Finn
SAIL Cybersecurity · Identity security · SaaS · AI governance · Thesis updated September 20, 2026

AI adoption accelerates SaaS growth for SailPoint

01 Running thesis

AI identity gets real

SailPoint is a governance company. Its software decides which people, machines, and now AI agents should be allowed into a company's apps and data. That job matters more as companies let software agents take actions on their own.

The bull case gained momentum in Q2 FY2027. SailPoint's AI-driven ARR crossed $70 million, representing over 30% of net new ARR. Total ARR grew 25% year over year to $1.231 billion, while SaaS ARR grew 36% to $847 million. The acquisition of Entro Security deepened the company's competitive advantage in finding and governing non-human identities, and management formalized a massive $721 million cloud storage commitment, signaling extreme confidence in product scale.

The bear case requires watching. Dollar-based net retention stabilized sequentially at 113%, but that remains down from 115% a year ago. A faster shift to SaaS, which accounted for 97% of net new ARR in the quarter, creates short-term revenue recognition headwinds as term licenses run off.

The next year is about scaling the new narrative. SailPoint aims to hit $100 million in AI-driven ARR by year-end. Investors need to see whether Agentic Fabric can keep closing deals quickly without extending sales cycles.

Sep 2026▲The Q2 10-Q filing confirmed the strong momentum, detailing the $130 million Entro acquisition and a $721 million cloud storage commitment.
Sep 2026▲Q2 FY2027 results validated the AI strategy, with AI-driven ARR crossing $70 million. The acquisition of Entro Security expanded non-human discovery capabilities.
Jun 2026▲The Q1 10-Q confirmed the formal launch of SailPoint Agentic Fabric. It also added a clear AI usage signal, with non-human identities driving 40% of identity growth.
Jun 2026▲Q1 FY2027 results showed $1.163 billion of ARR, up 26% year over year, and SaaS ARR of $781 million, up 36%. Management raised fiscal 2027 ARR guidance to $1.369 billion.
Mar 2026→The FY2026 10-K confirmed the AI identity strategy and added a formal generative AI risk. The main thesis stayed intact.
Mar 2026→Q4 FY2026 ARR reached $1.125 billion, up 28% year over year. The initial fiscal 2027 ARR guide of 21% growth shifted attention to whether growth can stay strong at scale.
Dec 2025→The Q3 10-Q confirmed stable execution, with total ARR up 28% and SaaS ARR up 38%. SaaS reached 64% of total ARR.
Dec 2025▲SailPoint passed $1 billion of ARR in Q3 FY2026. New product orders and flex licensing gave early support to the expansion story.
02 Business model

Subscriptions for access control

SailPoint makes money mainly through recurring subscriptions. Customers pay for software that tracks identities, checks access rights, and helps remove access when it should no longer exist.

The mix is moving toward cloud software. SaaS ARR was 69% of total ARR at the end of Q2 FY2027. That shift makes upgrades easier and gives SailPoint a better base for selling new AI governance tools. The new $721 million cloud commitment highlights the scale of data ingestion required for these offerings.

Large companies are the center of the model. These buyers often have messy systems, strict rules, and many types of identities to govern. In Q3 2026, the company introduced flex licensing to give customers more choices in how they buy and use the platform.

The model breaks if buyers decide a cheaper security bundle is good enough. It also faces short-term bumps because moving from term licenses to SaaS reduces recognized revenue in the current period, even when the underlying contract value is strong.

03 Product portfolio

One platform, more identities

Growth engine

SailPoint Identity Security Cloud

This is the main SaaS platform. It governs access for workers, contractors, apps, data, and other identities across large companies.

Option

SailPoint Agentic Fabric

This layer is built for AI agents and other non-human identities. It finds them, governs them, and maps each one to a human owner, now supporting over 1,200 types.

Growth engine

SailPoint Agentic Acceleration

An AI tool launched to simplify and speed up deployments. It helps customers move from older on-premise setups to the cloud faster.

Steady

Lifecycle Management

This helps companies add, change, and remove access as employees join, move roles, or leave. It is a core reason customers use SailPoint.

Cash cow

IdentityIQ

IdentityIQ is the self-hosted product for customers that are not ready to move fully to the cloud. It keeps SailPoint in accounts where cloud migration may take time.

04 Business segments

ARR is the useful split

SaaS ARR69%growing fast
Self-hosted and other ARR31%declining

SailPoint mainly reports its business through ARR. As of July 31, 2026, SaaS ARR was roughly 69% of total ARR, leaving about 31% in self-hosted and other recurring ARR.

05 Risk factors

What could go wrong

Net retention fails to grow

High impact · Medium odds

Net retention stabilized at 113% sequentially but remains lower than the 115% seen a year ago. If this metric falls again, it could mean customers are buying fewer add-ons or shrinking contracts.

We watchDollar-based net retention in each quarter, especially whether it falls below 113%.

Agentic Fabric sales cycles lengthen

High impact · Medium odds

The AI agent story relies on short proof-of-concept cycles of 30 to 45 days. If those cycles take longer, expected ARR contributions could be delayed.

We watchManagement commentary on proof-of-concept timelines and pipeline conversion rates.

Security bundles win enough deals

Medium impact · Medium odds

Large security vendors can bundle identity tools with broader cloud and security platforms. SailPoint argues that large enterprises need deeper governance, but some buyers may choose a simpler bundle.

We watchManagement comments on win rates, discounting, and losses to platform vendors.

AI outputs damage trust

Medium impact · Low odds

SailPoint has disclosed that generative AI can produce false, flawed, biased, or unethical outputs. A public product failure could hurt reputation and slow adoption of AI features.

We watchCustomer complaints, product fixes, or new risk language tied to generative AI accuracy.
06 Quick answers

In one breath

What does SailPoint actually do?

SailPoint sells identity security software. In plain terms, it helps companies decide who or what should have access to apps, data, and systems.

Why does AI matter for SailPoint?

AI agents also need access to company systems, which creates new security and accountability problems. SailPoint's Agentic Fabric is designed to find those agents, govern them, and tie each one to a human owner.

What is ARR for SailPoint?

ARR means Annual Recurring Revenue. It is the yearly value of recurring customer contracts, and it is the main way SailPoint shows the size and growth of its subscription base.

07 Research standards

Sources and research notes

This page combines Finn's company research with public filings and other cited materials. The thesis is reviewed when material company information changes; Finn Scores use the latest available scoring data.

Thesis reviewed
September 20, 2026
Score data
September 27, 2026
Reviewed by
Shivam Bharuka
  1. SailPoint Q2 FY2027 earnings transcript
  2. SailPoint Q2 FY2027 Form 10-Q
08 Explore the industry

Comparable Software - Infrastructure companies

Companies near SailPoint, Inc. in Finn's Software - Infrastructure industry ranking.

Get started with Finn today