SailPoint
Sorbet currently classifies SailPoint as the dark_horse in its Identity & permissions bucket. The detailed selection note is not yet available.
Strengthening
Based on 5 material signals in the last 30 days: 5 positive, 0 negative.
Evidence summary, not a buy / sell rating
Latest approved decision: hold · 2026-07-17
The role and pillars explain what job this holding has inside the System-of-Record basket—not whether it suits an individual investor.
SailPoint is in the portfolio because it owns the most durable record in any enterprise: the authoritative, versioned log of who is permitted to do what, on which system, and why. That record — the entitlement graph — is precisely the permission state an agent runtime must consult before taking any real action, making SailPoint a structural substrate for the agent economy rather than a surface-layer application. It maps squarely onto P3 (ownership is a typed field with enforced permissions, not an inference from conversation) and carries meaningful weight on P1, because entitlement records are structured, durable objects with full lineage, not unstructured content. As the dark horse in the Identity & Permissions bucket, SailPoint occupies a more specialised position than a hyperscaler identity layer, but that specialisation is the moat: no other public-market pure-play has as deep an entitlement lifecycle model — provisioning, certification, role mining, separation-of-duties — built into a single queryable record store. The dark-horse designation reflects current revenue scale relative to the bucket leaders, not a weakness in the thesis fit; if agent adoption forces enterprises to harden and audit permission state at machine speed, SailPoint's installed base of governed entitlement records becomes the choke point through which every agent credential must pass.
A smaller, higher-uncertainty paper position testing an emerging or less-consensus expression of the bucket thesis.
The thesis properties this holding is selected to test. These labels are portfolio classifications, not standalone proof.
Typed ownership
The thesis for SailPoint breaks structurally — not merely underperforms — under three concrete conditions. First, if Microsoft Entra or a comparable hyperscaler identity suite begins bundling governed, queryable entitlement history and machine-readable permission state into standard enterprise agreements at no incremental cost, SailPoint loses the pricing power that makes its identity SoR defensible; watch for material deceleration in new-logo ARR in mid-market accounts where M365 licensing already dominates. Second, if a mature open-source identity governance platform (e.g., an enterprise-hardened Keycloak or a VC-backed fork of Midpoint) achieves feature parity on role-mining, access certification, and audit-trail APIs, gross margin compression on SailPoint's cloud SKU would signal structural erosion of the moat rather than a cyclical pricing concession. Third, SailPoint's P3 pillar — typed ownership with permissions as a first-class record — is falsified if the company fails to ship or sustain adoption of an agent-readable entitlement API (MCP-compatible or equivalent) within the thesis horizon; absence of a machine-writable permission control plane by mid-2027 would mean the substrate claim is aspirational rather than structural. A foundation model provider shipping a full identity governance layer with native SoR semantics remains low-probability but would be an immediate exit signal if accompanied by enterprise customer re-platforming evidence.
Daily closes are shown for context. Reference levels are deterministic outputs of Sorbet's published ATR method, not analyst targets or advice.
2025-09-29 → 2026-10-22
$20.06
Short-term levels use 14d ATR and the 200d average. The 3y projection compounds the current revenue-growth rate with no multiple expansion. Missing inputs stay blank.
Revenue growth + FCF yield, not the conventional FCF-margin formulation. Visible for judgment, but not wired into selection.
Price is above both the 50d and 200d averages, with the faster average leading.
| Quarter | Revenue YoY | Gross margin | FCF margin | Operating margin |
|---|---|---|---|---|
| 2026-01-31 | 21.51% | 67.29% | 19.50% | -13.61% |
| 2025-10-31 | 19.64% | 66.34% | 17.40% | -14.76% |
| 2025-07-31 | 33.32% | 67.26% | 17.38% | -15.43% |
| 2025-04-30 | 36.68% | 55.39% | — | -80.26% |
| 2025-01-31 | -69.65% | 66.54% | 4.92% | -12.58% |
| 2024-10-31 | -65.60% | 66.86% | — | -10.41% |
SailPoint's trajectory hinges on whether it can extend its identity governance model from a human-centric audit tool into a machine-identity and agent-permission substrate — the control plane that decides what any AI actor is allowed to read, write, or trigger inside an enterprise. The thesis demands that ownership be a typed field with enforced permissions (P3), and SailPoint already owns that layer for human identities; the critical execution step is applying the same policy engine, certification workflows, and queryable access history to non-human principals — service accounts, OAuth tokens, and agent personas — at the speed agents create and retire them. What remains unproven is whether SailPoint can deliver structured API and MCP-compatible surfaces that let orchestration layers read and enforce permission state in real time, rather than surfacing it only in periodic access reviews. If it closes that gap, it becomes a foundational dark-horse candidate in the identity bucket; if it moves slowly, hyperscalers and cloud-native PAM vendors with tighter API loops will absorb the agent-control-plane role before SailPoint's governance depth becomes relevant.
SailPoint: The Identity Layer For AI Agents
Headline explicitly frames SailPoint's identity governance as the layer for AI agents, directly supporting the thesis that identity/permission systems (bucket 8) become agent infrastructure. This aligns with P3 (ownership, not implication) as identity determines responsibility and permissions.
Source: SeekingAlpha
SailPoint Unveils AI Identity Agents, Runtime Controls at Navigate
SailPoint's AI identity agents and runtime authorization controls directly advance identity-and-permission state as the agent control plane (P3, bucket 8). The news supports the thesis that identity/permission systems become agent infrastructure, with runtime controls reinforcing typed ownership and authorization.
Source: Yahoo
SailPoint Well-Positioned for Critical Role in AI Agent Identity Security, Oppenheimer Says
The headline explicitly links SailPoint to 'AI Agent Identity Security,' which directly supports the thesis that identity & permissions systems (P3 Ownership) are becoming the agent control plane. Oppenheimer's endorsement as 'well-positioned for a critical role' reinforces the structural claim that identity SoRs are agent infrastructure.
Source: Yahoo
From Chaos to Control: SailPoint Unlocks a Secure Agentic Era with Autonomous Identity Security
SailPoint is launching autonomous identity security agents that govern and protect human, machine, and AI agent identities — directly reinforcing the thesis that identity/permissions platforms are the agent control plane (P3: Ownership, not implication). The explicit inclusion of AI agent identities in SailPoint's governance framework positions it as substrate infrastructure for agentic workflows.
Source: Yahoo
SailPoint Report Finds 79% of Enterprises Run AI Agents in Production, Yet Only 2% Have Deployed Purpose-built Security
SailPoint's report highlights that 79% of enterprises run AI agents in production but only 2% have purpose-built identity security, directly underscoring the critical need for identity and permissions infrastructure as the agent control plane — SailPoint's core offering. This validates P3 (ownership/permissions) as foundational to agent deployments, strengthening SailPoint's position as a necessary substrate for enterprise AI agent governance.
Source: Yahoo
positive signal but thin coverage (only P3) — hold for confirmation.
Earnings in 1 day(s). Defer trim/add proposals through the print.