Quick Answer
SailPoint Identity Security Cloud pricing in 2026 lists at $60 to $90 per managed identity per year for ISC Core IGA, with negotiated enterprise pricing between $30 and $55 (35 to 48 percent off list). Non-Employee Risk Management lists at $25 to $40 per identity per year, Data Access Security at $20 to $35, and AI-driven Identity Threat Protection at $8 to $14. Median annual contract sits at $109,835 per Vendr (vendorbenchmark.com + Vendr, 2026).
SailPoint's most expensive line item is professional services, which routinely runs 30 to 60 percent of first-year total cost. Buyers should negotiate fixed-fee implementation.
Last verified: Sep 15, 2026.
At a glance
- ISC Core IGA list $60 to $90 per identity per year, paid $30 to $55 (35 to 48 percent off)
- Non-Employee Risk Management list $25 to $40, paid $12 to $22
- Data Access Security list $20 to $35, paid $10 to $18
- AI Identity Threat Protection list $8 to $14, paid $4 to $9
- Median contract $109,835 per year per Vendr
- Professional services 30 to 60 percent of first-year total cost
SailPoint Identity Security Cloud modules and pricing
SailPoint Identity Security Cloud is the go-forward SaaS platform and the focus of all product investment. It is delivered as a SaaS multi-tenant platform with a modular architecture: Core IGA, Non-Employee Risk Management, Data Access Security, and AI-driven identity recommendations. Each module is priced separately, and the full platform pitch combines all modules at a package price. Organizations entering ISC negotiations should request line-item pricing for each module rather than accepting blended package pricing; individual module costs reveal which components carry the margin (vendorbenchmark.com, 2026).
| Module | List price per managed identity per year | Enterprise paid price | Maximum discount |
|---|---|---|---|
| ISC Core IGA | $60 to $90 | $30 to $55 | 35 to 48 percent |
| Non-Employee Risk Management | $25 to $40 | $12 to $22 | 35 to 45 percent |
| Data Access Security | $20 to $35 | $10 to $18 | 38 to 50 percent |
| AI Identity Threat Protection | $8 to $14 | $4 to $9 | 35 to 45 percent |
Core IGA is the foundational governance module covering provisioning, access certification, access requests, separation of duties, and role management. It is the entry point for all new SailPoint deployments and the module against which Saviynt and One Identity compete most directly. At 50,000 identities, ISC Core IGA alone represents $1.5M to $2.75M annually before any add-on modules (vendorbenchmark.com, 2026).
Suite tiers and the Navigators flexible pricing model
SailPoint bundles modules into three suite tiers with progressively broader capability. Standard Suite is the entry tier, suitable for smaller estates with employee-only governance, starting at $75,000 per year. Business Suite is the mid-market tier with broader module coverage, typically $150,000 to $500,000 per year. Business Plus Suite is the enterprise tier with the full platform, commonly $500,000 to $2M+ per year (techvendorindex.com, May 2026).
SailPoint Navigators launched in December 2025 as a flexible pricing model that complements the Standard, Business, and Business Plus suites. Navigators provides access to core capabilities through three pathways: Premier Flex, Modernization Flex (for IdentityIQ customers migrating to ISC), and Adoption Flex. The model is purpose-built for organizations that want to start with focused capabilities and expand as identity security programs mature, rather than committing to a full suite upfront (SailPoint, December 2025).
IdentityIQ pricing for on-premises deployments
IdentityIQ remains the right choice for organizations that need on-premises or hybrid deployment. IdentityIQ list pricing runs $50 to $90 per managed identity per year, similar to ISC Core IGA. The platform is sold as a perpetual license plus 17 to 22 percent annual maintenance, or as a subscription with bundled support. IdentityIQ requires higher upfront investment than ISC but offers long-term cost advantages for stable identity volumes, especially with perpetual licensing (Vendr, 2026).
IdentityIQ also supports specialized modules: Privileged Access Management, AI-driven Access Intelligence, file access management, and compliance reporting. These are priced separately on top of the base platform license. Organizations with strict data residency requirements or large existing on-premises infrastructure investments typically choose IdentityIQ over ISC (Vendr, 2026).
Professional services and the total cost picture
Professional services are the largest hidden line item in SailPoint deployments. Implementation, integration, and custom workflow development typically represent 30 to 60 percent of first-year total cost, which is significantly higher than most identity platforms. Implementation costs frequently match or exceed first-year subscription, and 12 to 18 months is the typical timeline to reach mature certification cycles. Buyers should negotiate fixed-fee implementation contracts and benchmark services costs against external implementation partners (techvendorindex.com, May 2026).
The total cost picture includes more than the per-identity subscription. Identity count scope expansion is the single biggest source of year-over-year cost growth. SailPoint defines managed identities broadly: employees, contractors, temporary accounts, machine identities, and partner organization users. Governance scope typically expands 30 to 80 percent beyond the initial contract scope as programs mature, growing the per-identity count and the total annual contract. Buyers should clarify whether the initial pricing includes all identity types or only employees (vendorbenchmark.com, 2026).









