SailPoint is rolling out new identity security tools powered by agentic AI. These innovations aim to help organizations manage and secure AI agents set to explode in numbers over the next couple of years.
The identity security firm, a significant player in regulated industries across ASEAN, warns that ungoverned AI agents pose serious risks.
Eric Kong, SailPoint’s managing director for ASEAN, stated, 
“AI is securing your enterprise, but who is securing the AI? It’s an emerging problem that will explode in the next two years, where the number of agents and the accesses they have are going to be ungoverned.”
SailPoint has a history of leveraging AI and machine learning since 2017. Most recently, it utilized generative AI via Amazon Bedrock to streamline entitlement descriptions during access certifications.
The latest launch, Harbor Pilot, introduces two AI agents. One agent assists with documentation through conversational prompts. The other generates workflow templates for simple tasks. Kong emphasized that these agents are not fully autonomous,
“You have full control over what workflows you build and what you deploy. It does not automatically deploy it,”
But he also noted the rapid evolution of agentic AI.
Later this year, SailPoint will release capabilities to govern AI agents beyond its own platform. Kong confirmed that AI agents will be treated like human or machine identities within enterprises.
“We’re going to be looking at providing solutions to help our enterprise customers govern, manage and secure those agents,” Kong added.
A concerning statistic emerged: while 82% of enterprises are already deploying agents, only 44% have established governance policies for them. Kong warned about the potential fallout from ungoverned agents.
“There’s a good chance that you’re going to have a lot of agents with potentially excessive privileges that nobody knows about.”
SailPoint aims to help enterprises identify these agents, understand their access privileges, and enforce governance principles like access reviews and the principle of least privilege.
As AI agents become the norm, Kong predicts that human oversight will not be sufficient.
“Being able to treat AI agents and their identities as part of the identity fabric in your organisation is going to be key.”
In ASEAN, demand for SailPoint’s offerings is robust, particularly in Singapore, Malaysia, Indonesia, Thailand, and the Philippines. The company plans to expand its sales and functional teams in the region, driven by customer demand.
