SailPoint (SAIL) Investor update summary

Strategic direction

• Positioning identity security for human and AI identities on one platform, with real-time controls designed for machine-speed activity.

• Autonomous identity vision groups agents into red agents for threat detection, blue agents for investigation and response, and green agents for governance automation.

• Large customers are seeing 75m-150m agentic interactions daily; management expects policy-based governance to automate 95% of certification reviews.

• A global bank joined as a design partner for a green certification agent, targeted for delivery by the December-January timeframe.

Agentic and human fabric capabilities

• Agentic Fabric provides agent and credential inventory, lineage, access graphs, risk scoring, behavioral monitoring, and actions such as deactivation or credential rotation.

• Runtime policies can restrict agent actions at fine granularity, including blocking Claude Code from sending Slack messages while allowing message reads.

• Agent audit reports can be scheduled and exported for frameworks including GDPR, HIPAA, and the EU AI Act; reporting is planned for the human side as well.

• Human Fabric adds real-time human risk scores, effective-privilege visibility, automated entitlement descriptions, and risk-based certification recommendations.

• Just-in-time privileged access is activated for a policy-bound session and de-provisioned when the user ends the session.

Platform and differentiation

• Atlas has a redesigned human-plus-AI data model, context and intelligence layer, risk and intent engines, policy engine, and enforcement layer.

• Runtime authorization is positioned as complementary to identity providers: they authenticate and exchange tokens, while the platform evaluates fine-grained access using identity, risk, intent, and data context.

• Telemetry combines endpoint and browser sensors, thousands of connectors, SIEM/XDR feeds, identity-provider logs, and data classifications from DSPM and DLP providers.

• Endpoint sensors and plugins can detect and govern non-MCP agents; Agentic Fabric can also connect to IdentityIQ and run alongside it without migration.

• Entro integration with Agentic Fabric was announced for general availability in November; most announced capabilities are expected by November 1 or year-end, with a smaller tranche in Q1 next year.