SailPoint
Sorbet currently classifies SailPoint as the dark_horse in its Identity & permissions bucket. The detailed selection note is not yet available.
Mixed
Based on 3 material signals in the last 30 days: 2 positive, 1 negative.
Evidence summary, not a buy / sell rating
Latest approved decision: hold · 2026-07-17
The role and pillars explain what job this holding has inside the System-of-Record basket—not whether it suits an individual investor.
SailPoint is in the portfolio because it owns the most durable record in any enterprise: the authoritative, versioned log of who is permitted to do what, on which system, and why. That record — the entitlement graph — is precisely the permission state an agent runtime must consult before taking any real action, making SailPoint a structural substrate for the agent economy rather than a surface-layer application. It maps squarely onto P3 (ownership is a typed field with enforced permissions, not an inference from conversation) and carries meaningful weight on P1, because entitlement records are structured, durable objects with full lineage, not unstructured content. As the dark horse in the Identity & Permissions bucket, SailPoint occupies a more specialised position than a hyperscaler identity layer, but that specialisation is the moat: no other public-market pure-play has as deep an entitlement lifecycle model — provisioning, certification, role mining, separation-of-duties — built into a single queryable record store. The dark-horse designation reflects current revenue scale relative to the bucket leaders, not a weakness in the thesis fit; if agent adoption forces enterprises to harden and audit permission state at machine speed, SailPoint's installed base of governed entitlement records becomes the choke point through which every agent credential must pass.
A smaller, higher-uncertainty paper position testing an emerging or less-consensus expression of the bucket thesis.
The thesis properties this holding is selected to test. These labels are portfolio classifications, not standalone proof.
Typed ownership
The thesis for SailPoint breaks structurally — not merely underperforms — under three concrete conditions. First, if Microsoft Entra or a comparable hyperscaler identity suite begins bundling governed, queryable entitlement history and machine-readable permission state into standard enterprise agreements at no incremental cost, SailPoint loses the pricing power that makes its identity SoR defensible; watch for material deceleration in new-logo ARR in mid-market accounts where M365 licensing already dominates. Second, if a mature open-source identity governance platform (e.g., an enterprise-hardened Keycloak or a VC-backed fork of Midpoint) achieves feature parity on role-mining, access certification, and audit-trail APIs, gross margin compression on SailPoint's cloud SKU would signal structural erosion of the moat rather than a cyclical pricing concession. Third, SailPoint's P3 pillar — typed ownership with permissions as a first-class record — is falsified if the company fails to ship or sustain adoption of an agent-readable entitlement API (MCP-compatible or equivalent) within the thesis horizon; absence of a machine-writable permission control plane by mid-2027 would mean the substrate claim is aspirational rather than structural. A foundation model provider shipping a full identity governance layer with native SoR semantics remains low-probability but would be an immediate exit signal if accompanied by enterprise customer re-platforming evidence.
Daily closes are shown for context. Reference levels are deterministic outputs of Sorbet's published ATR method, not analyst targets or advice.
2025-07-28 → 2026-08-31
$20.56
Short-term levels use 14d ATR and the 200d average. The 3y projection compounds the current revenue-growth rate with no multiple expansion. Missing inputs stay blank.
Revenue growth + FCF yield, not the conventional FCF-margin formulation. Visible for judgment, but not wired into selection.
Price is above both the 50d and 200d averages, with the faster average leading.
| Quarter | Revenue YoY | Gross margin | FCF margin | Operating margin |
|---|---|---|---|---|
| 2026-01-31 | 21.51% | 67.29% | 19.50% | -13.61% |
| 2025-10-31 | 19.64% | 66.34% | 17.40% | -14.76% |
| 2025-07-31 | 33.32% | 67.26% | 17.38% | -15.43% |
| 2025-04-30 | 36.68% | 55.39% | — | -80.26% |
| 2025-01-31 | -69.65% | 66.54% | 4.92% | -12.58% |
| 2024-10-31 | -65.60% | 66.86% | — | -10.41% |
SailPoint's trajectory hinges on whether it can extend its identity governance model from a human-centric audit tool into a machine-identity and agent-permission substrate — the control plane that decides what any AI actor is allowed to read, write, or trigger inside an enterprise. The thesis demands that ownership be a typed field with enforced permissions (P3), and SailPoint already owns that layer for human identities; the critical execution step is applying the same policy engine, certification workflows, and queryable access history to non-human principals — service accounts, OAuth tokens, and agent personas — at the speed agents create and retire them. What remains unproven is whether SailPoint can deliver structured API and MCP-compatible surfaces that let orchestration layers read and enforce permission state in real time, rather than surfacing it only in periodic access reviews. If it closes that gap, it becomes a foundational dark-horse candidate in the identity bucket; if it moves slowly, hyperscalers and cloud-native PAM vendors with tighter API loops will absorb the agent-control-plane role before SailPoint's governance depth becomes relevant.
SailPoint (identity & permissions bucket) launching an Agentic Fabric Platform directly supports P3 (ownership) and P5 (queryable history), since identity systems are the control plane for agent permissions and auditability. This is a positive signal for the Identity & permissions SoR category.
Source: MT Newswires
Why Is SailPoint Stock Falling Tuesday?
SailPoint's Q2 guidance signals slowing growth, causing an 11% stock drop. As the portfolio's identity & permissions (Bucket 8) leader, decelerating revenue growth directly threatens the thesis that SoR incumbents compound 25-30% IRR as agent adoption accelerates — slower growth undermines the monetization narrative for the identity/permissions control plane.
Source: Benzinga
SailPoint Plans To Acquire Tel Aviv-Based Entro; Financial Terms Undisclosed
SailPoint's acquisition of Entro expands its identity security platform into non-human identity (NHI) and credentials — directly strengthening the "ownership, not implication" pillar by adding typed permission records and ownership tracking for machine identities (service accounts, API keys, secrets), which are critical control-plane infrastructure for AI agent systems. This deepens SailPoint's position as the identity SoR (Bucket 8) exactly as agent adoption accelerates.
Source: Benzinga
positive signal but thin coverage (only P3) — hold for confirmation.
Earnings in 1 day(s). Defer trim/add proposals through the print.