C1.ai, Orchid Security, SailPoint and Saviynt

About Orchid Security

Orchid Security sells an identity-first security platform that discovers, analyzes, governs, and proves identity controls across applications. Orchid says identity now lives across IAM, applications, infrastructure, and code, and that Orchid was built to bring coherence back to that sprawl.^[2][3][4]

Orchid says it eliminates identity blind spots by uncovering unmanaged apps, hidden authentication flows, and ungoverned access. Orchid defines identity dark matter as access, credentials, and authentication logic that security tools can't see or track. Orchid says AI agents now authenticate to enterprise APIs, assume IAM roles, traverse cloud storage, and trigger production workflows, all outside the governance programs built to control exactly that kind of access.^[3][5]

On discovery, Orchid discovers SaaS, cloud, on-prem, legacy, and custom-built applications automatically. Orchid continuously inventories SaaS, legacy, home-grown, and shadow applications. Orchid discovers every app and every identity, human, machine, and agentic AI, automatically. Orchid delivers continuous, telemetry-driven visibility into identity implementations across all automatically discovered applications regardless of geography, technology stack, or existing compliance knowledge.^[3][6][7]

On analysis, Orchid's AI analyzes authentication and authorization logic inside each app, identifying weak encryption, hardcoded credentials, and missing controls, and maps posture against frameworks like NIST, ISO, SOX, and GDPR. Orchid provides a visual identity graph showing every authentication and authorization flow. Orchid maps security and compliance violations directly to the frameworks a customer chooses. Orchid's analysis is entirely autonomous, unlike traditional assessment and onboarding processes that rely on interviews, documentation, or involvement from app owners or developers.^[6][7]

On governance, Orchid integrates with IAM, PAM, and IGA systems to enforce policies, automate remediation, and maintain least-privilege access across all environments. Orchid does not replace IAM, PAM, or IGA tools, because Orchid integrates with existing IAM, PAM, and IGA tools to enhance visibility and governance. Orchid uses application-level identity context to onboard apps into IAM, IGA, and PAM. Orchid automates the collection of identity data that IAM teams spend months chasing. Orchid says application onboarding time can fall from 4 weeks to 1 week for the average application, and that professional services costs can fall from an average of $15,000 to $500 per application.^[1][3][6]

On audit, Orchid records every discovery, policy, and action so that it is auditable. Orchid creates a living identity audit trail across managed and unmanaged systems, delivering real-time evidence instead of annual reports. Orchid's framework-aligned reporting covers SOX, PCI, HIPAA, GDPR, and NIS2. Orchid Identity Audit provides continuous observability to identify Identity Dark Matter across all managed and unmanaged environments, and Orchid describes it as relevant to acquisitions, where application level identities often fall through the cracks and leave orphaned accounts tied to legacy domains that no longer exist.^[6]

Orchid says it is used by teams responsible for regulated industries under audit pressure and identity programs with persistent blind spots. HUB International states that it integrated 200+ new acquisitions in the past years, each bringing unique applications with varying levels of security and compliance. Robert Wiseman is Co-Founder of Orchid, and Tal Herman is Chief Product Officer at Orchid.^{[1][2][3][4][7][10]}

About SailPoint

SailPoint sells identity security software that discovers, governs and secures every human and non-human identity from a single platform. SailPoint says AI agents and bots form a new workforce that legacy tools cannot see. Non-human identities already outnumber the workforce they serve, and few organizations have proper controls to govern them, in SailPoint's words.^[14]

The SailPoint Platform delivers Adaptive Identity through two solutions. SailPoint Identity Security is the continuous, cloud-native solution for modern enterprises. IdentityIQ delivers deep, customizable governance for complex, hybrid, and heavily regulated environments. Atlas is the foundation that powers SailPoint Identity Security. Atlas provides common services for connectivity, data models, AI-driven analytics, and workflow automation. SailPoint says it discovers every identity, entitlement, and access path, governs by enforcing least privilege and orchestrating access policies, and protects by taking real-time action to remediate risk, revoke access, and adapt to changing behavior.^[1][15]

SailPoint Identity Security brings together SailPoint Human Fabric and SailPoint Agentic Fabric to govern human, non-employee, machine, and agent identities within one unified experience. Human Fabric and Agentic Fabric are the two products within SailPoint Identity Security. Human Fabric shifts workforce governance from scheduled audits to continuous, always-on protection. SailPoint Agentic Fabric discovers, governs, and secures non-human identities such as service accounts, machines, and AI agents. Agent Identity Security has evolved into SailPoint Agentic Fabric, which unifies AI agents, their users, and the tools they access in one governed view. SailPoint connects directly to AWS, Azure, Google Cloud Platform (GCP), Salesforce, and other systems to automatically onboard AI agents and other NHIs.^[15][16][17]

SailPoint Entro performs deep, contextual scanning across code repositories, cloud environments, CI/CD pipelines, and SaaS applications to help build a comprehensive inventory of machine identities. SailPoint announced its intent to acquire Entro to advance non-human identity security. SailPoint Entro connects non-human identities to human identities through ownership attribution and deep lineage mapping. NHIDR is a proactive defense mechanism that continuously monitors machine identity behavior. SailPoint-Entro helps IAM and AppSec teams discover, govern, and secure AI agents, non-human identities, and secrets across every environment.^[18]

SailPoint Data Access Security extends identity security and access controls to data, securing access across every identity, human or machine. Data Access Security discovers where critical information lives, classifies it, and enforces least-privilege access policies. Data Access Security adds data-centric risk insight to SailPoint access certifications, showing who accessed what data, how often, and why. SecOps Identity Intelligence delivers governance-grade identity context directly into security workflows to help teams investigate threats faster and make more informed response decisions. With Machine Identity Security, owners can be assigned directly from the discovery results, so that no account is left without accountability.^[19][20][21]

SailPoint IdentityIQ is an identity security platform custom-built for complex enterprises. Its core modules are Compliance Manager, Lifecycle Manager, Password Manager, and File Access Manager. IdentityIQ connects through SailPoint's library of standards-based connectors, using protocols such as REST, SCIM, JDBC, CSV, and LDAP. IdentityIQ applies AI and machine learning through SailPoint Predictive Identity to discover suspicious or anomalous access, maintain continuous compliance, and improve productivity. SailPoint lists 200+ connectors and integrations to help manage access to critical applications. SailPoint Identity Security Cloud is a bundle of SaaS capabilities for building an identity security program wherever a customer is in its identity journey. SailPoint Agentic Acceleration is meant to eliminate hundreds of hours of manual data collection and planning.^[15][22][23]

Lifecycle Management handles onboarding, offboarding, and changes throughout the user journey. SaaS Workflows let customers build and adapt automated tasks. SailPoint provides flexible, policy-based workflows that can distinguish between full-time employees, contractors, partners, and temporary workers. SailPoint says it manages and governs non-employee identities from onboarding to offboarding.^[14][24]

SailPoint states that 53% of the Fortune 500 and 28% of the Forbes Global 2000 are its customers. Satvinder Madhok is Vice President, Business integrated Technology Solutions at Wipro. Lachlan McGill is General Manager of Cyber Risk and Compliance at Salvation Army Australia. Mark Ward is Head of Identity & Access Management at Legal and General. Danial O'Shea is Identity & Access Management Product Owner at Specsavers. Richard Layne is Manager of Identity and Access Management at Main Line Health. Paweł Mosurek is Identity and Access Management (IAM) Manager at BNP Paribas Bank Polska.^{[15][18][22][24]}

About Saviynt

Saviynt sells an identity security platform for identity governance, privileged access and application security, including Zuma for AI agents and non-human identities. Saviynt describes Zuma as the enterprise AI identity security platform that provides the complete control plane for AI agents and non-human identities. Saviynt says it has secured over 100 million identities globally.^[5][14][18]

Saviynt asks who is responsible for AI agent identities in a business and what system manages them. Saviynt says it registers and manages AI agents, including their access privileges and risk profile. Saviynt says it finds Shadow AI and remediates it. Saviynt says it enables AI builders to implement security into agents and apps as they build. Saviynt says it evaluates intent and context for every request at runtime so that agents do not work outside their intended scope.^[1]

Zuma is organised into Zuma Insights, Zuma Access and Zuma Governance. Zuma Insights automatically discovers every AI agent, tool, MCP server and NHI across an ecosystem. Zuma Insights includes an access map that traces the path an AI agent or NHI takes to reach critical apps, data and tools. Zuma Insights includes a timeline view that keeps a record of every AI agent and NHI action and activity. Zuma for Apps is announced to govern AI agent and non-human identity access and actions in business-critical applications, evaluating delegated authority, intent, context and risk to allow, block or escalate actions.^[2][5]

Saviynt lists Identity Governance & Administration, which automates identity lifecycles and enforces least-privilege access policies across cloud and on-premises environments. Identity Security Posture Management continuously surfaces and remediates identity risks, misconfigurations and excessive access before they become threats. Application Access Governance audits and controls user access within enterprise applications to prevent toxic combinations and maintain compliance. Privileged Access Management secures, monitors and manages privileged accounts and credentials across hybrid infrastructure. External Identity Management extends governance to vendors, contractors and partners with controlled, auditable access from onboarding to offboarding.^[7][8][14]

Non-Human Identity discovers all non-human identities and enriches them with contextual insights. Saviynt says it automatically discovers all workloads, accounts and credentials across environments. Saviynt says non-human identities can be protected from Day 1 with Saviynt Identity Cloud. Just-in-Time Access secures high-risk access, eliminating standing privileges while keeping users productive. Just-in-Time Access grants time-bound, policy-driven access to risky entitlements. Saviynt says Just-in-Time Access can be activated for all connected apps within an hour. Saviynt says Application Onboarding decreases application integration and onboarding from weeks or months to hours. Saviynt says application onboarding with its Integration and Onboarding Agent eliminates the bottlenecks commonly associated with app onboarding and management. Saviynt Model Context Protocol (MCP) Server simplifies identity security through natural language interactions.^{[14][15][16][17]}

Saviynt manages vaulting, session recording and remote privileged access from a single control panel. Saviynt says it enforces ZSP across human, non-human and AI identities. Saviynt says it manages access risks across every environment, including cloud, SaaS, DevOps and infrastructure. Saviynt for AWS is described as simplifying and securing AWS access for every workload and instance. Saviynt for SAP delivers identity security and access governance for SAP and hybrid SAP environments. Saviynt for ServiceNow is described as access governance designed for the ServiceNow environment. Saviynt for Crowdstrike is described as detecting and stopping identity compromises in real time. Saviynt lists an S4 HANA connector for managing user lifecycle and governing access to business roles in SAP S4 Hana Private or on-premise systems. Saviynt says it covers 95% of enterprise apps and data sources.^{[5][7][10][11][14][18][19]}

Saviynt's Success Package gives customers direct access to a Saviynt Platform Expert. Saviynt says it has a solution for priorities such as compliance, identity lifecycle automation, privilege access or governing external identities, and commits to attain value in less than 12 weeks. Customers named on its pages include Hertz, Petco, GE Healthcare and UWA.^{[1][2][5][7][8][9][10][11][20][21]}