SailPoint launches Identity Security for AI agents

SailPoint has launched its Identity Security solution, combining its Human Fabric and Agentic Fabric offerings.

The launch brings together tools to manage human users, machine identities and AI agents through a single system, as companies face a growing volume of automated accounts across their technology estates.

The package includes Agentic Fabric, now generally available, and Human Fabric, which replaces SailPoint's earlier Identity Security Cloud approach for human identity governance within the combined offering.

SailPoint is positioning the launch around the convergence of human and non-human identities, arguing that security teams need a single view of both employee access and the activity of software agents, credentials and related systems.

Research cited by SailPoint found that 97% of AI agents can access sensitive data, while 21% of organisations said they were highly confident in their ability to manage AI agent security risks.

Human oversight

Human Fabric is designed to shift identity governance for staff and other human users from periodic reviews to continuous monitoring. The system is intended to identify privilege creep, feed identity context into security operations centre workflows and support just-in-time provisioning, so administrative access is granted only for the time needed to complete a task.

This approach is intended to reduce standing access rights and support what SailPoint describes as Zero Standing Privilege, in which users do not retain long-term privileged access unless it is required.

Agent controls

Agentic Fabric is aimed at uncovering AI agents and other machine-based identities that may not be visible through existing security tools. It uses endpoint and browser sensors, known as SailPoint Endpoint Agent Security and SailPoint Browser Agent Security, to identify AI agents, credentials and Model Context Protocol servers.

Once discovered, those identities can be subject to controls including redaction of personally identifiable information before data reaches large language models, a central switch to disable rogue agents and rules intended to assign a human owner to each machine account.

Agentic Fabric will be available both as a standalone product and as part of the broader Identity Security package.

Chandra Gnanasambandam outlined SailPoint's view of the market shift.

"SailPoint Identity Security represents a fundamental shift in how organizations must neutralize identity vulnerabilities in an AI-driven world. We are moving the industry beyond static compliance and into an active, continuous security loop. By unifying the ability to discover every identity, govern access lifecycle policies, and protect the enterprise through real-time risk remediation, we are giving security leaders the visibility and automation they need to confidently shut down modern attack vectors before they can be exploited," said Chandra Gnanasambandam, EVP of Product and Chief Technology Officer, SailPoint.

The launch reflects a broader shift in enterprise security, where non-human identities often outnumber employees using a system directly. That has increased the focus on how organisations track service accounts, bots, application credentials and AI agents that can access internal data or trigger actions across business systems.

Security suppliers have increasingly sought to tie identity governance more closely to operational monitoring, particularly as AI agents are used to automate tasks that previously required staff intervention. In that environment, companies are under pressure to know not only which user or system has access, but also who is responsible for each automated identity and how quickly access can be removed.

KPMG Canada is among the partners working with customers on adopting the SailPoint product, according to the company.

"Securing the modern enterprise is no longer just about managing employee access; it is also about governing the complex relationships between human owners and their automated AI agents. A real advantage of the SailPoint Identity Security solution is its ability to unify human and machine protection within a single, continuous loop. We are pleased to be an early alliance partner of the solution and with KPMG firms' risk and security advisory services, we are helping organizations confidently scale their digital workforces, eliminate security blind spots, and transform identity from a point of vulnerability into a business-wide advantage," said Serena Tejani, Cybersecurity Partner, KPMG Canada.

The Identity Security solution is available through SailPoint's Agentic Business and Agentic Business Plus suites.