SailPoint has unveiled a unified identity security solution designed to close the growing gap between how enterprises manage human identities and the rapidly expanding population of non-human and AI agent identities operating inside their networks.
The offering combines SailPoint Agentic Fabric, now generally available, with SailPoint Human Fabric, an evolution of the company’s existing Identity Security Cloud product, into what it describes as a continuous, real-time loop to discover, govern and protect identities across complex digital environments.
AI agents outpacing enterprise oversight
The launch is underpinned by SailPoint research showing that 97 per cent of AI agents have access to sensitive data, yet only 21 per cent of organisations are highly confident in their ability to manage AI agent security risk. SailPoint argues that existing approaches fall short on both ends: some vendors rely on static, check-the-box audit certifications, while newer entrants offer visibility into machine identities without a way to act on the risks they surface.
“SailPoint Identity Security represents a fundamental shift in how organizations must neutralize identity vulnerabilities in an AI-driven world,” said Chandra Gnanasambandam, EVP of Product and Chief Technology Officer at SailPoint. “We are moving the industry beyond static compliance and into an active, continuous security loop.”
Continuous governance for human and machine identities
SailPoint Human Fabric shifts identity governance away from scheduled, point-in-time audits towards a continuous security posture, aimed at moving enterprises closer to Zero Standing Privilege. It automatically surfaces hidden privilege creep, feeds real-time identity context into security operations centre workflows, and uses just-in-time provisioning to grant administrative access only for the exact duration a task requires.
SailPoint Agentic Fabric, meanwhile, targets the unmonitored growth of machine and AI identities. It uses lightweight endpoint and browser sensors — SailPoint Endpoint Agent Security and SailPoint Browser Agent Security — to expose hidden AI agents, credentials and Model Context Protocol (MCP) servers that traditional identity tools typically miss. Once identified, these identities are wrapped in real-time defences, including inline redaction of personally identifiable information before it reaches large language models, a centralised “kill-switch” to disable rogue agents instantly, and automated ownership rules to keep a human accountable for every machine account.
Integration partners including KPMG are working with SailPoint to help customers adopt what the companies describe as a responsible agentic strategy.
“A real advantage of the SailPoint Identity Security solution is its ability to unify human and machine protection within a single, continuous loop,” said Serena Tejani, Cybersecurity Partner, KPMG Canada.
The SailPoint Identity Security solution is now available as part of the company’s Agentic Business and Agentic Business Plus suites.
