CISO Tribune

Vendor comparison · 2 companies

Onyx Security vs SailPoint

Onyx Security sells a secure control plane for AI agents and models. SailPoint sells identity security software that discovers, governs and secures every human and non-human identity from a single platform. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Onyx Security
  • SailPoint
Onyx Security vs SailPoint: Products, Customers and Funding Compared
Onyx SecurityOnyx Security sells a secure control plane for AI agents and models.onyx.securitySailPointSailPoint sells identity security software that discovers, governs and secures every human and non-human identity from a single platform.sailpoint.com
What it sells
  • AI Security[1][7]Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane.
  • MCP Gateway[8]The MCP Gateway governs the agent-to-tool surface.
  • SailPoint Identity Security[15][16][23]Continuous, cloud-native identity security solution for modern enterprises.
  • SailPoint Human Fabric[10]Shifts workforce governance from scheduled audits to continuous, always-on protection.
  • SailPoint Agentic Fabric[12][15][17]Discovers, governs, and secures non-human identities such as service accounts, machines, and AI agents.
  • IdentityIQ[10][15][22]Customizable governance for complex, hybrid, and heavily regulated environments.
  • Data Access Security[19]Extends identity security and access controls to data.
  • SecOps Identity Intelligence[20]Delivers governance-grade identity context into security workflows.
Categories
Headquarters
Not stated on its pagesAustin, United States[3]
Founded
Not stated on its pages2005[4]
Ownership and funding
Not stated on its pagesPublic (NASDAQ: SAIL)[2][11][13][28]
Named customers
Not stated on its pages
Recent news
  • July 29, 2026Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.[15]
  • March 12, 2026Onyx Security officially launched operations after securing $40 million in initial funding.[14]
  • October 6, 2026At its Navigate 2026 conference, SailPoint released IdentityIQ 9.0 for on-premises customers and added enterprise-scale features to SailPoint Human Fabric.[10]
  • August 4, 2026SailPoint unveiled its Identity Security solution, combining Agentic Fabric, now generally available, with Human Fabric, the evolution of Identity Security Cloud.[25]
  • June 29, 2026SailPoint completed its acquisition of Entro Security, a Tel Aviv company focused on non-human identity and credentials security.[11]
  • June 15, 2026SailPoint announced its intent to acquire Tel Aviv-based Entro, a company focused on non-human identity and credentials security.[26]
  • May 11, 2026SailPoint launched SailPoint Agentic Fabric, a product for securing AI agents and other non-human identities at enterprise scale.[12]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 4, 2026[28]
Who it fits
From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. Onyx Security describes a single platform for security, governance, and infrastructure teams. Onyx Security offers cloud, hybrid, or self-hosted options for organisations with sensitive data residency requirements. Onyx Security presents one console for AI agents and models across SaaS, cloud, endpoint, and code environments. Onyx Security names security, finance, and platform teams as the teams that share its usage, cost, and policy ledger.From its own pages, SailPoint sells mainly to enterprises. It names modern enterprises as the setting for SailPoint Identity Security, and complex, hybrid, and heavily regulated environments as the setting for IdentityIQ. Its pages say customers include Fortune 500 and Forbes Global 2000 companies. IdentityIQ covers access for employees, partners, contractors, and non-human identities such as bots. SailPoint-Entro is aimed at IAM and AppSec teams, and its pages speak to financial data and sensitive patient data.
Last verified
October 19, 2026September 27, 2026

Where they overlap

  • Onyx Security and SailPoint are both filed under Non-human identity security.

Where they differ, field by field

  • Onyx Security's primary category is AI model and agent security; SailPoint's is Identity governance and administration.
  • Onyx Security is also filed under AI governance and Workforce AI usage security.
  • Onyx Security lists AI Security and MCP Gateway. SailPoint lists SailPoint Identity Security, SailPoint Human Fabric, SailPoint Agentic Fabric, IdentityIQ, Data Access Security and 1 more.
  • SailPoint is headquartered in Austin, United States.
  • SailPoint was founded in 2005.
  • SailPoint is a public company listed on NASDAQ as SAIL.
  • SailPoint publicly names Best Buy, PACCAR, The AES Corporation, Salling Group and Temple Health.

What it sells: Onyx Security

What AI Security does[1][7]
Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx offers five enforcement actions: alert, block, mask, steer, or ask.
What MCP Gateway does[8]
The MCP Gateway governs the agent-to-tool surface. Every tool call an agent makes to an MCP server gets inspected and policy-enforced. MCP Gateway coverage spans the MCP ecosystem, including servers using dynamic client registration and popular servers like GitHub.

What it sells: SailPoint

What SailPoint Identity Security does[15][16][23]
SailPoint Identity Security is the continuous, cloud-native solution within the SailPoint Platform. Human Fabric and Agentic Fabric are its two products. Atlas is the foundation that powers it.
What SailPoint Human Fabric does[10]
SailPoint Human Fabric is one of the two products within SailPoint Identity Security. It shifts workforce governance from scheduled audits to continuous, always-on protection.
What SailPoint Agentic Fabric does[12][15][17]
SailPoint Agentic Fabric is one of the two products within SailPoint Identity Security. It discovers, governs, and secures non-human identities such as service accounts, machines, and AI agents. Agent Identity Security has evolved into SailPoint Agentic Fabric.
What IdentityIQ does[10][15][22]
SailPoint IdentityIQ is an identity security platform built for complex enterprises. Its core modules are Compliance Manager, Lifecycle Manager, Password Manager, and File Access Manager. It connects through standards-based connectors.
What Data Access Security does[19]
SailPoint Data Access Security extends identity security and access controls to data, securing access across every identity, human or machine. It discovers where critical information lives, classifies it, and enforces least-privilege access policies.
What SecOps Identity Intelligence does[20]
SecOps Identity Intelligence delivers governance-grade identity context directly into security workflows. It is meant to help teams investigate threats faster and make more informed response decisions.

Questions about Onyx Security and SailPoint

What do Onyx Security and SailPoint sell?
Onyx Security sells AI Security and MCP Gateway. SailPoint sells SailPoint Identity Security, SailPoint Human Fabric, SailPoint Agentic Fabric, IdentityIQ, Data Access Security and 1 more.
Are Onyx Security and SailPoint in the same category?
They share Non-human identity security. Onyx Security's primary category is AI model and agent security and SailPoint's is Identity governance and administration.
Where are Onyx Security and SailPoint headquartered?
SailPoint is headquartered in Austin, United States.
When were Onyx Security and SailPoint founded?
SailPoint was founded in 2005.
Who owns Onyx Security and SailPoint?
SailPoint is a public company listed on NASDAQ as SAIL.
Which customers do Onyx Security and SailPoint name?
SailPoint publicly names Best Buy, PACCAR, The AES Corporation, Salling Group and Temple Health.
Who are Onyx Security and SailPoint sold to?
From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. From its own pages, SailPoint sells mainly to enterprises.
What have Onyx Security and SailPoint announced recently?
July 29, 2026: Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners. October 6, 2026: At its Navigate 2026 conference, SailPoint released IdentityIQ 9.0 for on-premises customers and added enterprise-scale features to SailPoint Human Fabric.

About Onyx Security

Onyx Security sells a secure control plane for AI agents and models. Onyx gives security, governance, and AI teams control to protect, optimize, and measure AI agent adoption across the enterprise. Onyx was founded around a single goal: to control the most advanced forms of AI. Onyx describes its secure AI control plane as a single platform that serves security, governance, and infrastructure teams as they oversee how AI agents are used, ensure they are secure and compliant, and measure their effectiveness.[1][2]

Onyx says enterprises were deploying autonomous agents faster than they could see, govern, or control them. Onyx offers one console for every AI agent and model across SaaS, cloud, endpoint, and code. Onyx discovers sanctioned and shadow AI across the enterprise, with visibility into every prompt, response, and agent action. Onyx identifies every agent, MCP server, AI tool, copilot, and embedded AI surface continuously, across SaaS, cloud, endpoints, and code. Onyx combines directory scanning, native platform APIs, and behavioral signature learning for browser-based AI to keep the inventory current. Onyx records every prompt, model response, and tool call by name, argument, and result, with the reasoning context preserved across turns. Onyx correlates agent activity to the invoking user and the agent owner, and captures the identity used on each tool and MCP call. Onyx forwards alerts and their session records to Splunk and CrowdStrike NG-SIEM.[1][2][4][5][8]

Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx applies five enforcement actions: alert, block, mask, steer, or ask (human in-the-loop). Onyx evaluates every agent on deployment and continuously across its lifecycle. Onyx red teaming continuously attacks deployed agents, generating attack plans across reconnaissance, jailbreaking, and weaponization. Onyx identifies supply chain risks in agents, MCP servers, models, and AI assets.[4][6]

Onyx gives an agent its own identity, separate from the invoker, when multiple users delegate to the same agent across tools. Onyx lets teams sanction approved tools and control MCP server access. Onyx offers pre-populated policy templates aligned to industry regulations. Onyx helps teams meet security standards from MITRE, NIST, OWASP, and more.[4][7]

Onyx centralizes all AI traffic on a fully-managed, OSS AI gateway. Onyx routes across popular LLMs to automate failover, minimize latency, and balance load by task complexity and cost constraints. Onyx proxies all MCP traffic with an inline gateway, logs every request and response, and enforces guardrails. Onyx evaluates every tool call an agent makes to an MCP server against scope, identity, data class, and policy before the call lands.[4][8]

Onyx lets teams define AI adoption targets by department, use case, or tool category. Onyx shows total AI spend, avoidable costs, and optimization opportunities. Onyx correlates AI usage, cost, risk, and outcomes to the same activity record. The Onyx AI Gateway captures per-request cost metadata at runtime: cost, tokens, model, and identity context. The Onyx Guardian Agent is a supervisory AI that continuously works across the platform to identify risks and remediate issues.[2][4][9]

Onyx offers cloud, hybrid, or self-hosted options for sensitive data residency requirements. Onyx supports deployment with AWS VPC, Bedrock Gateway, and custom proxy configurations. Onyx offers 100+ pre-built integrations that connect to agent platforms, frontier model providers, SIEM, and cloud platforms. Onyx pulls identity context from Okta and Microsoft Entra, and endpoint management context from Intune, Jamf, and Tanium. Onyx integrates with Claude Enterprise through the Compliance API, pulling conversation content, uploaded files, project data, and activity logs into the Onyx control plane. Onyx integrates with the OpenAI Compliance API, ingesting ChatGPT Enterprise workspace activity. Onyx integrates with Amazon Bedrock Agents through Bedrock Agent configuration APIs, agent invocation logs delivered to S3, and CloudTrail data events. Onyx integrates with Microsoft Copilot Studio through the Microsoft Graph API. Onyx Security is SOC 2 Type II and ISO 27001 certified.[1][4][6][7][8][10][11][12][13]

Onyx Security on the record

Sources

Onyx Security full record

  1. [1]onyx.securityOnyx Security · onyx.security · undated page, accessed October 19, 2026 · Tier A
  2. [2]The Secure AI Control Plane for the Agentic Era | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]About Onyx | The Team Behind the AI Control PlaneOnyx Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]One Platform to Discover and Control Every AI Agent | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Observability – Discover Every Agent & Session | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Block Prompt Injection in Real TimeOnyx Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Governance Platform Built for the EU AI Act | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Orchestration – Governed Routing & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI ROI Platform – Prove Value & Control Costs | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Secure Claude Enterprise with Onyx | Anthropic IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure ChatGPT Enterprise with Onyx | OpenAI IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Amazon Bedrock Agents | Onyx IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Copilot Studio Security – Discover, Govern & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Israeli cyber firm Onyx Security launches operations with $40 million funding round | ReutersReuters · published March 12, 2026 · Tier B
  15. [15]Onyx Security Raises $113M Series B to Control Advanced AI, Quadrupling Revenue since Stealth Launch Four Months AgoBusiness Wire · published July 29, 2026 · Tier A

SailPoint full record

  1. [1]sailpoint.comSailPoint · sailpoint.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Sailpoint announces pricing of upsized initial public offeringSailPoint · sailpoint.com · published February 13, 2025 · Tier A
  3. [3]Sailpoint announces expiration of go shop periodSailPoint · sailpoint.com · published May 17, 2022 · Tier A
  4. [4]D885522ds1SailPoint, Inc. via SEC EDGAR · sec.gov · undated page, accessed January 21, 2025 · Tier A
  5. [5]Best buySailPoint · sailpoint.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]PaccarSailPoint · sailpoint.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]sailpoint.comSailPoint · sailpoint.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]Salling groupSailPoint · sailpoint.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]Temple healthSailPoint · sailpoint.com · undated page, accessed October 10, 2026 · Tier A
  10. [10]Sailpoint announces modernization capabilities for both cloud and on premises identity securitySailPoint · sailpoint.com · published October 6, 2026 · Tier A
  11. [11]Sailpoint closes entro security acquisitionSailPoint · sailpoint.com · published June 29, 2026 · Tier A
  12. [12]Sailpoint launches agentic fabricSailPoint · sailpoint.com · published May 11, 2026 · Tier A
  13. [13]SailPoint Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 28, 2026 · Tier C
  14. [14]The new era of adaptive identity - For humans, machines, AISailPoint · undated page, accessed November 4, 2026 · Tier A
  15. [15]Adaptive identity security for a dynamic world | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  16. [16]Security for non-human identities - Solutions | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  17. [17]Agent Identity Security: Take control of AI agents | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  18. [18]Secure Agentic AI | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  19. [19]Data Access Security - Products | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  20. [20]SecOps Identity Intelligence | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  21. [21]Assign and manage machine identity owners - Use case | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  22. [22]IdentityIQ: Comprehensive identity security | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  23. [23]Identity Cloud: Migrate to Cloud - Solutions | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  24. [24]Identity workflows: Automate and optimize | SailPointSailPoint · undated page, accessed November 4, 2026 · Tier A
  25. [25]SailPoint eliminates blind spots with unified protection across human, non-human, and AI agent identitiesSailPoint · published August 4, 2026 · Tier A
  26. [26]SailPoint Announces Intent to Acquire Entro to Accelerate and Enhance Agentic Fabric and Secure the Future of AI-Driven EnterprisesSailPoint · published June 15, 2026 · Tier A
  27. [27]SailPoint redefines identity security with new adaptive identity innovationsSailPoint · published March 9, 2026 · Tier A
  28. [28]SailPoint Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed November 4, 2026 · Tier C

Spot a factual error? Request a correction.