SailPoint: Second Shot at IPO Success

SailPoint S1 Deep Dive

In partnership with

đź‘‹ Hi, it’s Rohit Malhotra and welcome to Partner Growth Newsletter, my weekly newsletter doing deep dives into the fastest-growing startups and S1 briefs. Subscribe to join readers who get Partner Growth delivered to their inbox every Wednesday morning.

Latest posts

If you’re new, not yet a subscriber, or just plain missed it, here are some of our recent editions.

Partners

Are oil & gas royalties right for you?

Klondike Royalties invites you to own a stake in the North Block of Alaska's Kitchen Lights Unit, with an estimated 300 million barrels of recoverable reserves. Our royalty-based model offers potential for steady returns without the complexities of direct asset ownership.

Read the Offering information carefully before investing. It contains details of the issuer’s business, risks, charges, expenses, and other information, which should be considered before investing. Obtain a Form C and Offering Memorandum at invest.klondikeroyalties.com.

Interested in sponsoring these emails? See our partnership options here.

Subscribe to the Life Self Mastery podcast, which guides you on getting funding and allowing your business to grow rocketship. 

Previous guests include Guy Kawasaki, Brad Feld, James Clear, Nick Huber, Shu Nyatta and 350+ incredible guests.

S1 Deep Dive

SailPoint in one minute

SailPoint, the identity security pioneer, is making a return to the public markets. The company originally went public in 2017 but was taken private in 2022 by private equity powerhouse Thoma Bravo. Now, with a fresh S-1 filing, SailPoint is ready for IPO round two.

Why does this matter? Identity security is one of the fastest-growing areas in enterprise cybersecurity. Today, SailPoint isn't just a governance tool—it’s evolved into a full-scale security platform that helps businesses manage access for employees, contractors, customers, and even machines. Its mission: ensure the right people and systems access the right resources at the right time.

The timing couldn’t be better. With high-profile identity breaches and increasingly hefty security budgets, CIOs and CISOs are prioritizing platforms like SailPoint. And the company’s numbers tell a compelling story:

  • Annual Recurring Revenue (ARR): $813M, up 30% year-over-year

  • Net Dollar Retention Rate: 114%, a sign of strong customer expansion

  • Customer Count: 2,895, with a growing share generating $1M+ in ARR

But can it maintain this momentum? Gross margins, at 64%, are still below SaaS peers due to the ongoing SaaS transition, and losses remain a concern. In fiscal 2024, SailPoint posted a net loss of $395M and negative free cash flow of $250M. However, much of this is tied to non-cash amortization from the Thoma Bravo acquisition.

For Thoma Bravo, this IPO is about unlocking value after a years-long SaaS transformation. For investors, the question is whether SailPoint can keep expanding its platform, maintain growth, and improve profitability in an increasingly competitive space.

To understand SailPoint’s origin story, product evolution, and what makes identity security a hot market right now, keep reading.

Introduction

In 2022, SailPoint stepped off the public stage and into the private equity portfolio of Thoma Bravo. Now, with a new S-1 filing in hand, the identity security pioneer is ready for a fresh IPO. But what exactly is SailPoint selling this time around? In short, control over digital access—the kind of control that’s increasingly vital in today’s cybersecurity landscape.

SailPoint isn’t just a tool; it’s a platform built to answer a deceptively simple question: Who gets access to what? Founded in 2005, the company began as a pioneer in identity governance, helping enterprises replace clunky manual processes with streamlined solutions. Back then, the focus was compliance—keeping auditors happy. Today, it’s evolved into something much larger: a security-first platform with a mission to protect every identity inside an organization, from employees and contractors to machines and algorithms.

At its core, SailPoint helps organizations enforce a single principle: the right access for the right person at the right time. In a world full of breaches, ransomware, and insider threats, that’s no small promise. But can SailPoint deliver on it?

Let’s look at the numbers:

  • Annual Recurring Revenue (ARR): $813 million, reflecting 30% year-over-year growth

  • Net Dollar Retention: 114%, evidence of deepening relationships with existing customers

  • Customer Base: 2,895 companies, with a 67% surge in clients paying $1 million or more annually

These are impressive metrics, the kind of data points investors love to see. Yet, like many SaaS businesses in transition, SailPoint has its challenges. Its gross margin, at 64%, lags behind software peers. The company also posted operating losses of $395 million in fiscal 2024 and negative free cash flow of $250 million. The main culprit? Massive non-cash amortization tied to the Thoma Bravo buyout, as well as debt servicing costs.

To outsiders, these losses might seem concerning. But for those familiar with private equity playbooks, it’s a familiar dance. SailPoint spent its time under Thoma Bravo’s wing finishing a transformation that began during its first public run: moving from on-premises software to a SaaS model. These shifts are painful but essential, particularly in an enterprise world increasingly dominated by cloud platforms.

But here’s where things get interesting. In the cybersecurity market, identity security isn’t just another software feature—it’s fast becoming a must-have. CIOs and CISOs, armed with growing budgets, are making identity-related solutions a top priority. For SailPoint, that’s a massive opportunity.

Of course, there’s more to this IPO than numbers. It’s about convincing investors that identity security can offer sustainable growth and, perhaps, even strategic defensibility. The question is: Can SailPoint become the Costco of enterprise cybersecurity? A business that succeeds not just on the strength of its finances, but on the value of its platform and vision?

If you believe that access management is becoming the backbone of enterprise security, then SailPoint’s second act might be worth watching.

History

If you think of SailPoint, what comes to mind? Likely, it's enterprise security and access management. But peel back the layers, and you’ll find a company with a fascinating history of innovation in identity governance—one that has grown alongside the evolution of modern IT. Founded in 2005 by identity industry veterans Mark McClain and Kevin Cunningham, SailPoint wasn’t just another security startup; it was built to solve a complex, unglamorous problem: managing digital access across sprawling enterprises.

The Problem:
Managing access rights—who can do what, where, and when—was once an afterthought for IT departments. It involved clunky, manual processes and constant audits. SailPoint’s vision was to change that by automating access governance and making it central to enterprise security. Fast forward almost 20 years, and SailPoint is now a cornerstone for organizations worldwide, providing the infrastructure to secure employees, contractors, customers, and even machine identities across hybrid environments.

Milestones Along the Way:

  • 2007: Launch of IdentityIQ, their on-premises solution, which redefined identity governance for large enterprises.

  • 2010: Integrated identity provisioning with IdentityIQ, streamlining onboarding and access management.

  • 2013: Entered the cloud race with IdentityNow, a SaaS solution designed for businesses moving to cloud-first strategies.

  • 2015: Expanded into data governance with SecurityIQ, addressing access risks around unstructured data.

  • 2017: Launched IdentityAI, a machine-learning-powered tool for detecting security threats before they become breaches.

These moves helped SailPoint stay ahead of evolving security needs, positioning it as a leader in the identity space.

By the Numbers:

  • Annual Recurring Revenue (ARR): $813 million, growing 30% YoY

  • Net Dollar Retention (NDR): 114%, demonstrating strong customer adoption of new products

  • Customer Count: 2,895 global enterprises, including 67% growth in clients generating $1M+ in ARR

  • Revenue Mix: 94% recurring, reflecting a successful shift to SaaS

But scaling hasn't been without its challenges. Gross margins are at 64%, lagging behind SaaS peers, partly due to infrastructure scaling costs. The company reported $395 million in net losses for fiscal 2024, though non-cash amortization tied to its Thoma Bravo acquisition explains much of this. Despite these losses, SailPoint's recurring revenue stream and growth trajectory are undeniably strong.


As cyber threats increase, identity management is no longer optional. CIOs and CISOs are prioritizing security solutions that prevent unauthorized access and data breaches. SailPoint’s pitch is straightforward: identity is the new perimeter. Traditional firewalls and endpoint security aren’t enough to safeguard today’s distributed, cloud-based enterprises.

SailPoint’s journey from on-prem pioneer to SaaS leader mirrors the digital transformation of its customers. With high-profile breaches regularly making headlines, the demand for secure identity governance has never been greater. Investors now have the chance to bet on whether SailPoint can continue to innovate and expand in this fast-growing market.

What’s Next?
With Thoma Bravo still in the picture, SailPoint’s strategy will be closely watched. Can it improve margins, sustain growth, and fend off competition in an increasingly crowded cybersecurity landscape? One thing is clear: for organizations navigating complex digital ecosystems, identity security is no longer a luxury—it’s mission-critical.

High debt payments

SailPoint posted a net loss of $395 million for the fiscal year ending January 31, 2024. Not exactly a confidence-inspiring headline. For the nine months ending October 31, 2024, losses clocked in at $236 million—also not pretty.

But here’s where things get interesting. Of that $395 million, a staggering $373 million came from non-cash amortization tied to the Thoma Bravo acquisition. Translation: these are accounting losses from intangible assets, not cash leaving the business. When you strip those out, the picture improves considerably, with SailPoint inching closer to breakeven on a cash flow basis.

That’s the good news. The bad news? Cash flow still tells a tough story. Free cash flow (FCF) for fiscal 2024 came in at negative $250 million, with negative $120 million for the nine-month period. The culprits? High debt payments and investments in growth initiatives.

This explains why IPO proceeds aren’t just for show. SailPoint needs the cash—not just to fund growth but to pay down its debt load. Private equity-backed businesses often carry significant leverage, and SailPoint is no exception.

The takeaway? Yes, adjusted losses look better after accounting tweaks, but the company still needs external funding to sustain itself and invest in future opportunities. For now, that means using IPO proceeds to shore up operations and chip away at debt.

Market Opportunity

According to Forrester, the global identity and access management (IAM) market stood at $8.8 billion in 2017 and is projected to reach $12.1 billion by 2020. Meanwhile, Gartner predicts that 40% of large enterprises will adopt data-centric audit and protection (DCAP) tools by 2020, a sharp increase from less than 5% today. This puts the combined opportunity in identity and data protection at around $10 billion.

It’s no wonder that identity security has become a competitive battleground, with SailPoint positioning itself as a leader. The company's platform offers more than just compliance or user provisioning—it aims to become a "metalayer" in enterprise security.

Identity security is fragmented. Legacy players and emerging startups are vying for dominance. But SailPoint’s longevity and ability to evolve give it a competitive edge. Since its early days, the company has continually expanded its platform—from IdentityIQ to IdentityNow and IdentityAI, leveraging AI and machine learning to detect threats before they become breaches.

Yet, the challenge remains: can SailPoint expand its market share while navigating rising competition, shifting regulations, and the demand for deeper integrations?

As identity security becomes a non-negotiable part of enterprise strategy, SailPoint’s ability to deliver scalable, integrated solutions will define its place in a market on the verge of rapid growth. If they succeed, SailPoint could become the defining name in securing the future of digital access.

Product

SailPoint’s platform serves as the orchestrator of identity security, offering a comprehensive approach to managing access across all types of enterprise identities—employees, contractors, machines, and more. Its mission is simple yet critical: ensuring the right people (or systems) access the right resources at the right time, while safeguarding against unauthorized access.

Core Capabilities:
SailPoint’s platform addresses identity security at multiple levels, delivering solutions tailored to modern hybrid environments.

  • Lifecycle Management: Automates access changes for employees and contractors—onboarding, offboarding, and everything in between—reducing human error and manual workload.

  • Compliance Management: Tracks and audits access to ensure alignment with policies, simplifying regulatory compliance in complex industries.

  • Privileged Access Management (PAM): Secures high-level, sensitive access, restricting it to authorized users.

  • Cloud Infrastructure Entitlement Management (CIEM): Focuses on securing access to cloud resources—essential for organizations navigating hybrid IT environments.

  • AI-Powered Analytics: Leverages machine learning to detect risky behavior and anomalies, offering predictive insights to prevent breaches.

This multi-layered approach positions SailPoint to become the system of record for enterprise identity.

Differentiation in the Market:
SailPoint operates in a fragmented identity security market. While companies like Okta emphasize access management, SailPoint provides broader capabilities, integrating governance, lifecycle, and compliance under one roof. It’s this end-to-end coverage that has attracted an expanding customer base—many of whom spend over $1 million annually on SailPoint’s services.

Other key differentiators include:

  • SaaS-Based Architecture: Designed for scalability and fast deployment, meeting the needs of enterprises across industries.

  • AI Integration: Infuses intelligence into identity decisions, helping customers proactively manage risks.

The result is a platform that evolves alongside organizational complexity, offering a security layer that scales with customer growth.

Challenges on the Horizon:
SailPoint’s broad feature set is both a strength and a challenge. Balancing innovation with usability is no small task, especially for enterprises juggling legacy systems, cloud migration, and regulatory pressures. It’s expensive to be everything to everyone, and sustaining this level of ambition while maintaining simplicity will require strategic focus.

As identity risks grow, SailPoint is positioned to capture a significant share of this expanding market. The question now is whether the company can continue scaling its Identity Graph while maintaining its leadership in this fast-evolving space.

Business Model

SailPoint operates at the intersection of identity governance and enterprise security, offering a set of integrated solutions designed to manage digital access across all types of users and resources.

Solutions Overview
SailPoint offers three core products, each tailored to different enterprise needs:

  1. IdentityIQ: An on-premises identity governance solution for large enterprises with complex IT environments.

  2. IdentityNow: A cloud-based, multi-tenant SaaS suite, designed for scalability and flexibility.

  3. SecurityIQ: An on-premises data access governance solution, securing access to data across file servers, collaboration platforms, and cloud storage.

These solutions are modular, allowing customers to customize based on their specific needs—whether it's access provisioning, compliance tracking, password management, or data governance. Pricing is tied to the number of identities governed and the modules or storage systems a customer licenses.

Go-to-Market Approach
SailPoint employs a hybrid sales strategy, blending direct sales and indirect channel partnerships to reach enterprise customers. Direct sales focus on high-value contracts with large customers, while partnerships with systems integrators (Accenture, Deloitte, PwC), resellers (like Optiv), and tech partners (e.g., Microsoft) help SailPoint expand its reach and influence purchasing decisions.

Indirect partners, such as systems integrators, play a crucial role in joint sales proposals and customer implementations. These relationships, some lasting over seven years, help SailPoint secure footholds in large, complex organizations. However, unlike Atlassian's famously "sales-free" approach, SailPoint's enterprise focus requires a human touch. Deals often involve extensive consultation, technical integration, and ongoing support.

Professional Services and Training
In addition to software, SailPoint offers professional services to optimize solution deployment and configuration. Most implementation work is handled by partners, with SailPoint’s consulting services provided on a time-and-materials basis. Training services are also available, priced per attendee or at a flat rate for e-learning courses.

Growth Strategy
SailPoint’s growth hinges on three key strategies:

  1. New Customer Acquisition: Despite already serving nearly 800 enterprises, SailPoint estimates it has penetrated only 1% of the 65,000 target companies in its current markets. The goal is to expand via greenfield opportunities and by displacing legacy solutions.

  2. Expanding Existing Accounts: Most customers start with a subset of SailPoint’s offerings. The company focuses on upselling additional modules and expanding identity coverage within these organizations to drive revenue growth.

  3. Customer Retention: With a 95%+ maintenance renewal rate for IdentityIQ, retaining customers is central to SailPoint's long-term strategy. High renewal rates translate to predictable maintenance revenue and increased cross-selling opportunities.

As organizations digitize operations, the need for identity governance has become critical. Gartner estimates that 62% of global security spend in 2016 was outside the U.S., yet SailPoint derived only 30% of its revenue internationally that year—highlighting untapped global potential. Identity and access management (IAM) software alone was an $8.8 billion market in 2017, projected to reach $12.1 billion by 2020.

Performance Metrics
SailPoint tracks several KPIs to evaluate success:

  • Customer Count: From 520 in 2015 to 776 in 2017, indicating growing market penetration.

  • Subscription Revenue: Now over 40% of total revenue, reflecting the company’s SaaS transformation.

  • Adjusted EBITDA: Used to monitor core operating performance, excluding the effects of debt and acquisition-related expenses.

SailPoint’s challenge mirrors that of many enterprise SaaS companies: balancing rapid innovation with operational complexity. While its hybrid sales model and expansive product suite offer significant growth opportunities, maintaining simplicity and usability will be critical for long-term success. SailPoint is betting that as identity risks grow, its platform will become indispensable to enterprise security strategies. Whether that bet pays off will depend on its ability to convert more companies and deepen existing customer relationships.

Management Team: 

SailPoint’s leadership team is led by Mark McClain, co-founder and CEO. McClain, who founded the company in 2005, is no stranger to the identity security world. He previously launched Waveset Technologies, one of the first identity management companies, which was later acquired by Sun Microsystems.

Cam McMartin, SailPoint’s CFO since 2011, brings financial expertise honed over a career in both venture capital and senior corporate roles. Before joining SailPoint, McMartin served as CFO of CenterPoint Ventures, a $425 million fund, and Convex Computer, where he managed large-scale operations and financial strategy.

Howard Greenfield rounds out the executive team as Chief Revenue Officer. Since joining in 2014, he has overseen worldwide sales, leveraging experience from senior roles at Zenprise (acquired by Citrix) and Mercury Interactive (acquired by HP).

Marcel Bernard has served on SailPoint’s board since 2014. A Senior Operating Partner at Thoma Bravo, Bernard has over 40 years of experience leading technology and telecom companies, including stints as President of Motorola Canada and CEO of SaskTel.

Another Thoma Bravo representative on the board is Seth Boro, a Managing Partner who has been with the firm since 2005. Boro has extensive experience guiding enterprise software investments and currently sits on the boards of companies like Dynatrace, McAfee, and SolarWinds.

William Bock, a Silicon Valley veteran, has been on SailPoint’s board since 2011. Bock previously served as President of Silicon Labs, a leader in IoT technology. His experience spans finance, operations, and venture capital, making him a key voice on matters of corporate strategy and fiscal management.

Big Paydays for SailPoint’s Executives as IPO Approaches

SailPoint’s top leadership is poised for significant financial gains as the company returns to the public markets. Equity awards tied to this next chapter have positioned the executives to benefit heavily from the company’s success.

Mark McClain (CEO) earned $23.35 million in 2024, with the lion’s share—$22.16 million—coming from equity grants. McClain, as co-founder and long-time CEO, has been instrumental in leading SailPoint through multiple transformations, from its early days to its private equity phase with Thoma Bravo.

Brian Carolan (CFO) brought in $5.95 million, with $5.19 million coming from equity. As SailPoint’s financial steward, Carolan’s equity package reflects his role in managing the company’s evolving growth strategy and financial performance.

Matt Mills (President) earned $8.80 million, with $7.76 million tied to equity awards. Mills has played a key role in scaling SailPoint’s operations and expanding its enterprise presence, making his compensation heavily dependent on the company’s ongoing success.

Competition

The identity security market is evolving rapidly, with both established giants and emerging players competing for dominance. SailPoint’s position in this ecosystem places it up against a variety of competitors, each with unique strategies and offerings. Let’s break down the competition into three main groups.

Enterprise Software Titans

Companies like IBM, Oracle, and CA Technologies have long been entrenched in enterprise IT, offering expansive software portfolios that touch on identity management. These vendors benefit from name recognition, extensive global reach, and significant financial resources. While their platforms can be comprehensive, they are often built on legacy architecture that struggles to adapt to hybrid and cloud-first environments. SailPoint’s competitive edge lies in its open, modern architecture designed for scalability and interoperability across cloud and on-prem environments.

Pure-Play Identity and Data Governance Providers

Vendors like Varonis focus narrowly on data access governance, offering specialized tools that secure unstructured data such as file servers and collaboration portals. While these solutions excel in their niche, they typically lack the breadth of SailPoint’s identity governance platform, which encompasses everything from lifecycle management to privileged access control. SailPoint’s ability to provide an integrated solution that governs both structured and unstructured data is a key differentiator.

Feature-Based Competitors

This category includes smaller vendors that address specific aspects of identity security, such as password management or compliance tracking. These companies often compete on price or simplicity but lack the full-spectrum capabilities of SailPoint’s platform. While these solutions may appeal to mid-market customers with limited needs, enterprises typically require a comprehensive offering that integrates with a broader ecosystem of IT and security applications.

Financials

SailPoint's revenue growth has remained robust, driven by a consistent increase in both new and existing customers. Revenue hit $132 million in 2016, up 39% from $95 million in 2015. The three revenue streams—licenses, subscriptions, and services—all contributed to this expansion.

  • License Revenue: Increased 23%, largely due to new customers.

  • Subscription Revenue: Jumped 65%, reflecting strong adoption of cloud-based solutions and renewals.

  • Services Revenue: Rose 35%, supported by demand for consulting and training services.

The customer base grew from 520 in 2015 to 695 by 2016, illustrating SailPoint’s ability to scale through effective partner and direct sales strategies.

Subscription-Driven Model

Subscription revenue, tied to SailPoint's cloud-based IdentityNow platform, is a critical growth lever. Subscriptions represented 37% of total revenue by 2016, compared to 32% in 2015. As more customers shift to SaaS agreements, recurring revenue will drive long-term stability and predictability.

SailPoint’s recurring revenue model stands out in a competitive market where traditional software companies still rely heavily on one-off license sales.

Gross Margins and Profitability

Gross margins remained solid at 72% in 2016, with gains across key categories:

  • License Gross Margin: Increased from 90% to 92%, driven by revenue growth without material cost increases.

  • Subscription Gross Margin: Grew from 67% to 74%, reflecting scale efficiencies in customer support and hosting infrastructure.

  • Services Gross Margin: Increased slightly to 31%, as SailPoint optimized its professional services operations.

This profitability trajectory suggests that as subscription revenue scales further, SailPoint could achieve even higher gross margins.

Operating Expenses

To sustain growth, SailPoint ramped up spending in core areas:

  • R&D Expenses: Up 22% due to headcount growth and investments in cloud-based product innovation.

  • Sales & Marketing (S&M): Increased 25%, with SailPoint building out its sales team to target new markets and industries.

  • General & Administrative (G&A): Up 30%, largely driven by professional services and corporate infrastructure costs.

SailPoint’s elevated S&M spending is a classic SaaS playbook move, supporting both customer acquisition and expansion within existing accounts.

Balancing Growth and Losses

While SailPoint reported a net loss of $3.2 million in 2016, this was a substantial improvement from the $10.8 million loss in 2015. Key drivers of this improvement include increased subscription revenue and controlled cost growth in licenses and services.

However, like many SaaS companies, stock-based compensation has contributed to GAAP losses. SailPoint’s adjusted EBITDA, a metric favored by investors, reached $15.1 million, more than double the previous year. This demonstrates healthy operational performance when stripping out non-cash expenses.

Market Expansion

SailPoint’s growth isn’t limited to the U.S. market, although the U.S. accounts for 70% of total revenue. The company has expanded aggressively in EMEA and APAC, leveraging global partnerships with system integrators. Revenue from these regions grew 24% year-over-year.

Competitively, SailPoint faces off against large players like IBM and Oracle, as well as focused identity governance providers such as Varonis. Its strategy centers on product innovation, hybrid cloud capabilities, and deep integration with other IT security applications.

Closing thoughts

SailPoint's growth story follows a familiar SaaS narrative—driven by recurring subscription revenue, aggressive market expansion, and strategic global penetration. The company's decision to focus on subscriptions, now 42% of revenue, underscores its ambition to build predictable, scalable income streams that reduce dependence on volatile license sales. This model strengthens long-term customer relationships and provides a foundation for continued expansion.

At the same time, SailPoint’s 72% gross margin highlights its ability to scale efficiently while keeping costs under control. As subscription revenue grows, so will opportunities to further improve margins through economies of scale. However, this isn’t a pure efficiency play. Like many SaaS companies, SailPoint is strategically investing in R&D and sales and marketing to secure its position in the highly competitive identity governance market. These investments fuel innovation and accelerate expansion into new industries and regions.

But it’s not all smooth sailing. The company faces the challenge of balancing growth with profitability, particularly with stock-based compensation inflating GAAP expenses. Still, adjusted EBITDA growth to $15.1 million shows that SailPoint’s core operations are on solid footing.

In today’s market, where tech giants and niche players alike are vying for dominance, SailPoint must execute flawlessly to sustain this momentum. The company is navigating an industry where incumbents like IBM and Oracle loom large, while smaller challengers push for relevance.

Ultimately, SailPoint's success will hinge on its ability to outpace both categories—innovating rapidly while maintaining strong margins. By doubling down on subscription growth, product development, and partnerships, the company positions itself to become a leader in identity governance. Like other SaaS companies capitalizing on recurring revenue, SailPoint is playing a long game, and the market will be watching closely.

Here is my interview with Yuriy Zaremba, CEO of AiSDR which creates and sends personalized sales emails at scale.

If you enjoyed our analysis, we’d very much appreciate you sharing with a friend.

Tweets of the week

Here are the options I have for us to work together. If any of them are interesting to you - hit me up!

What do you think about my bi-weekly Newsletter? Love it | Okay-ish | Stop it