SailPoint, Inc. (Nasdaq: SAIL) has introduced a new identity security solution designed to address the growing convergence of human and non-human identities in today’s AI-driven enterprise.
The SailPoint Identity Security solution brings together SailPoint Agentic Fabric, now generally available, and SailPoint Human Fabric, the evolution of its Identity Security Cloud. Powered by SailPoint Atlas, the solution is designed to create a continuous, real-time approach to discovering, governing, and protecting identities across increasingly complex digital environments.
As organizations rapidly adopt AI agents and automated systems, the growing number of machine identities is creating new security challenges. According to recent SailPoint research, 97% of AI agents have access to sensitive data, while only 21% of organizations are highly confident in their ability to manage AI agent security risks.
SailPoint says its new solution addresses these gaps by bringing human and machine identity context together while enabling real-time risk remediation and reducing manual security processes.
“SailPoint Identity Security represents a fundamental shift in how organizations must neutralize identity vulnerabilities in an AI-driven world,” said Chandra Gnanasambandam, EVP of Product and Chief Technology Officer at SailPoint.
“We are moving the industry beyond static compliance and into an active, continuous security loop,” he added, noting that the platform is designed to help security leaders discover identities, govern access lifecycle policies, and respond to risks in real time.
Moving Human Identity Governance Toward Real-Time Security
As part of the new solution, SailPoint Human Fabric is now delivered exclusively as a native component of the unified SailPoint Identity Security solution.
Human Fabric evolves identity governance from scheduled, static audit processes toward a continuous security posture. The approach is designed to help organizations reduce their attack surface and move toward Zero Standing Privilege (ZSP).
Its capabilities include automatically identifying hidden privilege creep, providing real-time identity context to security operations center workflows, and using Just-In-Time Provisioning (JIT-P) to provide administrative access only for the period required to complete a task.
Bringing AI and Machine Identities Into View
SailPoint is also making SailPoint Agentic Fabric generally available as both a standalone offering and a core capability of the unified Identity Security solution.
Designed to serve as a centralized control plane for automated enterprise environments, Agentic Fabric uses lightweight endpoint and browser sensors—including SailPoint Endpoint Agent Security (SEAS) and SailPoint Browser Agent Security (SBAS)—to identify AI agents, credentials, and Model Context Protocol (MCP) servers that traditional security tools may overlook.
The platform then applies real-time security controls, including inline prompt security that can redact sensitive personally identifiable information before it reaches large language models, a centralized “kill switch” for disabling rogue agents, and automated ownership rules intended to establish human accountability for machine accounts.
Supporting Responsible AI Adoption
SailPoint says integration partners are also helping organizations adopt responsible and compliant strategies for managing AI agents.
Serena Tejani, Cybersecurity Partner at KPMG Canada, highlighted the importance of addressing both employee access and the relationships between human users and automated AI agents.
“The real advantage of the SailPoint Identity Security solution is its ability to unify human and machine protection within a single, continuous loop,” Tejani said.
The SailPoint Identity Security solution, including Agentic Fabric and Human Fabric, is now available through SailPoint’s Agentic Business and Agentic Business Plus suites.
As enterprises continue to expand their use of AI and automation, SailPoint is positioning identity security as a critical layer for managing the growing ecosystem of human and non-human identities while helping organizations reduce security blind spots and respond to emerging threats in real time.