SailPoint, Inc. is an American cybersecurity company specializing in digital identity security and governance. Based in Austin, Texas, it addresses a fundamental question for IT departments: who should have access to which resources, under what conditions, and for how long? Its solutions primarily target large organizations, where applications, users, and compliance requirements are multiplying.
A company born out of governance challenges
Founded in 2005 by Mark McClain, Kevin Cunningham, and others, SailPoint grew in the identity governance and administration market, often referred to by the acronym IGA. This field goes beyond authentication alone: it involves organizing, reviewing, and justifying the access rights granted to users throughout their relationship with an organization.
The company went public in 2017, was acquired by investment firm Thoma Bravo in 2022, and was subsequently delisted. It returned to the public markets in February 2025, listing on Nasdaq under the ticker symbol SAIL. Meanwhile, its offering has evolved toward cloud services, while retaining a product line intended for customer-managed environments.
Controlling access, from hiring to departure
SailPoint markets products including Identity Security Cloud, its software-as-a-service offering, and IdentityIQ, a governance solution that can be deployed on infrastructure controlled by organizations. These products bring together information from human resources systems, directories, and applications to build a view of identities and their access rights.
They automate the granting or revocation of access rights when someone joins, changes roles, or leaves. Managers can also periodically review access, identify excessive permissions, and document their decisions for audits. Separation of duties, which prevents certain incompatible powers from being concentrated in the hands of a single person, is another important use case.
The company also uses data analytics and artificial intelligence to offer recommendations and detect unusual situations. Its focus is therefore more on managing access rights than simply enabling users to log in to applications. However, the value of its tools depends on the quality of the available data, the integrations implemented, and the rules defined by each customer.
What comes next?
The proliferation of cloud services, service providers, and non-human identities is expanding the scope of what needs to be monitored. For SailPoint, the challenge is to accommodate these new needs without making day-to-day business processes more cumbersome. The rise of artificial intelligence agents also makes the question of permissions granted to software acting on behalf of users more pressing.
In a competitive market, its trajectory will depend in particular on its ability to simplify deployments and make access decisions easier to understand. For customers, the benchmark will remain practical: reducing unnecessary access rights while keeping work running smoothly. Official website: sailpoint.com.