SailPoint

SailPoint is the leading dedicated identity-governance vendor, and its February 2025 return to the Nasdaq under ticker SAIL — after a 2022-2025 Thoma Bravo take-private that funded a full cloud rebuild — made it the public bellwether for identity governance just as the category becomes security's center of gravity. The execution has been strong: fiscal 2026 ARR crossed $1.125B, up 28%, with SaaS ARR of $746M growing an accelerating 38% as customers migrate from the legacy on-prem IdentityIQ to the cloud Identity Security Cloud built on the Atlas platform; full-year revenue reached $1.071B, up 24%, with adjusted operating margins near 18%. The structural thesis is compelling: identity governance answers "who has access to what and should they," a question that grows exponentially harder as enterprises add cloud infrastructure, SaaS sprawl, and — the real accelerant — machine and AI-agent identities that now vastly outnumber humans and that IdentityIQ and Identity Security Cloud are being extended to govern. SailPoint's decades-long lead in IGA, its deep footprint in the most regulated enterprises (finance, government, healthcare) where audit and segregation-of-duties requirements make governance non-negotiable, and its AI-driven least-privilege recommendations give it a defensible franchise. As the identity attack surface explodes and non-human identity governance becomes a board-level mandate, the pure-play leader with a re-platformed cloud stack and $1B-plus ARR is positioned to compound.

SailPoint's stock has been punished — down roughly 34% over the six months to mid-2026 — reflecting a market unconvinced that even 28% ARR growth justifies the valuation at which Thoma Bravo re-floated it, especially against GAAP losses (a $307M fiscal 2026 operating loss, a 29% negative margin) driven by the stock-based compensation and sales spend the growth requires. The overhang is structural: Thoma Bravo retains a large controlling stake and its eventual selling pressure caps the float and the multiple, a classic sponsor-backed re-IPO dynamic. Competitively, SailPoint fights a two-front war — Okta and Microsoft Entra encroach on governance from the broader identity-platform side, bundling IGA capabilities into suites enterprises already own, while Saviynt attacks head-on with a converged IGA-plus-PAM platform and a fresh $700M war chest, arguing that governance and privileged access should not be separate products. SailPoint's legacy strength, the on-prem IdentityIQ base, is also a liability: migrating those customers to the cloud is a multi-year grind that pressures near-term revenue mix and exposes them to competitive displacement at each renewal. The fiscal 2027 guide (ARR growth decelerating toward 21%) signals the natural slowdown of a maturing franchise. A controlled-float, GAAP-lossmaking, decelerating governance specialist squeezed by platform bundlers and a converged challenger is a harder public story than the re-IPO narrative implied.