SailPoint

Mark McClain, the CEO and co-founder, has led SailPoint since its 2005 founding. McClain and co-founder Kevin Cunningham built the company to address the growing enterprise need for automated identity governance after regulations like Sarbanes-Oxley made manual access controls untenable. The founding team had deep identity-industry experience from prior roles at companies like Waveset Technologies.

SailPoint was acquired by private-equity firm Thoma Bravo in August 2022 for $6.9 billion and operates as a privately held entity. Under Thoma Bravo ownership, the firm has accelerated its transition from on-premises identity governance toward SaaS delivery via its IdentityNow platform, and is investing in AI-driven access certification and lifecycle automation. Institutional allocators encounter SailPoint as a direct portfolio company of Thoma Bravo funds, not as an independent investment manager.

Identity governance is the enterprise discipline of managing user access to applications, data, and systems — determining who can access what, under what conditions, and proving the answer to auditors. It sits at the intersection of compliance, cybersecurity, and IT operations. Unlike intrusion-detection firms that react to breaches, SailPoint's software is embedded in daily provisioning and quarterly access-review cycles, creating operational stickiness that functions as a structural moat.

SailPoint is an asset-light enterprise software company whose primary capital needs are product development and sales-and-marketing scale. It does not own hard infrastructure. The transition from perpetual-license revenue to SaaS subscription revenue, accelerated under Thoma Bravo, changes revenue recognition and multi-year cash-flow profiles in ways that matter to PE-return modeling.

SailPoint is headquartered in Austin, Texas and maintains a significant operational hub in Pune, India, which supports engineering and services delivery. The firm also has sales and support offices across multiple countries in EMEA, reflecting the global nature of enterprise regulatory compliance. Its customer base spans North America, Europe, and Asia-Pacific.

SailPoint does not compete directly on workforce single-sign-on or authentication, which is Okta's core market, nor does it primarily compete on directory services, which is Microsoft's domain. SailPoint focuses on governance — continuous access auditing, role-based provisioning, and separation-of-duties enforcement — a layer that sits above authentication and directories. The products are more complementary than directly overlapping, though competitive pressure is increasing as adjacent platforms add governance modules.

Thoma Bravo typically holds portfolio companies for three-to-five-plus years before exiting via IPO or sale. SailPoint was publicly traded from 2017 to 2022 before the take-private. A future public exit would likely depend on SaaS revenue scale, growth-rate stabilization, and market receptivity to pure-play enterprise security assets. The firm's narrow positioning is a differentiator in a public-market context where 'identity governance' is a delineated, analyst-covered subcategory.