Identity became the new perimeter: how SailPoint built a company around knowing who should have access
Mark McClain and Kevin Cunningham founded SailPoint in 2005 after recognising that large organisations were accumulating too many user accounts, applications and access rights to manage manually.
The initial focus was identity governance: help enterprises understand who has access to what, why they have it and whether they should keep it.
The early business looks very different from the company visible today. Following the milestones in order shows which decisions changed SailPoint’s direction and which capabilities remained constant.
Compliance made identity governance a board-level requirement
Regulations and audit demands increased pressure on companies to prove that sensitive systems were accessible only to authorised users.
Cybersecurity markets change as applications, users and infrastructure move. The significance of this step was therefore not only the product itself, but the way it allowed the company to follow customers into a broader threat environment.
Cloud applications multiplied the number of identities to control
SailPoint expanded from on-premise enterprise directories into SaaS applications and hybrid environments.
This shift also changed how customers consumed the technology. Instead of treating software or infrastructure as a one-off purchase, the relationship became more continuous, with updates, capacity and services delivered over time.
The 2017 IPO gave SailPoint an independent public phase
The company listed on the New York Stock Exchange as identity security became a distinct cybersecurity category.
For SailPoint, access to public markets was more than a branding milestone. It increased financial transparency and created another route to fund expansion, acquisitions or long-term product development.
Thoma Bravo took SailPoint private in 2022
Private-equity firm Thoma Bravo acquired SailPoint, giving the company another ownership structure for platform investment.
The transaction mattered because it changed the shape of SailPoint rather than simply adding revenue. It brought additional technology, customers, geographic reach or operating capability into the group and influenced the next stage of its strategy.
A return to public markets began a new chapter
SailPoint later returned to public-market ownership while positioning identity security and AI-driven access management as central enterprise controls.
The AI era increased the value of capabilities SailPoint had already been developing. Compute, data, networking, software or infrastructure that once served narrower workloads became relevant to much larger AI systems.
Why every cloud account made SailPoint’s original problem harder
As of 18 September 2026, sailPoint now provides identity-security and governance software for employees, contractors, machines and other digital identities.
The distance between “Compliance made identity governance a board-level requirement” and “A return to public markets began a new chapter” captures the larger story: SailPoint kept extending the value of its original expertise into new products, markets or infrastructure.
For TechnologyBlog.co.za, this page is intended to serve as the company-history cornerstone for future SailPoint coverage, so product and company-news articles can link back to one factual brand background instead of repeating the full origin story.
Sources reviewed include SailPoint corporate history and investor materials. Official company identity cross-checked against https://www.sailpoint.com.
