SAIL Cybersecurity · Identity security · SaaS · AI governance · Thesis updated June 14, 2026

AI agents could extend SailPoint's identity lead

SailPoint ended Q1 FY2027 with $1.163 billion of ARR, up 26% year over year.
SaaS ARR reached $781.1 million and made up 67% of total ARR, up from 62% a year earlier.
The new SailPoint Agentic Fabric is built to govern AI agents and other non-human identities.
Non-human identities drove 40% of identity growth in Q1, giving the AI story a real usage signal.
Net retention slipped to 113% from 115%, so customer expansion is the key metric to watch.

01 Running thesis

AI identity gets real

SailPoint is a governance company. Its software decides which people, machines, and now AI agents should be allowed into a company's apps and data. That job matters more as companies let software agents take actions on their own.

The bull case got stronger in Q1 FY2027. SailPoint formally launched Agentic Fabric, and management said non-human identities drove 40% of identity growth in the quarter. Total ARR grew 26% year over year to $1.163 billion, while SaaS ARR grew 36% to $781.1 million.

The bear case is not gone. Dollar-based net retention, which measures how much existing customers spend after renewals and expansions, fell to 113% from 115% a year ago. That is still healthy, but another drop would suggest the base is expanding more slowly.

The next year is about proof. SailPoint guided to $1.369 billion of ARR for fiscal 2027, up 22% year over year. Investors need to see whether Agentic Fabric can add real ARR, not only a good story.

Jun 2026▲The Q1 10-Q confirmed the formal launch of SailPoint Agentic Fabric. It also added a clear AI usage signal, with non-human identities driving 40% of identity growth.

Jun 2026▲Q1 FY2027 results showed $1.163 billion of ARR, up 26% year over year, and SaaS ARR of $781 million, up 36%. Management raised fiscal 2027 ARR guidance to $1.369 billion.

Mar 2026→The FY2026 10-K confirmed the AI identity strategy and added a formal generative AI risk. The main thesis stayed intact.

Mar 2026→Q4 FY2026 ARR reached $1.125 billion, up 28% year over year. The initial fiscal 2027 ARR guide of 21% growth shifted attention to whether growth can stay strong at scale.

Dec 2025→The Q3 10-Q confirmed stable execution, with total ARR up 28% and SaaS ARR up 38%. SaaS reached 64% of total ARR.

Dec 2025▲SailPoint passed $1 billion of ARR in Q3 FY2026. New product orders and flex licensing gave early support to the expansion story.

Sep 2025→The Q2 10-Q matched the prior earnings view. ARR, SaaS ARR, customer growth, and net retention were consistent with the thesis.

Sep 2025▲The initial thesis was built around SailPoint's push into machine and AI identity security. Strong SaaS growth and large customer gains supported the bull case.

02 Business model

Subscriptions for access control

SailPoint makes money mainly through recurring subscriptions. Customers pay for software that tracks identities, checks access rights, and helps remove access when it should no longer exist.

The mix is moving toward cloud software. SaaS ARR was 67% of total ARR at the end of Q1 FY2027, up from 62% a year earlier. That shift can make upgrades easier and gives SailPoint a better base for selling new AI governance tools.

Large companies are the center of the model. SailPoint had 225 customers with more than $1 million of ARR in Q1 FY2027, up 32% year over year. These buyers often have messy systems, strict rules, and many types of identities to govern.

The model breaks if buyers decide a cheaper security bundle is good enough. It also breaks if the new AI products need a pricing model that makes ARR less predictable.

03 Product portfolio

One platform, more identities

Growth engine

SailPoint Identity Security Cloud

This is the main SaaS platform. It governs access for workers, contractors, apps, data, and other identities across large companies.

Option

SailPoint Agentic Fabric

This new layer is built for AI agents and other non-human identities. It finds them, governs them, and maps each one to a human owner.

Growth engine

Machine Identity Security

This product targets machine identities, such as automated processes and service accounts. Management has described machine identity as one of its fastest growing newer areas.

Steady

Lifecycle Management

This helps companies add, change, and remove access as employees join, move roles, or leave. It is a core reason customers use SailPoint.

Steady

Compliance Management

This helps companies prove that access rules are being followed. It matters most for large enterprises that face audits and strict internal controls.

Cash cow

IdentityIQ

IdentityIQ is the self-hosted product for customers that are not ready to move fully to the cloud. It keeps SailPoint in accounts where cloud migration may take time.

04 Business segments

ARR is the useful split

SaaS ARR67%growing fast

Self-hosted and other ARR33%declining

SailPoint mainly reports its business through ARR. As of April 30, 2026, SaaS ARR was 67% of total ARR, leaving about 33% in self-hosted and other recurring ARR.

05 Risk factors

What could go wrong

Net retention keeps fading

High impact · Medium odds

Net retention fell to 113% from 115% year over year. If this keeps falling, it could mean customers are buying fewer add-ons, shrinking contracts, or leaving at a higher rate. That would make 20% plus ARR growth harder to defend.

We watchDollar-based net retention in each quarter, especially whether it falls below 113%.

Agentic Fabric fails to sell

High impact · Medium odds

The AI agent story has strong early signals, but the sales motion is still new. SailPoint may need to sell to AI teams as well as security teams. If budgets, pricing, or proof of value are unclear, the product cycle could take longer than bulls expect.

We watchAny disclosed Agentic Fabric adoption, pipeline conversion, or ARR contribution.

Security bundles win enough deals

Medium impact · Medium odds

Large security vendors can bundle identity tools with broader cloud and security platforms. SailPoint argues that large enterprises need deeper governance, but some buyers may choose a simpler bundle. This risk is higher in less complex enterprise accounts.

We watchManagement comments on win rates, discounting, and losses to platform vendors.

PAM vendors move into governance

Medium impact · Medium odds

Privileged Access Management vendors are moving closer to identity governance. SailPoint says those tools were not built for broad, dynamic identity control. The risk is that customers accept a narrower tool if it is cheaper or already installed.

We watchCompetitive commentary around PAM vendors and changes in deal length or pricing.

AI outputs damage trust

Medium impact · Low odds

SailPoint has disclosed that generative AI can produce false, flawed, biased, or unethical outputs. For a security governance company, trust is central. A public product failure could hurt reputation and slow adoption of AI features.

We watchCustomer complaints, product fixes, or new risk language tied to generative AI accuracy.

06 Quick answers

In one breath

What does SailPoint actually do?

SailPoint sells identity security software. In plain terms, it helps companies decide who or what should have access to apps, data, and systems.

Why does AI matter for SailPoint?

AI agents also need access to company systems, which creates new security and accountability problems. SailPoint's Agentic Fabric is designed to find those agents, govern them, and tie each one to a human owner.

What is ARR for SailPoint?

ARR means Annual Recurring Revenue. It is the yearly value of recurring customer contracts, and it is the main way SailPoint shows the size and growth of its subscription base.

What number matters most next?

Net retention is a key watch item. If it stabilizes near 113% or improves, the growth story looks healthier. If it keeps falling, the bear case gets stronger.