SailPoint launches Agentic Fabric to secure AI agents

SailPoint has launched Agentic Fabric to secure AI agents and other non-human identities across corporate systems, expanding its identity security offering beyond human users.

The launch reflects growing concern among large organisations over how to monitor, govern and control software agents that can access applications, cloud environments and data stores without direct human intervention. These identities are increasing quickly as companies deploy more autonomous tools across their operations.

Agentic Fabric is designed to discover AI agents, machine identities and applications across enterprise environments, link them to human owners, and apply access controls as they operate. The system also tracks relationships between identities, data and systems, giving security teams more visibility into who or what can access critical assets.

The offering sits alongside SailPoint's Identity Security Cloud, which focuses on human identities. The new product extends the same governance model to machine-driven and application-based identities as businesses try to manage a broader mix of users and automated actors.

Many companies have long used identity tools to manage employee access to systems, but the rise of AI agents has created a different problem. These systems can act at machine speed, often across multiple platforms, and may not fit neatly into existing ownership or compliance structures.

This creates a governance gap for security teams, particularly when business units introduce autonomous agents without a clear oversight framework. SailPoint is positioning the product as a way to inventory those agents, assign accountability and maintain tighter control over access rights.

Matt Mills, President at SailPoint, described the issue as a widening security risk for businesses adopting AI.

"AI agents are transforming how work gets done, but they're also introducing a new class of identity risk that most organisations aren't prepared for," said Matt Mills, President, SailPoint.

"You cannot secure what you cannot see, or what you cannot tie back to accountability. Agentic Fabric gives organisations the visibility, control and context to keep autonomous agents secure, accountable and connected to a human owner," Mills said.

New packages

Alongside Agentic Fabric, SailPoint introduced two related product packages aimed at different levels of access control. Agentic Business is intended to provide baseline governance and least-privilege access across identities, while Agentic Business Plus adds just-in-time access and tighter enforcement based on zero-standing privilege principles.

SailPoint also made available a free trial of its Discovery Tool, which it says can identify shadow AI and applications in existing environments. The trial is open to new customers as a standalone option and to current users of IdentityIQ and Identity Security Cloud.

The launch of a dedicated discovery tool points to another market concern: some AI systems may already be operating inside organisations without formal approval or central visibility. Security leaders have warned that such unsanctioned tools can create blind spots in access management, especially if they connect to sensitive data or core applications.

Agentic Fabric combines discovery, governance, authorisation and protection in a single platform, according to SailPoint. It can enforce real-time controls, detect threats and trigger automated responses designed to preserve least-privilege access as agents act.

Broader shift

The move highlights a broader shift in identity security as vendors adapt products built for human users to a landscape increasingly shaped by software bots, machine identities and AI systems. In many enterprises, those non-human identities already outnumber employees, raising new questions about ownership, auditability and control.

For identity providers, that shift is becoming a commercial opportunity as well as a technical challenge. Companies adopting AI tools at scale are under pressure to show that autonomous systems can be governed in line with internal policy and regulatory expectations, particularly when they handle customer data, financial information or operational workflows.

Chandra Gnanasambadam, EVP of Product and Chief Technology Officer at SailPoint, said the company sees this as one of the most significant emerging risks tied to enterprise AI.

"With Agentic Fabric, SailPoint is moving aggressively to secure one of the biggest emerging risks in enterprise AI: the rapid growth of AI agents and other non-human identities," said Chandra Gnanasambadam, EVP of Product and Chief Technology Officer, SailPoint.

"As this new identity landscape takes shape, organisations need a way to govern and protect human, machine and AI identities together. Agentic Fabric is a major step forward in helping customers secure the AI era," Gnanasambadam said.