SailPoint’s latest growth figures show how identity security is moving from a specialist control to a board-level priority. The company’s AI-driven annual recurring revenue has surpassed $70 million as enterprises look for ways to govern autonomous systems and the identities behind them.
The governance problem is that agentic systems create access decisions at machine speed. Traditional identity governance and administration programmes were designed around employees, contractors and periodic reviews. AI agents can call applications, create records and initiate workflows continuously, making stale entitlements and unclear ownership more consequential.
For IGA teams, the commercial signal matters because it points to a new spending category. Buyers are not simply purchasing another access-management feature; they are looking for a control plane that can connect human, machine and agent identities to business context. That means inventory, ownership, purpose, policy and evidence must travel together through the identity lifecycle.
A second issue is accountability. An agent may act on behalf of a department, a service account or a human approver, but those relationships must be explicit. Governance controls should record who authorised the agent, what data it may reach, how long the permission lasts and which conditions trigger review. Without that chain, audit evidence becomes a collection of technical logs rather than a defensible access decision.
The revenue trend also puts pressure on implementation discipline. Organisations need reliable identity data, automated joiner-mover-leaver processes and entitlement catalogues before extending governance to autonomous workflows. Risk-based certification can then prioritise high-impact agent permissions instead of asking reviewers to approve large volumes of low-value access.
The practical IGA agenda is therefore expanding: discover non-human identities, map them to owners and business processes, apply least privilege, and monitor changes continuously. Agentic security demand may be driving investment, but sustainable value will depend on whether governance teams can turn that investment into measurable control over identity lifecycle decisions.