SailPoint’s 2025 Horizons of Identity Report reveals identity security is the highest-ROI security investment

Rhea-AI Summary

SailPoint (NASDAQ: SAIL) has released its Horizons of Identity Security 2025-2026 report, revealing that identity security delivers the highest ROI among security investments. The report highlights that 63% of organizations remain at basic identity security levels, while companies with AI-enabled identity security are 4x more likely to deploy advanced capabilities.

Key findings show that organizations implementing advanced identity security achieve up to 10x ROI multiples, outperforming endpoint, network, and compliance tools. Companies with mature identity security programs are adopting AI-enabled controls at 4x the rate of peers and are 4-8x more likely to deploy automated identity data synchronization.

Positive

• None.

Negative

• 63% of organizations remain stuck at basic identity security levels (Horizons 1-2)
• Only 10% of organizations have reached advanced maturity stages (Horizons 4-5)
• Some companies moved backwards in maturity levels due to rising complexity requirements
• Deployment complexity and poor data management continue to slow organizational progress

Insights

Technology Research Analyst

SailPoint's report positions identity security as highest-ROI security investment, with AI-enabled solutions showing 4x better outcomes despite 63% of organizations lagging behind.

SailPoint's latest research reveals a significant maturity gap in identity security adoption, with only 10% of organizations reaching advanced implementation stages while 63% remain at basic levels. This divide is creating a competitive advantage for leaders who are integrating AI into their identity security framework.

The report's most compelling finding is that organizations leveraging AI-enabled identity security are four times more likely to deploy advanced capabilities that deliver measurable benefits across cost reduction, productivity gains, and risk mitigation. This creates a virtuous cycle where early adopters continue to pull ahead of competitors still struggling with manual processes.

SailPoint's data indicates identity security delivers twice the return of other security domains, with mature implementations reporting ROI multiples of up to 10x. The report highlights how identity has evolved from a back-office function to a strategic enabler that fuels business agility and growth—particularly important as organizations navigate AI adoption.

The report identifies specific implementation best practices driving success: thorough data cleanup before migration (increasing scaling success by 1.6x), standardized application onboarding, and unified identity data management. These foundational elements enable more sophisticated capabilities like Identity Threat Detection and Response (ITDR) and adaptive authentication.

With customer examples from Wipro and Specsavers demonstrating tangible benefits, this research strengthens SailPoint's market position as a forward-thinking leader in a category now recognized as delivering superior security investment returns. The timing is particularly strategic as organizations struggle to secure increasingly complex environments with human, machine, and now AI agent identities.

New report shows how AI adoption and advanced identity practices separate leaders from laggards

Headline findings:

• Identity maturity gap widens – 63% remain stuck at basic levels as advanced programs surge ahead.
• AI adoption multiplies success – Organizations with AI-enabled identity security are 4x more likely to deploy advanced capabilities unlocking greater cost savings, productivity and risk reduction
• Deployment best practices overcome barriers – Organizations that prioritize data cleanup before migration and adopt stage-appropriate practices like automated app onboarding are significantly more likely to advance.
• Identity + data + security trifecta – Enterprises that unify identity as the control point, strengthen data practices, and advance security controls achieve higher ROI and greater AI readiness.

AUSTIN, Texas, Sept. 03, 2025 (GLOBE NEWSWIRE) -- SailPoint, Inc. (Nasdaq: SAIL), a leader in identity security, today released its Horizons of Identity Security 2025-2026 report, which reveals how identity security has become mission-critical for the modern enterprise. Once a back-office control, identity has now transformed into a strategic platform that fuels agility, efficiency, and AI enablement – all grounded in security – helping enterprises unlock new avenues for growth.

“As organizations navigate a rapidly changing landscape, the report indicates that identity has become the top ROI generator in the security stack—helping enterprises cut costs, reduce risk, and accelerate growth,” said Matt Mills, President, SailPoint. “Today, identity is the central control point where policies are enforced, critical decisions are made, and security operations converge. Its future is tightly connected to security and AI-driven data governance, enabling enterprises to manage every identity—human, machine or AI agent—across the enterprise. With advances in AI, data management, and threat detection, modern identity security now delivers the unified visibility, expanded governance, and automated resilience organizations need.”

Mills added, “Those advancing further across the Horizons are recognizing identity’s strategic role and reaping outsized benefits—positioning identity security as a key enabler of business performance.”

Charting the Horizons of Identity: Four years of insights

Across four years of Horizons research, several themes stand out. The bar for maturity keeps rising—progressing from manual IAM to automation, then to machine identity management, and now to AI agent lifecycle governance and adaptive trust. Identity types have expanded as well, from primarily human users and contractors in 2022, to machine identities in 2024, and today’s surge of AI agents. ROI leadership is also clear: according to our data, IAM consistently delivers twice the return of other security domains, and organizations treating identity as a strategic priority are 40% more likely to maximize that return.

Yet the execution challenges persist, with deployment complexity and poor data slowing some organizations. Even so, the overall trajectory is unmistakable: Identity has evolved from a back-office control to a catalyst for growth. Organizations that advance their maturity are better equipped to stay secure and realize greater success.

From foundational control to strategic enabler

This year’s report shows most organizations are still early in their identity journey. Nearly two-thirds (63%) remain stuck in Horizons 1-2, relying heavily on manual processes. Only a small group have advanced into higher maturity stages, with just 10% reaching Horizons 4-5, where identity transforms into a growth platform.

For the first time, we also saw some companies move backwards. The bar for maturity has risen: Today it requires capabilities like AI agent security, stronger use of identity data models, and just-in-time access controls. As the landscape grows more complex organizations must advance simply to hold their ground.

What sets these leaders apart is the way they are embracing advanced capabilities. According to the report, mature organizations are adopting AI-enabled identity controls at four times the rate of peers, using tools such as identity threat detection and response (ITDR), adaptive authentication, and governance for AI agents and bots. They are also 4-8 times more likely to deploy automated identity data synchronization, unifying fragmented identity data, and lifecycle workflows, enabling measurable productivity gains across the enterprise.

For companies making the leap, the path forward is clear—and customer stories bring it to life. Wipro is evolving beyond enterprise-wide adoption to advanced automation and AI-driven capabilities, using identity as a foundation to transform. Specsavers has automated large volumes of manual tasks, strengthening its security posture while improving operational efficiency and enforcing least-privilege access. Other organizations show that by tackling deployment best practices first, they scale faster and unlock measurable productivity gains across the enterprise.

Reaching advanced identity security (i.e., moving from Horizon 3 to 4) requires more than basic automation. The organizations that succeed focus on data cleanup before migration, making them 1.6 times more likely to scale effectively. They also standardize app onboarding, apply automated lifecycle workflows, strengthen identity data synchronization and unify fragmented identity data. These deployment best practices clear the path for advanced capabilities like ITDR, adaptive authentication and AI-agent governance.

The payoff for those that advance to more mature Horizons is undeniable—and perhaps the starkest divide is strategic focus. According to the report, identity delivers the highest ROI of any security investment, consistently outpacing endpoint, network, and compliance tools. Enterprises that treat identity as a strategic enabler report typical ROI multiples of up to 10x–reducing risk, driving revenue, and enabling AI safely.

“We are firmly focused on taking Wipro beyond enterprise-wide adoption of effective identity capabilities to advanced capabilities using automation and AI,” said Satvinder Madhok, Vice President, Business Integrated Technology Solutions, Wipro.

To explore the full findings and see where your organization stands, download the Horizons of Identity Security 2025–2026 report: www.sailpoint.com/horizons

About the report and methodology
The Horizons of Identity Security 2025-2026 report is based on a June 2025 survey of 375 IAM decision-makers across Americas, Europe, and Asia. Respondents included senior leaders in IT, cybersecurity, and risk. More than half are employed at organizations of 10,000+ employees, and the majority are from the finance, technology and healthcare sectors. Using their responses, SailPoint grouped organizations into five horizons of identity maturity based on strategy, technology, operating model, and talent. Horizons 4 and 5 were updated this year with new capability thresholds – including AI agent lifecycle governance and multi-cloud entitlement management – reflecting the fast-rising bar for maturity in today’s landscape.

Unless otherwise indicated, all data points in this press release relate to the findings of this survey.

About SailPoint
At SailPoint, we believe enterprise security must start with identity at the foundation. Today’s enterprise runs on a diverse workforce of not just human but also digital identities—and securing them all is critical. Through the lens of identity, SailPoint empowers organizations to seamlessly manage and secure access to applications and data at speed and scale. Our unified, intelligent, and extensible platform delivers identity-first security, helping enterprises defend against dynamic threats while driving productivity and transformation. Trusted by many of the world’s most complex organizations, SailPoint secures the modern enterprise.

Media relations for SailPoint
Samantha Person
Senior Manager, PR & Corporate Communications
512-923-4053
Samantha.Person@sailpoint.com

FAQ

What are the key findings of SailPoint's 2025 Horizons of Identity Report?

The report reveals that identity security delivers the highest ROI among security investments, with 63% of organizations still at basic levels, while companies with AI-enabled identity security are 4x more likely to deploy advanced capabilities.

How does AI adoption impact identity security success according to SailPoint's report?

Organizations with AI-enabled identity security are 4x more likely to deploy advanced capabilities and 4-8x more likely to implement automated identity data synchronization, leading to greater cost savings and productivity.

What ROI can companies expect from identity security investments according to SailPoint?

Companies that treat identity as a strategic enabler report ROI multiples of up to 10x, consistently outperforming endpoint, network, and compliance tools in terms of return on investment.

What percentage of organizations have reached advanced identity security maturity according to SailPoint?

Only 10% of organizations have reached advanced maturity stages (Horizons 4-5), while 63% remain at basic levels (Horizons 1-2).

What are the best practices for successful identity security deployment according to SailPoint?

Organizations should prioritize data cleanup before migration, standardize app onboarding, apply automated lifecycle workflows, strengthen identity data synchronization, and unify fragmented identity data.