in December 2024 after stints as CEO of UiPath, president of cloud sales at Google Cloud and about 27 years at SAP. He runs Workday's sales and decides how its new products, including the planned C1.ai acquisition, are taken to market. Alongside him were Lombard, who spent about a decade as APAC CEO of NTT Data (formerly Dimension Data) after senior roles at SAP and KPMG Australia, and Workday President, Japan, Chikara Furuichi, who joined in 2024 from cybersecurity company Tanium, where he was president for Asia Pacific and Japan. The three agents that matter most A journalist from Korea's Electronic Times asked which of the week's announcements would deliver the most value. Enslin started with the AI assistant for Workday Community, Workday's customer support site, which he'd shown off in the Community Day keynote. It summarises the help desk calls Workday receives and surfaces answers so customers "don't have to phone us for help," he said. Customers can also answer each other's questions, with Workday engineers connected in too. For immediate value from agents, he named three, in order: the Sana Self-Service Agent, the Developer Agent and the Deployment Agent. That's a telling list from the person responsible for sales. It skips the week's headline launches like Work Intelligence and the autopilot agents and picks the tools that are generally available today and easiest to prove. How APJ is different Another Japanese journalist asked how AI conversations with customers in the region had changed over the past year. Enslin pointed to the Singapore government, which he works with closely. "They are, I would say, very advanced in their thinking," he said, and "very well on their journey with many of our agent tools," starting with a better experience for Singapore's agencies. They're now working out which skills to switch on in the Sana Self-Service Agent. In Australia, Workday is working with "a couple of large companies" on use cases for Sana Enterprise, which connects Sana to other business systems. That's "more of a CIO discussion," he said, and often depends on how a company runs its AI across Claude, Copilot and other environments. Overall, he said, APAC is making progress on AI for HR and finance, but "it is lagging a little bit," and "that's true for Japan as well." The copy-paste economy Lombard added the most useful number of the session. Workday's own analysis of employees across the APJ region found that four out of five are struggling with what he called the "copy-paste economy," copying information from one system to another because their systems aren't integrated. They want agents to "move from the periphery to the core," he said. The customers he's met in his first three months want "really clear use cases and solutions and the ability to deploy these agents within their workplace." His warning to them echoed Workday's keynote message. "One of the things that's really important is the strong message that you need to redesign your business process," he said. Customers need those skills, both inside Workday and across its partners, to avoid simply adding an agent to an old process. Japan's CIO question Furuichi said the decision-making picture in Japan is different. Japanese companies are less likely than large companies elsewhere to have a dedicated CIO, he said, and in Japan, the decision on Workday tends to be split roughly evenly between IT and HR leaders. Enslin pointed to a Japanese customer in Workday's early program for Sana, which was given a year of free use in return for working closely with Workday on use cases. He'll be in Tokyo in two weeks. "How do I stop experimenting?" Enslin said customers everywhere are asking the same question: "How do I stop experimenting?" He described the typical CIO's dilemma. "I feel like the productivity is really good. With these tools, my employees are happy. But we really don't understand if we got anything from that," he said. "It's almost like I can't take it away because they're happy... They tell me they're more productive, but when I look at my numbers, it doesn't look like we're actually advancing anything." That's the same hidden productivity gap Wharton professor Ethan Mollick described in the Community Day keynote that morning. "I think we're getting out of the experimentation phase right now," Enslin said. Workday's pitch is that it can be specific about value because it works in defined domains. "We can be very specific in what value you get in HCM and very specific in what value you get in financials," he said. It also builds agents alongside customers using forward deployed engineers, getting daily feedback. "We harden these agents on the fly, and the speed of change is dramatic," he said. He singled out the Payroll Agent and Decision Intelligence as delivering "huge benefits." CIOs, CHROs and the "death match" I asked who leads AI decisions for Workday customers: the CHRO, the CIO, or both "having a death match." "I think you've got all three of those," Enslin said. Some CHROs are very advanced. Some CIOs understand how they can help. And in other companies they're fighting, "because they're also fighting for dollars," and for credit with the CEO. He was frank about how it got messy. Many companies started by experimenting with foundation model companies, and with Microsoft Copilot building agents on top of Workday by "extracting as much data as they could to create a flow on top of it." "If you understand the Workday environment, that's not a good idea," he said, because the result is weak, hard to change and can't be controlled. I added that it can also leak information. "Exactly," Enslin said. Workday's answer was to make its own platform open, with APIs, open data flows and MCP access. Now, he said, CIOs are telling Workday: "I want you to own all the agents that exist inside of HCM... But I want you to be able to connect into your agents through an MCP server." The deal Workday offers is simple. "You can connect whatever you want, but you'll go through Sana," Enslin said. Agents talking to Workday "will inherit all of our rules and all of our business frameworks." The split he expects: customers will use other vendors for agents outside finance and HR, and Workday for everything inside them. AI-native teams Enslin also said AI success depends on having "AI-native people." Workday's own agents are built by small, highly skilled teams in Hellermark's organisation, "not hundreds, three, four, five" engineers, who can build agents "at incredible speed." "If we didn't have that, I don't think we'd be anywhere where we are today," he said. Workday now generates code in its own proprietary language with AI, he said, and its engineers no longer write it by hand. Meanwhile, many CIOs are trying "to patch all of these things together," he said, and "experimentation is out of control." They can't manage the various agent control planes, and "none of the control planes coming out from all these other competitors actually understand identity," he said. "That's why we acquired C1." My question: will Workday sell against Okta? Enslin decides how C1 will be sold, so I asked him directly. At the executive press Q&A, Workday CEO, Aneel Bhusri, had said: "If we turned off access to Okta tomorrow, they'd be out of business." Okta has been a Workday partner for more than a decade and is widely used across APJ. Once the deal closes, will Workday's sales teams sell identity governance against Okta, SailPoint and Microsoft Entra? And what should a customer already running Okta on top of Workday do? Enslin was noticeably more diplomatic than his CEO. Here's his answer in full (lightly edited for clarity, as the room's recording wasn't perfect): "I think there's multiple [views]. I think there was a provocative statement, in a world where that's possible. But it's in the software world. Say, like the United Nations, we live in a weird political world. But everybody's kind of agreed that you can access, and there's been no real walls in the software industry that say 'okay'. ServiceNow's probably the second largest access into Workday. So it's not only Okta, [it's] ServiceNow. I don't think that will mature. I think what customers will have [to do] will be to figure out who does governance and things. Our competition will be SailPoint more than Okta. Okta does access. C1 is much more around governance than identity. How we bring that governance to our customers. They'll probably still have a combination of Okta and us. Then, you know, that'll be competition with Okta. I don't think that's where we are right now." When I suggested that competing with a partner is just business, he went on: "And there's at least lots of interest in this. If you look at the full stack for identity access governance, there's multiple layers of this, and they're all at different levels of maturity. Very fragmented. C1 has built an incredible technology team. It fits our ASOR discussion, and that's really why we think it's important. We're discussing simplicity when it comes to being able to identify who's coming in. Are they real, and so on." ASOR is Workday's Agent System of Record, its register for AI agents, and when I asked him to spell it out, Enslin explained it in HR terms: "So we actually treat an agent similar to how we treat an employee. They have an ID. They have rules. They have access rights. They have auditability, and so on. An agent can only do certain things, and that's why we talk about lawless and lawful. That's why when you come in, we validate [you] when you're coming through Sana. This person, these are the guardrails they can work in. They can't get outside of those guardrails." With so many agents out there, he added, "you've got to control them." "And you have to figure out what the traceability is. You have to figure out if the agent actually gave the right answer and so on. That's why C1 was an important acquisition to us." Data sovereignty is political An Indian journalist asked about data protection rules, which India and many other markets are tightening. "It's much more of a political discussion than a technical discussion," Enslin said. Saudi Arabia and the UAE require data residency for regulated industries, Europe requires sovereignty, and Canada is moving in the same direction. "Ultimately, we're going to do whatever governs that country," he said. Workday already has data centres in India, he said, and offers sovereignty in most of Europe. And it's not just the data. "The models we use also have to be data resident," he said, so a model hosted in the US can't be used where local rules forbid it. "We don't actually charge our customers for tokens" The same journalist asked who pays for the AI tokens behind Sana. Enslin's answer was the clearest explanation of Flex Credits I heard all week. "We don't actually charge our customers for tokens. It's the Flex Credits," he said, describing them as a "value currency." Which foundation models Workday uses, and how it runs them, "is up to us to make certain that we actually are doing it in a highly performant, operating margin way." "We drive the cost down ourselves, and the customer gets the benefit of the value," he said. Customers can see where the credits are going and which agents cost the most. Agents are fungible, so "we don't charge per agent," he said. "Flex Credits are like a universal credit. How you use the Flex Credit is totally up to the customer." That puts the burden on Workday. "If they're not getting value, they're going to switch it off," he said. "They don't have to shove software back to us and say I'm not using it. They can just switch it off themselves." He called it "a very different model than I think anyone else has taken on." Oracle might disagree: it has been bundling its Fusion AI agents at no additional licence fee. But Workday's approach does at least give customers a clear dial to turn down. My question: what's different from RPA? Enslin ran UiPath when robotic process automation promised to automate the back office, and Workday Chief AI Officer, Joel Hellermark, had called RPA "incredibly brittle." So I asked what makes agents different, and how Workday will prove value when, as Mollick said, employees hide their productivity gains. "With RPA, you don't understand the business process framework that underlies systems, but you can understand screens," Enslin said. That breaks as soon as screens change, and Sana's new interface changes from one user to the next as they type. "RPA just can't handle that," he said. "Generative AI just flattened that idea." He was candid about the limits of Workday's own agents, though. Sana Concierge "will struggle to work where it doesn't understand the model," he said. "It'll work fine in the open world where all the data is available, but it will struggle to go into an SAP system and do something there. Inside a Workday system, it's going to be amazing." He also admitted Workday still uses RPA internally. "Some of the RPA stuff we use internally works and does a really good job for a specific process. We haven't replaced it yet," he said. "It's just not a priority for us." He didn't directly answer the second half of my question, about hidden productivity gains, though his earlier answer about customers who "can't take it away because they're happy" covered similar ground. AI and Japan's shrinking workforce The final question came from a Japanese journalist, who asked how to explain Workday's platform and pricing to Japanese shareholders and finance professionals used to traditional practices. Enslin said AI has "a huge benefit to Japan with the diminishing population," and that many Japanese work processes are "well understood," making them good candidates. "Without having to completely change how Japanese work, the use cases for finance and HR will be transformative for Japan," he said. He closed by borrowing from Mollick. "If you're not experimenting with AI, even if you don't know what the outcome is, you have to, because it's going to change every single business model in the world in the next couple of years," he said. Companies that don't "will be completely left behind and might go out of business." Three things stood out. First, Enslin softened Bhusri's Okta line considerably. "Our competition will be SailPoint more than Okta" is the most precise statement Workday has made about C1's place in the market, and it matches what C1 actually does. Customers running Okta can relax, for now. Second, his Flex Credits explanation is a smart sales pitch: no per-agent licences, a universal currency, and the ability to switch off anything that doesn't deliver. Whether that beats Oracle's bundled agents will come down to how predictable the bills are, which Workday's own executives admitted all week is still being worked out. Third, there's a tension in his message. Customers need to "stop experimenting," but every company "has to" experiment or risk going out of business. Both can be true. Workday wants experimentation to happen inside its rules and its Flex Credits, with measurable outcomes, and outside the ad hoc Copilot flows built on extracted Workday data. What it means for Australian organisations Lombard's "copy-paste economy" figure will ring true for plenty of Australian organisations. If four in five APJ employees are copying data between systems, that's the first place to look for agent value. For Australian companies running Okta, Enslin's answer is clear: expect to run Okta for access and Workday with C1 for governance side by side. The vendor to watch is SailPoint. And for any Australian CIO in a "death match" with HR over who owns AI, Enslin's split is a useful starting point. Workday wants to own the agents inside HR and finance, and to let everything else connect through Sana and inherit its rules.
SailPoint unveils AI identity agents, runtime controls at Navigate. October 14, 2026 Key points. * SailPoint unveiled AI identity agents and runtime authorization controls designed to secure human and non-human identities, enforce least-privilege access, and detect or stop risky AI-agent activity in real time. * The company said its Agentic Fabric and recently acquired Entro technology are expected to be fully integrated and generally available in November, with tools to inventory AI agents, monitor credentials, manage risks, and support compliance reporting. * New human-identity features include identity-risk posture management, effective-privilege analysis, automated access recommendations and certifications, and just-in-time privileged access. SailPoint also reported rising customer demand for credential rotation, rapid access removal, runtime controls and AI compliance. * Five stocks to consider instead of SailPoint. SailPoint NASDAQ: SAIL used its Navigate conference briefing to outline product updates centered on securing both human and AI identities, including autonomous agents, runtime authorization controls, expanded cloud infrastructure support and a redesigned user interface. Chandra Gnanasambandam, SailPoint's executive vice president of product and chief technology officer, said the company views identity security as a combined "human plus AI" challenge rather than one requiring separate platforms. He said large enterprises may face tens of millions of agentic interactions per day as AI agents interact with large language models, APIs and data systems. Autonomous agent vision and runtime controls. Gnanasambandam introduced SailPoint's vision for autonomous identity agents, grouped into red, blue and green categories. Red agents would identify potentially risky or unauthorized activity, such as an AI agent accessing information beyond its owner's permissions. Blue agents would investigate and, if warranted, stop the activity. Green agents would focus on "peacetime" governance tasks, including automation of access-certification processes. He said SailPoint has signed one of the world's largest banks as a design partner for a green certification agent, with a targeted delivery timeframe of December or January. The company also said its platform can support least-privilege and zero-standing-privilege access models for both humans and AI. SailPoint described its role as a policy decision point that evaluates whether access should be permitted in real time, even after a user or agent has been authenticated by an identity provider such as Okta, Microsoft Entra or Ping. Gnanasambandam said identity providers primarily handle authentication, while SailPoint's platform is intended to provide fine-grained authorization based on identity context, access behavior, policy compliance and risk. Entro integration and Agentic Fabric capabilities. SailPoint said its Agentic Fabric and Entro, which SailPoint acquired roughly 90 days before the briefing, are expected to be fully integrated and generally available in November. The company also said that a majority of the capabilities discussed during the presentation are expected to be generally available by Nov. 1 or by the end of the year, with a smaller group planned for the first quarter of the following year. Discover more MarketBeat All Access Stock Average Calculator Stock Market News Levent Besik, SailPoint's chief product officer, demonstrated the Agentic Fabric, which the company said is designed to inventory AI agents, non-human identities and credentials across enterprise environments. The platform uses connectors, endpoint sensors, browser plugins and integrations with AI, SaaS, security information and event management, and data-security platforms, according to Besik. In the demonstration, SailPoint showed how security administrators could review an AI agent's owner, credentials, activity history, access graph and risk factors. Besik said the platform can identify issues including unsanctioned AI platforms, exposed credentials, access to production systems and anomalous behavior. Administrators can deactivate agents, rotate credentials or establish authorization policies from the platform, he said. SailPoint also highlighted scheduled audit reports designed for frameworks including GDPR, HIPAA and the EU AI Act. Besik said the reports can be exported, scheduled and customized. The company plans to unify similar audit capabilities across its agentic and human-focused offerings. Human identity updates. Dan Martillotti, SailPoint's vice president of product management, outlined additions to the company's Human Fabric. These include posture management intended to show identity risk across human and non-human identities, along with recommended remediation actions. The company said it has automated the creation of entitlement descriptions when applications are onboarded and added tools to assess privilege severity. SailPoint also introduced "effective privilege" views intended to reveal access that may be inherited indirectly through roles and groups. For end users, SailPoint demonstrated an agentic access-request experience that can recommend entitlements based on a user's role and needs. For privileged access, the platform supports just-in-time sessions in which access is provisioned when a user begins a task and removed when the session ends. Martillotti also described certification automation that can recommend retaining or revoking access based on policy guardrails, such as whether privileged access has been used recently. Customer demand shifts toward action and compliance. In response to analyst questions, Gnanasambandam said customer conversations have shifted from discovery of agents and credentials toward acting on identified risks. He cited credential rotation, immediate removal of exposed access and runtime controls as key customer priorities. He also said audit and compliance discussions have increased, particularly around accountability and fine-grained controls for AI systems. SailPoint said its Agentic Fabric can operate alongside customers' existing IdentityIQ deployments and can connect to IdentityIQ to incorporate human identity context without requiring a migration. About SailPoint (NASDAQ:SAIL). SailPoint, Inc NASDAQ: SAIL is an identity security company that helps organizations manage and protect digital identities and access to applications, data, and other technology resources. Its software is designed to help enterprises determine who should have access to specific resources, enforce access policies, and identify and address inappropriate or excessive access. The company's offerings include its cloud-based identity security platform, which supports identity governance, access management, lifecycle automation, compliance, and analytics. This instant news alert was generated by narrative science technology and financial data from MarketBeat in order to provide readers with the fastest reporting and unbiased coverage. Please send any questions or comments about this story to [email protected]. Before you consider SailPoint, you'll want to hear this. MarketBeat keeps track of Wall Street's top-rated and best performing research analysts and the stocks they recommend to their clients on a daily basis. MarketBeat has identified the five stocks that top analysts are quietly whispering to their clients to buy now before the broader market catches on... and SailPoint wasn't on the list. While SailPoint currently has a Moderate Buy rating among analysts, top-rated analysts believe these five stocks are better buys. The AI boom is creating opportunities across semiconductors, cloud computing, enterprise software, infrastructure, cybersecurity, and automation. Inside this report, you'll find 10 companies positioned to benefit as artificial intelligence moves from hype to real-world deployment and becomes a core growth driver for corporate America. Continue following MarketBeat
From chaos to control: SailPoint unlocks a secure agentic era with Autonomous Identity Security. October 9, 2026 Today at Navigate 2026, its annual flagship conference, SailPoint, Inc. (Nasdaq: SAIL), a leader in enterprise identity security, announced significant new capabilities across SailPoint Agentic Fabric(TM)(SAF) and SailPoint Human Fabric(TM)(SHF), the two purpose-built products of its Identity Security solution, built on SailPoint Atlas. These innovations give enterprises what they need most in the agentic era: full visibility into every hidden AI tool, continuous compliance across human and machine workflows, the replacement of permanent access keys with temporary permissions, and the transformation of identity security from a static compliance check into real-time, automated defence. According to the latest SailPoint Horizons of Identity Security report, 79% of enterprises are already running AI agents in production, yet only 2% have deployed identity security tools purpose-built to govern and secure them. Meanwhile, enterprises are stuck between static reviews that are outdated the moment they finish and posture dashboards that flag risks but can't fix them. Introducing SailPoint Autonomous Agents. When AI agents invoke MCP tool calls at machine speed, human review of every action is impossible. SailPoint announced Autonomous Agents, a fleet of specialised AI agents built to govern and protect the agentic ecosystem. Unlike generic tools that simply shut agents down when anomalies occur, Autonomous Agents use identity context to tell legitimate intent from malicious activity, stopping threats while keeping productive agents running. These Autonomous Agents actively govern the agentic lifecycle: continuously monitoring runtime actions, intercepting threats, and right-sizing permissions to enforce zero standing privilege at machine speed. Matt Mills, President of SailPoint, said: "Autonomous agents are no longer just experimental copilots; they are becoming the primary execution layer of modern enterprises. Enterprises cannot afford to slow down AI innovation out of fear, nor can they afford ungoverned access chaos. Moving beyond Zero Trust to Autonomous Identity allows organisations to master the converged human-plus-AI workforce, eliminate invisible risk, and innovate with complete confidence." Chandra Gnanasambandam, EVP of Product and Chief Technology Officer said: "The idea that a security admin is going to review and approve access for a group of autonomous agents making 10,000 tool calls a second isn't just outdated - it's a fantasy. The only way to govern autonomous machines is with autonomous machine defense. We've built Autonomous Agents so enterprises can stop the threat, save the good agents, and bring human and non-human identity into real-time. In a near-AGI world, standing privilege is dead." Autonomous Identity Security posture management (A-ISPM) goes beyond the dashboard. Using the live identity context in SailPoint Atlas, SailPoint's new A-ISPM continuously detects dormant accounts, partially offboarded identities, orphaned access, shadow admins, and privileged outliers hidden deep in access paths. It then closes the loop on each organisation's terms, with remediation ranging from one-click fixes, such as revoking access, disabling an identity or AI agent, or assigning an owner, to fully automated policy enforcement. New automation and global compliance upgrades. SailPoint is advancing global identity security with powerful new updates across its platform. The company introduced new updates to the SailPoint Atlas engine with advanced automation workflows to help enterprises scale security, while also launching IdentityIQ 9.0 to make everyday access governance simpler and more secure for business users. To support this growth, SailPoint is also expanding its global footprint - opening a new data center in South Korea and preparing to meet some of the strictest federal and financial compliance standards, including FedRAMP High, PCI DSS 4.0, and EU Sovereign Cloud. Delivering four core customer outcomes through new innovations. SailPoint delivers autonomous identity and a host of customer benefits and improved security outcomes across its Identity Security platform. New product innovations showcased at Navigate enable customers to realise these four critical business outcomes: Comprehensive discovery: Security teams can't govern what they can't see. Every agent, credential, and data store that never reach the identity program becomes access no one owns. New endpoint and browser sensors, SIEM and XDR telemetry, and vault and pipeline NHI discovery bring MCP servers, tools, credentials, and data stores into view. Data Access Security adds classification integrations with Microsoft Purview and BigID, plus new connectors for Atlassian Confluence, Google BigQuery, and AWS Redshift. Enabling compliance: Auditors are asking how AI agents are governed, and most organisations can't yet produce the evidence. New Agent Audit turns agent inventory and governance activity into framework-aligned evidence reports that can be exported in one action, customised, or scheduled, making audit preparation repeatable. Strengthening security posture: Standing privilege is invisible risk. Every always-on account is an open door for attackers. Just-in-Time provisioning (JIT-P) grants access only when needed, with conditions such as business justification or reauthentication and activation through Slack or ServiceNow. Agentic Fabric delivers prompt monitoring with policy-based redaction and blocking and behavioral risk detection. Human Fabric features a CrowdStrike Foundry App and SecOps containment actions with a full audit trail. Streamlining operations: Governance has become too admin-heavy, and manual processes can't keep pace with the volume of human and agent access. Human Fabric will now offer next-generation access requests with an embedded Harbor Pilot Access Request Agent. The upcoming Harbor Pilot Policy Agent lets administrators explain and draft access policies for people and agents in plain language, and Agentic Fabric provides one-click agent lifecycle controls and an agent kill switch. Platform milestone: SailPoint Agentic Fabric + Entro integration. Also announced during Navigate, the Entro Security integration into SailPoint Agentic Fabric will soon be complete. The integration includes Entro-powered credential lineage, exposed secret discovery, and prompt-intent monitoring into Agentic Fabric, extending governance to secrets and credentials that AI agents and NHIs depend on. Availability. Capabilities across SailPoint Agentic Fabric, SailPoint Human Fabric, and SailPoint Atlas are rolling out globally beginning at Navigate 2026. A-ISPM, the Harbor Pilot Policy Agent, and the Proofpoint integration are expected in Q4 FY27. New Success Acceleration service packages combine expert-led roadmaps, vertical-specific deployment accelerators, AI-driven risk reduction, and continuous compliance support to help customers reach zero standing privilege and realize value faster. To watch Navigate 2026 keynotes and product demonstrations live or on demand, visit www.sailpoint.com/navigate. About SailPoint. SailPoint (Nasdaq: SAIL) is defining the new era of adaptive identity security. In a world where non-human identities now significantly outnumber humans, its AI-powered platform unifies identity, security, and data intelligence to protect today's enterprise from advanced identity-based threats. I4.0 Today deliver the identity solution that spans both the breadth of identities and the depth of context needed to drive real-time access with confidence. Built on principles like zero-standing privilege and contextualized risk, its SailPoint platform transforms identity from a point of vulnerability into a powerful security advantage. Trusted by many of the world's leading organizations, SailPoint secures the enterprise with intelligent, autonomous identity security. Hot this week