SailPoint sells identity security software to large enterprises and government organizations. The core product is Identity Security Cloud (ISC), a SaaS platform that automates governance over who has access to which systems and data — covering employee onboarding and offboarding, access certifications, compliance, and policy enforcement. Customers can extend ISC with add-on modules covering machine identities, AI agent identities, data access security, and cloud infrastructure entitlements, among others. SailPoint also maintains IdentityIQ, a legacy on-premise product for organizations with data localization requirements, though the company's strategic focus is on ISC. SailPoint's roughly 3,235 customers are predominantly large, complex enterprises, representing 53% of the Fortune 500, spanning financial services, healthcare, energy, and government. SailPoint sells primarily through a direct enterprise sales force, with over 90% of new transactions involving a partner such as Accenture, Deloitte, or KPMG. The business model is SaaS subscription, with ARR growing through new customer wins and expansion — customers typically start with a core suite and expand by adding more identity types, purchasing additional modules, or upgrading tiers. Because identity governance becomes embedded infrastructure, SailPoint benefits from strong retention. Growth is driven by new customer acquisition, upsell within the existing customer base, and international expansion, which represented 35% of revenue in FY26. An emerging tailwind is the growth of non-human identities — AI agents and machine accounts — which SailPoint addresses with dedicated products.