Tracks who has access to what inside large companies and automatically enforces the rules.
At a glance
- Depends onDownstream position: depends on 18 industries, supplies 5
- ScaleMarket cap is above the global median
Tracks who has access to what inside large companies and automatically enforces the rules.
What this company is and how it runs — written from structure, not news.
SailPoint pulls live identity events from enterprise systems — Active Directory, SAP, AWS, Salesforce — into a continuously updated graph that tracks every user's access across an organization, and uses that graph to automate provisioning decisions and generate the SOX compliance reports that security and audit teams cannot produce by hand at scale. The graph's accuracy depends entirely on how many of a customer's applications are connected to it, and connecting each one requires custom engineering against that vendor's specific authentication protocols and data schemas, so the rate at which SailPoint can build and maintain connectors is the physical ceiling on how useful the platform can be. That connector library, accumulated over years of one-at-a-time integration work, is what a new competitor cannot simply buy its way into — every connection has to be earned separately and then kept current as vendor APIs change. The deepest single point of fragility runs in the same direction: because most connectors are built around Active Directory as the anchor identity source, a breaking change to Active Directory's API would snap those connections simultaneously and strip the graph of the data feeds that everything else is built on.
How does this company make money?
Customers pay a recurring subscription fee through SailPoint Navigators, priced by the number of identities being managed — this includes regular employees, machine accounts, and contractors. Customers also pay separately for professional services when they need SailPoint's engineers to build custom connectors or handle the initial setup of the platform.
What makes this company hard to replace?
A company's identity policies, access rules, and governance workflows become woven into SailPoint over time. Leaving means rebuilding every custom connector for every application from scratch on a new platform, retraining compliance teams on entirely new audit procedures, and re-establishing every governance policy across hundreds of connected systems — all while keeping the existing systems running.
What limits this company?
Every enterprise application speaks its own language — OAuth, SAML, SAP-specific formats, proprietary vendor schemas — and each one requires its own custom-built connector before its data can enter the graph. SailPoint can only grow as fast as its engineers can build and maintain those connectors, and any gap in the connector library creates a blind spot in every risk score and policy recommendation the platform produces.
What does this company depend on?
SailPoint cannot run without Active Directory and LDAP protocols for core enterprise identity data, AWS and Azure cloud infrastructure APIs, OAuth and SAML authentication standards, and enterprise application APIs from vendors like SAP and Salesforce. It also depends on regulatory frameworks like SOX and GDPR existing and being enforced — those rules are what make customers need the product in the first place.
Who depends on this company?
Enterprise IT departments rely on SailPoint to automatically provision and remove user access across hundreds of applications — without it, that work falls back to people doing it by hand. Compliance teams would lose the real-time identity monitoring they need to pass SOX and other regulatory audits. Security operations centers would lose visibility into who has privileged access and how identity-based attacks are moving through the company.
How does this company scale?
Once the platform is deployed, it can process more identity events and serve more users without costs growing at the same rate. What does not scale automatically is new customer onboarding — each new enterprise arrives with its own unique mix of applications, and that means custom connector work that cannot be fully automated no matter how many customers already exist.
What external forces can significantly affect this company?
GDPR and expanding data privacy regulations push companies to track and control who touches personal data, which drives demand but also raises the compliance bar SailPoint itself must meet. The broad shift to remote work has moved enterprise access management out of company offices and onto cloud applications, making identity governance harder to ignore. Ransomware attacks aimed at identity systems have pulled regulators' attention toward privileged access management, adding pressure on companies to show they have controls in place.
Where is this company structurally vulnerable?
If Active Directory — the system that anchors almost all enterprise identity data — executes a breaking change to its authentication schema or API, every connector built against the old specification fails at the same time. The data feeds that populate the graph go dark, and every risk score and compliance report built on top of that graph becomes unreliable or useless.
Price is read as structure — trend, levels, range, peak and volatility drawn on the chart. It does not predict where price goes next.
Sign in to view price data.
Sign inThe reported statements, read against the company's own industry.
4 interpretations currently present — each is a set of fired observations whose alignment reads as one structural pattern. Click an observation to see the numbers behind it.
Screen for these patternsIs this company financially stable?
Equity position looks solid, but the composition deserves a look. Equity ratio is elevated for its industry while goodwill is a large share of total assets and large relative to shareholders equity. The equity cushion sits substantially on acquisition-premium book value rather than on retained earnings or paid-in capital.
How does this company use capital?
Net profit margin is positive while depreciation is a meaningful share of operating cash flow. The composition note: a non-trivial part of the earnings-to-cash bridge is depreciation specifically.
Profit margins read positive, but the composition deserves a look. Net profit margin is positive while depreciation is large relative to operating cash flow and receivables have increased every year across the trailing four years. The composition note: reported earnings depend partly on a non-cash line (depreciation) and revenue may be sitting in a receivables line that keeps growing.
Where is this company structurally exposed?
Three price-behavior observations have aligned: the ulcer index (drawdown depth and duration composite) is elevated, current drawdown from peak is significant, and 20-week annualized volatility is in the upper portion of its mapped range.
An interpretation is present only while every observation it reads stays fired (score ≥ 70). It describes what the aligned readings show — never a verdict, never a prediction.
Shared structure with peers — never a ranking.
Structural observations derived from financial data, industry benchmarks, and supply chain position.
Companies that share the same coordination system — how they create, deliver, or capture value.
Companies that share active interpretations — structural patterns currently present in both stocks.
CompanyGraph