S

SailPoint

Identity governance and access security software

Public Sector Sales Executive

Full-Time
€58.3k - €88.2k+ Performance-based bonus or commission + Potential equity participation
Mid
Bachelor's
Remote in Italy
RemoteRemote in Italy; business travel of approximately 50% yearly is expected.
Sales & Account ManagementAccount Executive

About the job

Requirements
  • Be skilled in first-engagement communication and discovery calls to analyze prospect needs and qualify opportunities.
  • Be highly proficient in understanding and presenting SailPoint solutions and comparing them with Microsoft, Okta, and Saviynt.
  • Provide a strong customer experience and competitively position SailPoint solutions and partner services.
  • Lead a virtual team of partner resources, presales, partner management, deal desk, professional services, BVA, and customer success resources.
  • Work collaboratively as part of a sales team rather than independently.
  • Take initiative in preparing the team before calls and determining what support is needed.
  • Make sound decisions about who should engage and when, and hold team members accountable for follow-through.
  • Create territory or opportunity plans that map steps from discovery through the sales cycle.
  • Work with the leadership team to refine ideas and sales strategy.
  • Preferred but not required: Bachelor's degree or global equivalent in an IT, business, or sales-related field.
  • Expect approximately 50% yearly business travel.
Responsibilities
  • Exceed quarterly and yearly revenue quota goals.
  • Address each customer’s and partner’s inquiries with accurate information and tailored solutions aligned with their needs and interests.
  • Develop business plans aligned to the assigned territory.
  • Engage strategically with customers and business partners to maintain customer service aligned with SailPoint’s core values.
  • Collaborate with marketing to develop and execute marketing plans through or with partners and end users.
  • Pursue supplied leads and ensure internal systems are updated.
  • Lead appropriate technical resources in demonstrating SailPoint’s advantages to customers.
  • Follow up with customers and partner with the post-sale team to ensure consistent account coverage, including identifying new sales opportunities.
  • Own and oversee the sales cycle, including qualification, presentations, demonstrations, RFP responses, negotiations, and closing.
  • Develop a deep understanding of the territory, including customers, prospects, partners, influencers, and competitors.
  • Understand and communicate product and technology strategies used by competitive and complementary organizations in SailPoint’s market.
  • Initiate, navigate, and manage discussions across all levels of customer organizations, from business stakeholders to technical decision-makers.
  • Use channel-management and reporting tools, including accurate forecasting and Salesforce hygiene.
  • Within the first month, establish plans for existing customers that identify potential future uplift and account potential; focus on the top 20 accounts and top three Big Bet accounts; meet former account managers to capture account history; meet partners to understand their position and services; and work with marketing and channel managers on their plans.
  • Within the second month, create stakeholder maps for key partners influencing the top 20 accounts and develop an engagement approach; maintain regular, accurate Salesforce activities and updates; and meet weekly with sales management to keep Salesforce and Clari up to date.
  • Within the third month, complete and present a territory plan to sales management covering existing-account potential, prioritized accounts, a clean pipeline of potential 2025 opportunities and target gap, marketing and channel engagement plans, planned customer references or case studies, and a pipeline growth plan; meet existing customers and identify opportunities to extend SailPoint’s value; lead an operating cadence with the virtual team; and achieve the “1st Mate” enablement badge.
  • Within the fourth month, create plans for key accounts and opportunities; present a forecast for self-generated opportunities and expected time to first sale; develop and present strategies for approaching the top 20 accounts; complete Salesforce relationship maps so customers in those accounts know the account executive; show progress through sales stages for inbound or inherited opportunities; and present SailPoint’s value proposition to a manager, either with a customer or prospect or internally.
  • Within six months, build a pipeline of two to three times target, comprising existing-customer pipeline, progress on existing pipeline, and new pipeline; refine the go-to-market approach for the market segment, including messaging against Microsoft and Okta, partner benefits, and pricing challenges; and complete the Captains badge on HighSpot.

About the company

SailPoint provides identity security solutions to help enterprises manage and secure digital identities. Its products IdentityIQ, IdentityNow, and File Access Manager offer identity governance, access provisioning, certification, and file access control to ensure compliance and reduce risk. The platform uses AI and machine learning to improve access decisions and detect anomalies across on‑premises and cloud environments. The company operates on a subscription model that combines software licenses, maintenance, and professional services, aiming to help large organizations meet regulatory requirements and minimize identity-related risk.

Company Size

1,001-5,000

Company Stage

IPO

Headquarters

Austin, Texas

Founded

2004

Get referred to SailPoint

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Q2 FY2027 ARR hit $1.231 billion, up 25%, with SaaS ARR up 36%.
  • AI-driven ARR exceeded $70 million, and AI solutions drove over 30% of new ARR.
  • NCC Group and CrowdStrike partnerships expand distribution into security operations and managed services.

What critics are saying

  • Microsoft Entra Agent ID and Agent 365 commoditize identity governance starting May 2026.
  • CyberArk and Okta attack SailPoint's agentic identity niche with broader platform bundles.
  • Entro integration depends on proving acquisition synergies before competitors outship its roadmap.

What makes SailPoint unique

  • SailPoint unified human, machine, and agent identities with Entro Security on June 29, 2026.
  • Agentic Fabric and Human Fabric target AI-era access governance across complex enterprises.
  • CrowdStrike and Radiant Logic integrations embed SailPoint into security and identity stacks.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Life Insurance
  • Disability Insurance
  • Health Savings Account/Flexible Spending Account
  • Unlimited Paid Time Off
  • Flexible Work Hours
  • Hybrid Work Options
  • Paid Vacation
  • Paid Sick Leave
  • Paid Holidays

Growth & Insights and Company News

6 month growth

1%

1 year growth

0%

2 year growth

0%
Business Wire
Oct 31st, 2026
Introducing SailPoint Accelerated Application Management: A Breakthrough Approach to Manage and Govern Applications at Scale With Intelligence

SailPoint, Inc. (Nasdaq: SAIL), a leader in enterprise identity security, today unveiled SailPoint Accelerated Application Management, a breakthrough solutio...

The Markets Daily
Oct 17th, 2026
SailPoint unveils AI identity agents, runtime controls at Navigate.

SailPoint unveils AI identity agents, runtime controls at Navigate. SailPoint (NASDAQ:SAIL) used its Navigate conference briefing to outline product updates centered on securing both human and AI identities, including autonomous agents, runtime authorization controls, expanded cloud infrastructure support and a redesigned user interface. Chandra Gnanasambandam, SailPoint's executive vice president of product and chief technology officer, said the company views identity security as a combined "human plus AI" challenge rather than one requiring separate platforms. He said large enterprises may face tens of millions of agentic interactions per day as AI agents interact with large language models, APIs and data systems. Autonomous agent vision and runtime controls. Gnanasambandam introduced SailPoint's vision for autonomous identity agents, grouped into red, blue and green categories. Red agents would identify potentially risky or unauthorized activity, such as an AI agent accessing information beyond its owner's permissions. Blue agents would investigate and, if warranted, stop the activity. Green agents would focus on "peacetime" governance tasks, including automation of access-certification processes. He said SailPoint has signed one of the world's largest banks as a design partner for a green certification agent, with a targeted delivery timeframe of December or January. The company also said its platform can support least-privilege and zero-standing-privilege access models for both humans and AI. SailPoint described its role as a policy decision point that evaluates whether access should be permitted in real time, even after a user or agent has been authenticated by an identity provider such as Okta, Microsoft Entra or Ping. Gnanasambandam said identity providers primarily handle authentication, while SailPoint's platform is intended to provide fine-grained authorization based on identity context, access behavior, policy compliance and risk. Entro integration and Agentic Fabric capabilities. SailPoint said its Agentic Fabric and Entro, which SailPoint acquired roughly 90 days before the briefing, are expected to be fully integrated and generally available in November. The company also said that a majority of the capabilities discussed during the presentation are expected to be generally available by Nov. 1 or by the end of the year, with a smaller group planned for the first quarter of the following year. Levent Besik, SailPoint's chief product officer, demonstrated the Agentic Fabric, which the company said is designed to inventory AI agents, non-human identities and credentials across enterprise environments. The platform uses connectors, endpoint sensors, browser plugins and integrations with AI, SaaS, security information and event management, and data-security platforms, according to Besik. In the demonstration, SailPoint showed how security administrators could review an AI agent's owner, credentials, activity history, access graph and risk factors. Besik said the platform can identify issues including unsanctioned AI platforms, exposed credentials, access to production systems and anomalous behavior. Administrators can deactivate agents, rotate credentials or establish authorization policies from the platform, he said. SailPoint also highlighted scheduled audit reports designed for frameworks including GDPR, HIPAA and the EU AI Act. Besik said the reports can be exported, scheduled and customized. The company plans to unify similar audit capabilities across its agentic and human-focused offerings. Human identity updates. Dan Martillotti, SailPoint's vice president of product management, outlined additions to the company's Human Fabric. These include posture management intended to show identity risk across human and non-human identities, along with recommended remediation actions. The company said it has automated the creation of entitlement descriptions when applications are onboarded and added tools to assess privilege severity. SailPoint also introduced "effective privilege" views intended to reveal access that may be inherited indirectly through roles and groups. For end users, SailPoint demonstrated an agentic access-request experience that can recommend entitlements based on a user's role and needs. For privileged access, the platform supports just-in-time sessions in which access is provisioned when a user begins a task and removed when the session ends. Martillotti also described certification automation that can recommend retaining or revoking access based on policy guardrails, such as whether privileged access has been used recently. Customer demand shifts toward action and compliance. In response to analyst questions, Gnanasambandam said customer conversations have shifted from discovery of agents and credentials toward acting on identified risks. He cited credential rotation, immediate removal of exposed access and runtime controls as key customer priorities. He also said audit and compliance discussions have increased, particularly around accountability and fine-grained controls for AI systems. SailPoint said its Agentic Fabric can operate alongside customers' existing IdentityIQ deployments and can connect to IdentityIQ to incorporate human identity context without requiring a migration. About SailPoint (NASDAQ:SAIL). SailPoint, Inc (NASDAQ:SAIL) is an identity security company that helps organizations manage and protect digital identities and access to applications, data, and other technology resources. Its software is designed to help enterprises determine who should have access to specific resources, enforce access policies, and identify and address inappropriate or excessive access. The company's offerings include its cloud-based identity security platform, which supports identity governance, access management, lifecycle automation, compliance, and analytics.

iTWire
Oct 15th, 2026
Workday's Rob Enslin says C1's real rival is SailPoint, as APJ customers ask how to stop experimenting with AI.

Workday's Rob Enslin says C1's real rival is SailPoint, as APJ customers ask how to stop experimenting with AI. Alex Zaharov-Reutt, Global AI and Technology Editor | Published 16 Oct 2026 The Asia Pacific and Japan media roundtable at Workday Rising 2026 started with the Ashes. An Australian journalist pointed out that a colleague moving home from Singapore was "coming back at the right time," because cricket season was coming and "we get to beat the English." But then we got into the real discussion - Workday, AI, real value and much more. Then Workday President, Asia Pacific, John Lombard, offered the room a deal. He'd been at Workday "three months and four days," he said, "so ask me anything. I can answer everything," he joked, good-naturedly, although he has obviously hit the ground running. The man most of the questions went to, though, was Workday President and Chief Commercial Officer, Rob Enslin, who joined in December 2024 after stints as CEO of UiPath, president of cloud sales at Google Cloud and about 27 years at SAP. He runs Workday's sales and decides how its new products, including the planned C1.ai acquisition, are taken to market. Alongside him were Lombard, who spent about a decade as APAC CEO of NTT Data (formerly Dimension Data) after senior roles at SAP and KPMG Australia, and Workday President, Japan, Chikara Furuichi, who joined in 2024 from cybersecurity company Tanium, where he was president for Asia Pacific and Japan. The three agents that matter most A journalist from Korea's Electronic Times asked which of the week's announcements would deliver the most value. Enslin started with the AI assistant for Workday Community, Workday's customer support site, which he'd shown off in the Community Day keynote. It summarises the help desk calls Workday receives and surfaces answers so customers "don't have to phone us for help," he said. Customers can also answer each other's questions, with Workday engineers connected in too. For immediate value from agents, he named three, in order: the Sana Self-Service Agent, the Developer Agent and the Deployment Agent. That's a telling list from the person responsible for sales. It skips the week's headline launches like Work Intelligence and the autopilot agents and picks the tools that are generally available today and easiest to prove. How APJ is different Another Japanese journalist asked how AI conversations with customers in the region had changed over the past year. Enslin pointed to the Singapore government, which he works with closely. "They are, I would say, very advanced in their thinking," he said, and "very well on their journey with many of our agent tools," starting with a better experience for Singapore's agencies. They're now working out which skills to switch on in the Sana Self-Service Agent. In Australia, Workday is working with "a couple of large companies" on use cases for Sana Enterprise, which connects Sana to other business systems. That's "more of a CIO discussion," he said, and often depends on how a company runs its AI across Claude, Copilot and other environments. Overall, he said, APAC is making progress on AI for HR and finance, but "it is lagging a little bit," and "that's true for Japan as well." The copy-paste economy Lombard added the most useful number of the session. Workday's own analysis of employees across the APJ region found that four out of five are struggling with what he called the "copy-paste economy," copying information from one system to another because their systems aren't integrated. They want agents to "move from the periphery to the core," he said. The customers he's met in his first three months want "really clear use cases and solutions and the ability to deploy these agents within their workplace." His warning to them echoed Workday's keynote message. "One of the things that's really important is the strong message that you need to redesign your business process," he said. Customers need those skills, both inside Workday and across its partners, to avoid simply adding an agent to an old process. Japan's CIO question Furuichi said the decision-making picture in Japan is different. Japanese companies are less likely than large companies elsewhere to have a dedicated CIO, he said, and in Japan, the decision on Workday tends to be split roughly evenly between IT and HR leaders. Enslin pointed to a Japanese customer in Workday's early program for Sana, which was given a year of free use in return for working closely with Workday on use cases. He'll be in Tokyo in two weeks. "How do I stop experimenting?" Enslin said customers everywhere are asking the same question: "How do I stop experimenting?" He described the typical CIO's dilemma. "I feel like the productivity is really good. With these tools, my employees are happy. But we really don't understand if we got anything from that," he said. "It's almost like I can't take it away because they're happy... They tell me they're more productive, but when I look at my numbers, it doesn't look like we're actually advancing anything." That's the same hidden productivity gap Wharton professor Ethan Mollick described in the Community Day keynote that morning. "I think we're getting out of the experimentation phase right now," Enslin said. Workday's pitch is that it can be specific about value because it works in defined domains. "We can be very specific in what value you get in HCM and very specific in what value you get in financials," he said. It also builds agents alongside customers using forward deployed engineers, getting daily feedback. "We harden these agents on the fly, and the speed of change is dramatic," he said. He singled out the Payroll Agent and Decision Intelligence as delivering "huge benefits." CIOs, CHROs and the "death match" I asked who leads AI decisions for Workday customers: the CHRO, the CIO, or both "having a death match." "I think you've got all three of those," Enslin said. Some CHROs are very advanced. Some CIOs understand how they can help. And in other companies they're fighting, "because they're also fighting for dollars," and for credit with the CEO. He was frank about how it got messy. Many companies started by experimenting with foundation model companies, and with Microsoft Copilot building agents on top of Workday by "extracting as much data as they could to create a flow on top of it." "If you understand the Workday environment, that's not a good idea," he said, because the result is weak, hard to change and can't be controlled. I added that it can also leak information. "Exactly," Enslin said. Workday's answer was to make its own platform open, with APIs, open data flows and MCP access. Now, he said, CIOs are telling Workday: "I want you to own all the agents that exist inside of HCM... But I want you to be able to connect into your agents through an MCP server." The deal Workday offers is simple. "You can connect whatever you want, but you'll go through Sana," Enslin said. Agents talking to Workday "will inherit all of our rules and all of our business frameworks." The split he expects: customers will use other vendors for agents outside finance and HR, and Workday for everything inside them. AI-native teams Enslin also said AI success depends on having "AI-native people." Workday's own agents are built by small, highly skilled teams in Hellermark's organisation, "not hundreds, three, four, five" engineers, who can build agents "at incredible speed." "If we didn't have that, I don't think we'd be anywhere where we are today," he said. Workday now generates code in its own proprietary language with AI, he said, and its engineers no longer write it by hand. Meanwhile, many CIOs are trying "to patch all of these things together," he said, and "experimentation is out of control." They can't manage the various agent control planes, and "none of the control planes coming out from all these other competitors actually understand identity," he said. "That's why we acquired C1." My question: will Workday sell against Okta? Enslin decides how C1 will be sold, so I asked him directly. At the executive press Q&A, Workday CEO, Aneel Bhusri, had said: "If we turned off access to Okta tomorrow, they'd be out of business." Okta has been a Workday partner for more than a decade and is widely used across APJ. Once the deal closes, will Workday's sales teams sell identity governance against Okta, SailPoint and Microsoft Entra? And what should a customer already running Okta on top of Workday do? Enslin was noticeably more diplomatic than his CEO. Here's his answer in full (lightly edited for clarity, as the room's recording wasn't perfect): "I think there's multiple [views]. I think there was a provocative statement, in a world where that's possible. But it's in the software world. Say, like the United Nations, we live in a weird political world. But everybody's kind of agreed that you can access, and there's been no real walls in the software industry that say 'okay'. ServiceNow's probably the second largest access into Workday. So it's not only Okta, [it's] ServiceNow. I don't think that will mature. I think what customers will have [to do] will be to figure out who does governance and things. Our competition will be SailPoint more than Okta. Okta does access. C1 is much more around governance than identity. How we bring that governance to our customers. They'll probably still have a combination of Okta and us. Then, you know, that'll be competition with Okta. I don't think that's where we are right now." When I suggested that competing with a partner is just business, he went on: "And there's at least lots of interest in this. If you look at the full stack for identity access governance, there's multiple layers of this, and they're all at different levels of maturity. Very fragmented. C1 has built an incredible technology team. It fits our ASOR discussion, and that's really why we think it's important. We're discussing simplicity when it comes to being able to identify who's coming in. Are they real, and so on." ASOR is Workday's Agent System of Record, its register for AI agents, and when I asked him to spell it out, Enslin explained it in HR terms: "So we actually treat an agent similar to how we treat an employee. They have an ID. They have rules. They have access rights. They have auditability, and so on. An agent can only do certain things, and that's why we talk about lawless and lawful. That's why when you come in, we validate [you] when you're coming through Sana. This person, these are the guardrails they can work in. They can't get outside of those guardrails." With so many agents out there, he added, "you've got to control them." "And you have to figure out what the traceability is. You have to figure out if the agent actually gave the right answer and so on. That's why C1 was an important acquisition to us." Data sovereignty is political An Indian journalist asked about data protection rules, which India and many other markets are tightening. "It's much more of a political discussion than a technical discussion," Enslin said. Saudi Arabia and the UAE require data residency for regulated industries, Europe requires sovereignty, and Canada is moving in the same direction. "Ultimately, we're going to do whatever governs that country," he said. Workday already has data centres in India, he said, and offers sovereignty in most of Europe. And it's not just the data. "The models we use also have to be data resident," he said, so a model hosted in the US can't be used where local rules forbid it. "We don't actually charge our customers for tokens" The same journalist asked who pays for the AI tokens behind Sana. Enslin's answer was the clearest explanation of Flex Credits I heard all week. "We don't actually charge our customers for tokens. It's the Flex Credits," he said, describing them as a "value currency." Which foundation models Workday uses, and how it runs them, "is up to us to make certain that we actually are doing it in a highly performant, operating margin way." "We drive the cost down ourselves, and the customer gets the benefit of the value," he said. Customers can see where the credits are going and which agents cost the most. Agents are fungible, so "we don't charge per agent," he said. "Flex Credits are like a universal credit. How you use the Flex Credit is totally up to the customer." That puts the burden on Workday. "If they're not getting value, they're going to switch it off," he said. "They don't have to shove software back to us and say I'm not using it. They can just switch it off themselves." He called it "a very different model than I think anyone else has taken on." Oracle might disagree: it has been bundling its Fusion AI agents at no additional licence fee. But Workday's approach does at least give customers a clear dial to turn down. My question: what's different from RPA? Enslin ran UiPath when robotic process automation promised to automate the back office, and Workday Chief AI Officer, Joel Hellermark, had called RPA "incredibly brittle." So I asked what makes agents different, and how Workday will prove value when, as Mollick said, employees hide their productivity gains. "With RPA, you don't understand the business process framework that underlies systems, but you can understand screens," Enslin said. That breaks as soon as screens change, and Sana's new interface changes from one user to the next as they type. "RPA just can't handle that," he said. "Generative AI just flattened that idea." He was candid about the limits of Workday's own agents, though. Sana Concierge "will struggle to work where it doesn't understand the model," he said. "It'll work fine in the open world where all the data is available, but it will struggle to go into an SAP system and do something there. Inside a Workday system, it's going to be amazing." He also admitted Workday still uses RPA internally. "Some of the RPA stuff we use internally works and does a really good job for a specific process. We haven't replaced it yet," he said. "It's just not a priority for us." He didn't directly answer the second half of my question, about hidden productivity gains, though his earlier answer about customers who "can't take it away because they're happy" covered similar ground. AI and Japan's shrinking workforce The final question came from a Japanese journalist, who asked how to explain Workday's platform and pricing to Japanese shareholders and finance professionals used to traditional practices. Enslin said AI has "a huge benefit to Japan with the diminishing population," and that many Japanese work processes are "well understood," making them good candidates. "Without having to completely change how Japanese work, the use cases for finance and HR will be transformative for Japan," he said. He closed by borrowing from Mollick. "If you're not experimenting with AI, even if you don't know what the outcome is, you have to, because it's going to change every single business model in the world in the next couple of years," he said. Companies that don't "will be completely left behind and might go out of business." Three things stood out. First, Enslin softened Bhusri's Okta line considerably. "Our competition will be SailPoint more than Okta" is the most precise statement Workday has made about C1's place in the market, and it matches what C1 actually does. Customers running Okta can relax, for now. Second, his Flex Credits explanation is a smart sales pitch: no per-agent licences, a universal currency, and the ability to switch off anything that doesn't deliver. Whether that beats Oracle's bundled agents will come down to how predictable the bills are, which Workday's own executives admitted all week is still being worked out. Third, there's a tension in his message. Customers need to "stop experimenting," but every company "has to" experiment or risk going out of business. Both can be true. Workday wants experimentation to happen inside its rules and its Flex Credits, with measurable outcomes, and outside the ad hoc Copilot flows built on extracted Workday data. What it means for Australian organisations Lombard's "copy-paste economy" figure will ring true for plenty of Australian organisations. If four in five APJ employees are copying data between systems, that's the first place to look for agent value. For Australian companies running Okta, Enslin's answer is clear: expect to run Okta for access and Workday with C1 for governance side by side. The vendor to watch is SailPoint. And for any Australian CIO in a "death match" with HR over who owns AI, Enslin's split is a useful starting point. Workday wants to own the agents inside HR and finance, and to let everything else connect through Sana and inherit its rules.

MarketBeat
Oct 14th, 2026
SailPoint unveils AI identity agents, runtime controls at Navigate.

SailPoint unveils AI identity agents, runtime controls at Navigate. October 14, 2026 Key points. * SailPoint unveiled AI identity agents and runtime authorization controls designed to secure human and non-human identities, enforce least-privilege access, and detect or stop risky AI-agent activity in real time. * The company said its Agentic Fabric and recently acquired Entro technology are expected to be fully integrated and generally available in November, with tools to inventory AI agents, monitor credentials, manage risks, and support compliance reporting. * New human-identity features include identity-risk posture management, effective-privilege analysis, automated access recommendations and certifications, and just-in-time privileged access. SailPoint also reported rising customer demand for credential rotation, rapid access removal, runtime controls and AI compliance. * Five stocks to consider instead of SailPoint. SailPoint NASDAQ: SAIL used its Navigate conference briefing to outline product updates centered on securing both human and AI identities, including autonomous agents, runtime authorization controls, expanded cloud infrastructure support and a redesigned user interface. Chandra Gnanasambandam, SailPoint's executive vice president of product and chief technology officer, said the company views identity security as a combined "human plus AI" challenge rather than one requiring separate platforms. He said large enterprises may face tens of millions of agentic interactions per day as AI agents interact with large language models, APIs and data systems. Autonomous agent vision and runtime controls. Gnanasambandam introduced SailPoint's vision for autonomous identity agents, grouped into red, blue and green categories. Red agents would identify potentially risky or unauthorized activity, such as an AI agent accessing information beyond its owner's permissions. Blue agents would investigate and, if warranted, stop the activity. Green agents would focus on "peacetime" governance tasks, including automation of access-certification processes. He said SailPoint has signed one of the world's largest banks as a design partner for a green certification agent, with a targeted delivery timeframe of December or January. The company also said its platform can support least-privilege and zero-standing-privilege access models for both humans and AI. SailPoint described its role as a policy decision point that evaluates whether access should be permitted in real time, even after a user or agent has been authenticated by an identity provider such as Okta, Microsoft Entra or Ping. Gnanasambandam said identity providers primarily handle authentication, while SailPoint's platform is intended to provide fine-grained authorization based on identity context, access behavior, policy compliance and risk. Entro integration and Agentic Fabric capabilities. SailPoint said its Agentic Fabric and Entro, which SailPoint acquired roughly 90 days before the briefing, are expected to be fully integrated and generally available in November. The company also said that a majority of the capabilities discussed during the presentation are expected to be generally available by Nov. 1 or by the end of the year, with a smaller group planned for the first quarter of the following year. Discover more MarketBeat All Access Stock Average Calculator Stock Market News Levent Besik, SailPoint's chief product officer, demonstrated the Agentic Fabric, which the company said is designed to inventory AI agents, non-human identities and credentials across enterprise environments. The platform uses connectors, endpoint sensors, browser plugins and integrations with AI, SaaS, security information and event management, and data-security platforms, according to Besik. In the demonstration, SailPoint showed how security administrators could review an AI agent's owner, credentials, activity history, access graph and risk factors. Besik said the platform can identify issues including unsanctioned AI platforms, exposed credentials, access to production systems and anomalous behavior. Administrators can deactivate agents, rotate credentials or establish authorization policies from the platform, he said. SailPoint also highlighted scheduled audit reports designed for frameworks including GDPR, HIPAA and the EU AI Act. Besik said the reports can be exported, scheduled and customized. The company plans to unify similar audit capabilities across its agentic and human-focused offerings. Human identity updates. Dan Martillotti, SailPoint's vice president of product management, outlined additions to the company's Human Fabric. These include posture management intended to show identity risk across human and non-human identities, along with recommended remediation actions. The company said it has automated the creation of entitlement descriptions when applications are onboarded and added tools to assess privilege severity. SailPoint also introduced "effective privilege" views intended to reveal access that may be inherited indirectly through roles and groups. For end users, SailPoint demonstrated an agentic access-request experience that can recommend entitlements based on a user's role and needs. For privileged access, the platform supports just-in-time sessions in which access is provisioned when a user begins a task and removed when the session ends. Martillotti also described certification automation that can recommend retaining or revoking access based on policy guardrails, such as whether privileged access has been used recently. Customer demand shifts toward action and compliance. In response to analyst questions, Gnanasambandam said customer conversations have shifted from discovery of agents and credentials toward acting on identified risks. He cited credential rotation, immediate removal of exposed access and runtime controls as key customer priorities. He also said audit and compliance discussions have increased, particularly around accountability and fine-grained controls for AI systems. SailPoint said its Agentic Fabric can operate alongside customers' existing IdentityIQ deployments and can connect to IdentityIQ to incorporate human identity context without requiring a migration. About SailPoint (NASDAQ:SAIL). SailPoint, Inc NASDAQ: SAIL is an identity security company that helps organizations manage and protect digital identities and access to applications, data, and other technology resources. Its software is designed to help enterprises determine who should have access to specific resources, enforce access policies, and identify and address inappropriate or excessive access. The company's offerings include its cloud-based identity security platform, which supports identity governance, access management, lifecycle automation, compliance, and analytics. This instant news alert was generated by narrative science technology and financial data from MarketBeat in order to provide readers with the fastest reporting and unbiased coverage. Please send any questions or comments about this story to [email protected]. Before you consider SailPoint, you'll want to hear this. MarketBeat keeps track of Wall Street's top-rated and best performing research analysts and the stocks they recommend to their clients on a daily basis. MarketBeat has identified the five stocks that top analysts are quietly whispering to their clients to buy now before the broader market catches on... and SailPoint wasn't on the list. While SailPoint currently has a Moderate Buy rating among analysts, top-rated analysts believe these five stocks are better buys. The AI boom is creating opportunities across semiconductors, cloud computing, enterprise software, infrastructure, cybersecurity, and automation. Inside this report, you'll find 10 companies positioned to benefit as artificial intelligence moves from hype to real-world deployment and becomes a core growth driver for corporate America. Continue following MarketBeat

i4.0 Today
Oct 9th, 2026
From chaos to control: SailPoint unlocks a secure agentic era with Autonomous Identity Security.

From chaos to control: SailPoint unlocks a secure agentic era with Autonomous Identity Security. October 9, 2026 Today at Navigate 2026, its annual flagship conference, SailPoint, Inc. (Nasdaq: SAIL), a leader in enterprise identity security, announced significant new capabilities across SailPoint Agentic Fabric(TM)(SAF) and SailPoint Human Fabric(TM)(SHF), the two purpose-built products of its Identity Security solution, built on SailPoint Atlas. These innovations give enterprises what they need most in the agentic era: full visibility into every hidden AI tool, continuous compliance across human and machine workflows, the replacement of permanent access keys with temporary permissions, and the transformation of identity security from a static compliance check into real-time, automated defence. According to the latest SailPoint Horizons of Identity Security report, 79% of enterprises are already running AI agents in production, yet only 2% have deployed identity security tools purpose-built to govern and secure them. Meanwhile, enterprises are stuck between static reviews that are outdated the moment they finish and posture dashboards that flag risks but can't fix them. Introducing SailPoint Autonomous Agents. When AI agents invoke MCP tool calls at machine speed, human review of every action is impossible. SailPoint announced Autonomous Agents, a fleet of specialised AI agents built to govern and protect the agentic ecosystem. Unlike generic tools that simply shut agents down when anomalies occur, Autonomous Agents use identity context to tell legitimate intent from malicious activity, stopping threats while keeping productive agents running. These Autonomous Agents actively govern the agentic lifecycle: continuously monitoring runtime actions, intercepting threats, and right-sizing permissions to enforce zero standing privilege at machine speed. Matt Mills, President of SailPoint, said: "Autonomous agents are no longer just experimental copilots; they are becoming the primary execution layer of modern enterprises. Enterprises cannot afford to slow down AI innovation out of fear, nor can they afford ungoverned access chaos. Moving beyond Zero Trust to Autonomous Identity allows organisations to master the converged human-plus-AI workforce, eliminate invisible risk, and innovate with complete confidence." Chandra Gnanasambandam, EVP of Product and Chief Technology Officer said: "The idea that a security admin is going to review and approve access for a group of autonomous agents making 10,000 tool calls a second isn't just outdated - it's a fantasy. The only way to govern autonomous machines is with autonomous machine defense. We've built Autonomous Agents so enterprises can stop the threat, save the good agents, and bring human and non-human identity into real-time. In a near-AGI world, standing privilege is dead." Autonomous Identity Security posture management (A-ISPM) goes beyond the dashboard. Using the live identity context in SailPoint Atlas, SailPoint's new A-ISPM continuously detects dormant accounts, partially offboarded identities, orphaned access, shadow admins, and privileged outliers hidden deep in access paths. It then closes the loop on each organisation's terms, with remediation ranging from one-click fixes, such as revoking access, disabling an identity or AI agent, or assigning an owner, to fully automated policy enforcement. New automation and global compliance upgrades. SailPoint is advancing global identity security with powerful new updates across its platform. The company introduced new updates to the SailPoint Atlas engine with advanced automation workflows to help enterprises scale security, while also launching IdentityIQ 9.0 to make everyday access governance simpler and more secure for business users. To support this growth, SailPoint is also expanding its global footprint - opening a new data center in South Korea and preparing to meet some of the strictest federal and financial compliance standards, including FedRAMP High, PCI DSS 4.0, and EU Sovereign Cloud. Delivering four core customer outcomes through new innovations. SailPoint delivers autonomous identity and a host of customer benefits and improved security outcomes across its Identity Security platform. New product innovations showcased at Navigate enable customers to realise these four critical business outcomes: Comprehensive discovery: Security teams can't govern what they can't see. Every agent, credential, and data store that never reach the identity program becomes access no one owns. New endpoint and browser sensors, SIEM and XDR telemetry, and vault and pipeline NHI discovery bring MCP servers, tools, credentials, and data stores into view. Data Access Security adds classification integrations with Microsoft Purview and BigID, plus new connectors for Atlassian Confluence, Google BigQuery, and AWS Redshift. Enabling compliance: Auditors are asking how AI agents are governed, and most organisations can't yet produce the evidence. New Agent Audit turns agent inventory and governance activity into framework-aligned evidence reports that can be exported in one action, customised, or scheduled, making audit preparation repeatable. Strengthening security posture: Standing privilege is invisible risk. Every always-on account is an open door for attackers. Just-in-Time provisioning (JIT-P) grants access only when needed, with conditions such as business justification or reauthentication and activation through Slack or ServiceNow. Agentic Fabric delivers prompt monitoring with policy-based redaction and blocking and behavioral risk detection. Human Fabric features a CrowdStrike Foundry App and SecOps containment actions with a full audit trail. Streamlining operations: Governance has become too admin-heavy, and manual processes can't keep pace with the volume of human and agent access. Human Fabric will now offer next-generation access requests with an embedded Harbor Pilot Access Request Agent. The upcoming Harbor Pilot Policy Agent lets administrators explain and draft access policies for people and agents in plain language, and Agentic Fabric provides one-click agent lifecycle controls and an agent kill switch. Platform milestone: SailPoint Agentic Fabric + Entro integration. Also announced during Navigate, the Entro Security integration into SailPoint Agentic Fabric will soon be complete. The integration includes Entro-powered credential lineage, exposed secret discovery, and prompt-intent monitoring into Agentic Fabric, extending governance to secrets and credentials that AI agents and NHIs depend on. Availability. Capabilities across SailPoint Agentic Fabric, SailPoint Human Fabric, and SailPoint Atlas are rolling out globally beginning at Navigate 2026. A-ISPM, the Harbor Pilot Policy Agent, and the Proofpoint integration are expected in Q4 FY27. New Success Acceleration service packages combine expert-led roadmaps, vertical-specific deployment accelerators, AI-driven risk reduction, and continuous compliance support to help customers reach zero standing privilege and realize value faster. To watch Navigate 2026 keynotes and product demonstrations live or on demand, visit www.sailpoint.com/navigate. About SailPoint. SailPoint (Nasdaq: SAIL) is defining the new era of adaptive identity security. In a world where non-human identities now significantly outnumber humans, its AI-powered platform unifies identity, security, and data intelligence to protect today's enterprise from advanced identity-based threats. I4.0 Today deliver the identity solution that spans both the breadth of identities and the depth of context needed to drive real-time access with confidence. Built on principles like zero-standing privilege and contextualized risk, its SailPoint platform transforms identity from a point of vulnerability into a powerful security advantage. Trusted by many of the world's leading organizations, SailPoint secures the enterprise with intelligent, autonomous identity security. Hot this week