SailPoint: New AI Security Platform Secures Procurement Risk

SailPoint has launched Agentic Fabric, a platform designed to give enterprises visibility and control over AI agents and other non-human identities accessing critical systems and data. The announcement comes as businesses accelerate AI deployment across cloud environments and face growing uncertainty about what those agents can access and who is accountable for them.

For procurement teams, the implications are direct. AI agents are increasingly being used to automate purchasing workflows, interact with supplier systems and process contract data. Without clear governance over what those agents can do and what data they can access, organisations face compliance exposure and potential supply chain risk.

The governance gap

Traditional identity security tools were built for human users. AI agents operate differently: they act at machine speed, can span multiple systems simultaneously and often lack a clear owner within the business. SailPoint says this creates a governance gap that most organisations are not yet equipped to close.

"AI agents are transforming how work gets done, but they're also introducing a new class of identity risk that most organisations aren't prepared for," says Matt Mills, President at SailPoint.

"You cannot secure what you cannot see, or what you cannot tie back to accountability. Agentic Fabric gives organisations the visibility, control and context to keep autonomous agents secure, accountable and connected to a human owner."

Agentic Fabric works alongside SailPoint's existing Identity Security Cloud, which manages human identities. Together, the two products are intended to cover every identity type across an enterprise from a single platform.

What the platform does

The solution is built around three core functions.

The first is discovery. Agentic Fabric maps all AI agents, machine identities and applications across cloud environments and endpoints, building out what SailPoint calls an identity graph that links agents to the data and systems they interact with.

The second is governance. Each agent is mapped to a human owner, with lifecycle controls and access policies applied accordingly. This is significant for procurement, where agents may be authorised to trigger purchase orders, communicate with vendors or access sensitive commercial agreements.

The third is protection. Real-time authorisation controls, threat detection, and automated response capabilities are designed to enforce least-privilege access, restricting agents to only what they need, when they need it.

"With Agentic Fabric, SailPoint is moving aggressively to secure one of the biggest emerging risks in enterprise AI: the rapid growth of AI agents and other non-human identities," says Chandra Gnanasambandam, EVP of Product and Chief Technology Officer at SailPoint.

"As this new identity landscape takes shape, organisations need a way to govern and protect human, machine and AI identities together. Agentic Fabric is a major step forward in helping customers secure the AI era."

Packages and availability

SailPoint is introducing two commercial packages alongside the launch. Agentic Business provides foundational governance with least-privilege access across all identity types. Agentic Business Plus adds zero-standing privilege with just-in-time access and stronger enforcement controls, suited to organisations with more complex or higher-risk environments.

A free Discovery Tool trial is also available immediately, allowing organisations to map shadow AI and unregistered applications running across their existing infrastructure. The trial is open to new customers as a standalone product and to existing users of IdentityIQ and Identity Security Cloud.

Agentic Fabric and the full agentic packages are due to be generally available this summer.