SailPoint launches unified identity security for AI agents

SailPoint has launched a unified identity security offering for human, machine and AI agent identities, combining its Human Fabric and Agentic Fabric products into a single system.

The release is aimed at organisations managing a growing mix of employee, software and automated identities across digital systems. It is designed to discover, govern and protect those identities through a continuous security process rather than periodic reviews.

SailPoint has also made Agentic Fabric generally available as a standalone product and as part of the broader identity security package. Human Fabric, the next version of its Identity Security Cloud, will now be available only within the unified product.

The launch reflects a broader shift in corporate security priorities as businesses adopt more AI agents and automated tools. SailPoint cited its own research showing that 97% of AI agents have access to sensitive data, while 21% of organisations are highly confident in their ability to manage AI agent security risks.

Human access

For human users, Human Fabric is intended to move identity governance away from scheduled audits and toward continuous monitoring. The system is designed to identify privilege creep, feed identity context into security operations workflows and support just-in-time access for administrative tasks.

That approach aligns with a broader cybersecurity push to reduce standing access rights. By limiting how long privileged access remains active, companies aim to reduce opportunities for misuse or compromise.

Machine oversight

On the machine side, Agentic Fabric is designed to identify AI agents, credentials and Model Context Protocol servers that may sit outside traditional security tools. It uses endpoint and browser sensors - SailPoint Endpoint Agent Security and SailPoint Browser Agent Security - to surface those identities.

It also includes prompt filtering intended to remove sensitive personally identifiable information before it reaches large language models. Other controls include a central switch to disable agents and ownership rules intended to assign human accountability for each machine account.

SailPoint positioned the release as a response to what it called an identity-driven vulnerability problem in modern enterprises. Security teams must now manage not only employee accounts and contractors, but also service accounts, bots, scripts and a newer wave of AI agents operating inside business systems.

Chandra Gnanasambandam, EVP of Product and Chief Technology Officer at SailPoint, outlined the company's view in a statement accompanying the launch.

"SailPoint Identity Security represents a fundamental shift in how organisations must neutralise identity vulnerabilities in an AI-driven world. We are moving the industry beyond static compliance and into an active, continuous security loop. By unifying the ability to discover every identity, govern access lifecycle policies, and protect the enterprise through real-time risk remediation, we are giving security leaders the visibility and automation they need to confidently shut down modern attack vectors before they can be exploited," said Gnanasambandam.

Partner view

Consulting and integration partners are using the new product to help customers build governance models for AI agents and machine identities. Among them is KPMG Canada, which SailPoint named as an early alliance partner.

Serena Tejani, Cybersecurity Partner, KPMG Canada, said the challenge for large organisations now extends beyond employee access management.

"Securing the modern enterprise is no longer just about managing employee access; it is also about governing the complex relationships between human owners and their automated AI agents. A real advantage of the SailPoint Identity Security solution is its ability to unify human and machine protection within a single, continuous loop. We are pleased to be an early alliance partner of the solution and with KPMG firms' risk and security advisory services, we are helping organisations confidently scale their digital workforces, eliminate security blind spots, and transform identity from a point of vulnerability into a business-wide advantage," said Tejani.

The product is available through SailPoint's Agentic Business and Agentic Business Plus suites. The launch adds to growing competition in identity and access management as security vendors adapt products for machine identities and AI systems operating with limited direct human supervision.