SailPoint has announced a wave of updates to its identity security platform, adding AI agent discovery, automated threat response, and compliance tools. The company says the changes are designed for a reality in which AI agents operate at machine speed and human review of every action is no longer feasible. According to SailPoint's Horizons of Identity Security report, 79% of enterprises already run AI agents in production, but only 2% have deployed identity security tools built specifically to govern them.
The centerpiece is a new fleet of "Autonomous Agents" that monitor runtime actions, intercept threats, and adjust permissions to enforce zero standing privilege. Unlike generic tools that simply shut down agents when anomalies appear, these agents use identity context to tell legitimate intent from malicious activity, stopping threats while keeping productive agents running. SailPoint also introduced Autonomous Identity Security Posture Management (A-ISPM), which detects dormant accounts, orphaned access, shadow admins, and privileged outliers, then closes the loop with one-click fixes or fully automated policy enforcement.
Other updates include Just-in-Time provisioning to replace permanent access keys with temporary permissions, new discovery sensors for endpoints, browsers, SIEM and XDR telemetry, and vault and pipeline non-human identity discovery. Data Access Security adds classification integrations with Microsoft Purview and BigID, plus new connectors for Atlassian Confluence, Google BigQuery, and AWS Redshift. A new Agent Audit feature turns agent inventory and governance activity into framework-aligned evidence reports for auditors.
SailPoint is also expanding its global footprint with a new data center in South Korea and preparing for FedRAMP High, PCI DSS 4.0, and EU Sovereign Cloud compliance. The company frames the shift as moving beyond Zero Trust to "Autonomous Identity," arguing that standing privilege is dead in a world where autonomous agents can make thousands of tool calls per second. The source is a single vendor announcement, so the claims reflect SailPoint's own positioning rather than independent analysis.