SailPoint Unveils Agentic Fabric for AI Agent Security

SailPoint has launched Agentic Fabric, a platform designed to give enterprises visibility and control over AI agents and other non‑human identities which access critical systems and data. 

The launch comes as organisations accelerate AI adoption across cloud environments and face uncertainty about what those agents can access and who is accountable for them.

The platform complements SailPoint’s Identity Security Cloud, which manages human identities, to cover every identity type from a single control plane. 

It is aimed at security, technology and procurement leaders seeking clear ownership and enforceable guardrails for autonomous agents.

Procurement teams face direct implications

Procurement teams are already using AI agents to automate purchasing workflows and process contract data. These agents interact with supplier systems and touch sensitive commercial information.

Without clear governance around what agents can do and which data they can access, organisations face compliance exposure. The risk also extends into supply chains where ungoverned agent activity can propagate quickly.

Agent ownership and permissions need to be explicit and auditable. That matters when agents can trigger purchase orders, negotiate with vendors or amend contract clauses.

SailPoint positions Agentic Fabric as a way to assign accountability, standardise policies and prove controls. The aim is to enable automation while reducing operational and third‑party risk.

Identity governance gap in AI adoption

Traditional identity security was built for people, not autonomous software. AI agents operate at machine speed, span multiple systems and often lack a clear business owner.

SailPoint says this disconnect creates an identity governance gap that many organisations are not equipped to close. Mapping who or what has access, and why, becomes harder as agent populations grow.

Matt Mills, President at SailPoint, says: “AI agents are transforming how work gets done, but they are also introducing a new class of identity risk that most organisations are not prepared for.”

“You cannot secure what you cannot see, or what you cannot tie back to accountability. Agentic Fabric gives organisations the visibility, control and context to keep autonomous agents secure, accountable and connected to a human owner.”

Core capabilities: discovery, governance, protection

Agentic Fabric is built around discovery, governance and protection. Each capability is designed to work across cloud services, applications and endpoints.

Discovery maps AI agents, machine identities and applications, then builds an identity graph that links agents to the data and systems they touch. This helps surface shadow AI and unregistered tools.

Governance ties every agent to a human owner with lifecycle controls and policy‑based access. For procurement, this means aligning permissions to approved duties under clear accountability.

Protection enforces least‑privilege access through real‑time authorisation, threat detection and automated response. The goal is to ensure agents only use the rights they need, when they need them.

Chandra Gnanasambandam, EVP of Product and CTO at SailPoint, says: “With Agentic Fabric, SailPoint is moving aggressively to secure one of the biggest emerging risks in enterprise AI: the rapid growth of AI agents and other non‑human identities. 

“As this new identity landscape takes shape, organisations need a way to govern and protect human, machine and AI identities together.”

Packages, trial and availability

SailPoint is introducing two commercial packages alongside the launch. Agentic Business provides foundational governance with least‑privilege access across all identity types.

Agentic Business Plus adds zero‑standing privilege with just‑in‑time access and stronger enforcement controls. It is aimed at more complex or higher‑risk environments.

A free Discovery Tool trial is available now to help organisations map shadow AI and unregistered applications across existing infrastructure. 

The trial is open to new customers as a standalone product and to existing users of IdentityIQ and Identity Security Cloud.

Agentic Fabric and the full agentic packages are due to be generally available in summer 2026.