Notifications
Clear all
Topic starter
25/06/2026 1:02 am
TL;DR: Identity security is now being evaluated as a platform market spanning human IAM, NHI governance, and AI-age access control, according to Saviynt, which says it surpassed $200 million in ARR in 2024, became profitable, and was named to the Inc. 5000 list while serving more than 600 enterprise customers.
NHIMG editorial — based on content published by Saviynt: its Inc. 5000 announcement and identity security growth commentary
By the numbers:
- Saviynt says it surpassed $200 million in ARR in 2024 and achieved profitability.
- Saviynt says it serves more than 600 global enterprise customers.
Questions worth separating out
Q: How should security teams evaluate identity security platforms when NHI governance is in scope?
A: They should look for coverage across discovery, ownership, lifecycle control, access review, and remediation for both human and non-human identities.
Q: Why do NHIs change the way IAM programmes should be scoped?
A: NHIs change scope because they multiply faster than people, carry persistent privileges, and often sit outside the processes built for employee access.
Q: What should organisations measure to know if identity governance is broad enough?
A: They should measure how many privileged identities are owned, reviewed, and revoked through a single lifecycle process across humans and NHIs.
Practitioner guidance
- Map identity scope across human and non-human estates Inventory where human access, service accounts, API keys, and certificates are governed today, then identify which reviews, approvals, and offboarding steps are still handled outside your core IAM process.
- Test whether lifecycle controls span all identity classes Check whether joiner, mover, and leaver workflows cover NHIs with the same rigor as employees, including ownership, expiry, and revocation evidence for each privileged credential.
- Use vendor growth as a roadmap trigger If identity platform vendors are expanding rapidly, revisit whether your current governance model is still built around separate human and machine identity processes instead of one consolidated programme.
What's in the full analysis
Saviynt's full press release covers the business context this post intentionally leaves aside:
- The company’s own growth framing around three-year revenue performance and profitability.
- The stated customer footprint, including how Saviynt describes its enterprise reach.
- The product positioning language around AI-based identity security and cloud-native governance.
- The Inc. 5000 recognition context and why Saviynt says it matters to its market narrative.
👉 Read Saviynt’s Inc. 5000 announcement and growth context →
Saviynt’s growth signal: what it means for IAM and NHI teams?
Explore further
View Full Forum → | NHI Foundation Course → | Our Services →
25/06/2026 10:11 am
Platform growth in identity security reflects a shift from point controls to governance breadth. Saviynt’s Inc. 5000 placement is less interesting as a company milestone than as evidence that buyers are funding broader identity control surfaces. The market is rewarding platforms that can cover human IAM, NHI governance, and lifecycle processes in one operating model. Practitioners should read that as a sign that fragmented identity tooling is becoming harder to justify.
A few things that frame the scale:
- 68% of organisations do not know how to fully address NHI risks, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which shows how limited NHI oversight remains in practice.
A question worth separating out:
Q: Who should own NHI governance when identity platforms expand across teams?
A: Ownership should sit with the identity governance function, with clear input from application, infrastructure, and security teams. If no single function can prove who approves, reviews, and revokes access for each non-human identity, then accountability is already split and control gaps are likely to persist.
👉 Read our full editorial: Saviynt’s Inc. 5000 ranking reflects the identity security market
