SailPoint: M&A Activity

The leadership read

SailPoint acquiring Entro Security closes a gap that has become structurally embarrassing for enterprise identity programs: most IAM platforms were architected around human users and have no native answer for the explosion of service accounts, API keys, secrets, and machine tokens that now outnumber human identities in most cloud-native environments. Absorbing Entro isn't an adjacency play, it commits SailPoint to building a unified governance layer across both identity populations, which means product, data model, and go-to-market all have to accommodate a fundamentally different object type with different lifecycle, risk surface, and remediation logic than the human-identity workflows the platform was designed around. This is one of twelve M&A signals we have tracked across enterprise software and infrastructure categories in the last 90 days. The related set is broad and thematically scattered. Figma's acquisition of a vibe-coding and agent-creation team stands as the clearest structural parallel: both deals represent incumbents buying into capability categories that emerged faster than internal R&D roadmaps could absorb. The pattern in identity security specifically has been building for longer; non-human identity (NHI) has moved from a niche secrets-management problem to a board-level exposure as agentic AI systems multiply the number of non-human actors operating with privileged access inside enterprise infrastructure. Companies consolidating human and non-human identity governance under a single platform face rising demand for product leadership at the seam between secrets management and access governance, security engineering with cloud-native and agentic-workload depth, and enterprise commercial leaders who can reframe IAM conversations with buyers who have historically separated these budgets.