SailPoint Unveils AI Identity Agents, Runtime Controls at Navigate

Key Points

• SailPoint unveiled AI identity agents and runtime authorization controls designed to secure human and non-human identities, enforce least-privilege access, and detect or stop risky AI-agent activity in real time.
• The company said its Agentic Fabric and recently acquired Entro technology are expected to be fully integrated and generally available in November, with tools to inventory AI agents, monitor credentials, manage risks, and support compliance reporting.
• New human-identity features include identity-risk posture management, effective-privilege analysis, automated access recommendations and certifications, and just-in-time privileged access. SailPoint also reported rising customer demand for credential rotation, rapid access removal, runtime controls and AI compliance.

SailPoint NASDAQ: SAIL used its Navigate conference briefing to outline product updates centered on securing both human and AI identities, including autonomous agents, runtime authorization controls, expanded cloud infrastructure support and a redesigned user interface.

Chandra Gnanasambandam, SailPoint’s executive vice president of product and chief technology officer, said the company views identity security as a combined “human plus AI” challenge rather than one requiring separate platforms. He said large enterprises may face tens of millions of agentic interactions per day as AI agents interact with large language models, APIs and data systems.

Autonomous agent vision and runtime controls

Gnanasambandam introduced SailPoint’s vision for autonomous identity agents, grouped into red, blue and green categories. Red agents would identify potentially risky or unauthorized activity, such as an AI agent accessing information beyond its owner’s permissions. Blue agents would investigate and, if warranted, stop the activity. Green agents would focus on “peacetime” governance tasks, including automation of access-certification processes.

He said SailPoint has signed one of the world’s largest banks as a design partner for a green certification agent, with a targeted delivery timeframe of December or January.

The company also said its platform can support least-privilege and zero-standing-privilege access models for both humans and AI. SailPoint described its role as a policy decision point that evaluates whether access should be permitted in real time, even after a user or agent has been authenticated by an identity provider such as Okta, Microsoft Entra or Ping.

Gnanasambandam said identity providers primarily handle authentication, while SailPoint’s platform is intended to provide fine-grained authorization based on identity context, access behavior, policy compliance and risk.

Entro integration and Agentic Fabric capabilities

SailPoint said its Agentic Fabric and Entro, which SailPoint acquired roughly 90 days before the briefing, are expected to be fully integrated and generally available in November. The company also said that a majority of the capabilities discussed during the presentation are expected to be generally available by Nov. 1 or by the end of the year, with a smaller group planned for the first quarter of the following year.

Levent Besik, SailPoint’s chief product officer, demonstrated the Agentic Fabric, which the company said is designed to inventory AI agents, non-human identities and credentials across enterprise environments. The platform uses connectors, endpoint sensors, browser plugins and integrations with AI, SaaS, security information and event management, and data-security platforms, according to Besik.

In the demonstration, SailPoint showed how security administrators could review an AI agent’s owner, credentials, activity history, access graph and risk factors. Besik said the platform can identify issues including unsanctioned AI platforms, exposed credentials, access to production systems and anomalous behavior. Administrators can deactivate agents, rotate credentials or establish authorization policies from the platform, he said.

SailPoint also highlighted scheduled audit reports designed for frameworks including GDPR, HIPAA and the EU AI Act. Besik said the reports can be exported, scheduled and customized. The company plans to unify similar audit capabilities across its agentic and human-focused offerings.

Human identity updates

Dan Martillotti, SailPoint’s vice president of product management, outlined additions to the company’s Human Fabric. These include posture management intended to show identity risk across human and non-human identities, along with recommended remediation actions.

The company said it has automated the creation of entitlement descriptions when applications are onboarded and added tools to assess privilege severity. SailPoint also introduced “effective privilege” views intended to reveal access that may be inherited indirectly through roles and groups.

For end users, SailPoint demonstrated an agentic access-request experience that can recommend entitlements based on a user’s role and needs. For privileged access, the platform supports just-in-time sessions in which access is provisioned when a user begins a task and removed when the session ends.

Martillotti also described certification automation that can recommend retaining or revoking access based on policy guardrails, such as whether privileged access has been used recently.

Customer demand shifts toward action and compliance

In response to analyst questions, Gnanasambandam said customer conversations have shifted from discovery of agents and credentials toward acting on identified risks. He cited credential rotation, immediate removal of exposed access and runtime controls as key customer priorities.

He also said audit and compliance discussions have increased, particularly around accountability and fine-grained controls for AI systems. SailPoint said its Agentic Fabric can operate alongside customers’ existing IdentityIQ deployments and can connect to IdentityIQ to incorporate human identity context without requiring a migration.

About SailPoint (NASDAQ:SAIL)

SailPoint, Inc NASDAQ: SAIL is an identity security company that helps organizations manage and protect digital identities and access to applications, data, and other technology resources. Its software is designed to help enterprises determine who should have access to specific resources, enforce access policies, and identify and address inappropriate or excessive access.

The company's offerings include its cloud-based identity security platform, which supports identity governance, access management, lifecycle automation, compliance, and analytics.

This instant news alert was generated by narrative science technology and financial data from MarketBeat in order to provide readers with the fastest reporting and unbiased coverage. Please send any questions or comments about this story to contact@marketbeat.com.