Saviynt

Saviynt: frequently asked questions

How much does Saviynt cost?

Saviynt publishes no list pricing. Its Pricing and Packages page at saviynt.com/pricing-packages (checked 2026-11-05; the old /pricing address now returns 404) names three tiers, Essentials, Pro and Premium, with no dollar figures, no minimums and no free trial for the core platform. It says only that pricing flexes with the number and types of identities protected, and that all Saviynt-developed connectors are included in tier pricing while partner connectors cost extra. The AWS Marketplace listing for Saviynt Identity Cloud is custom-priced and directs buyers to request a private offer. Per-seat figures circulating on procurement and comparison sites have no disclosed methodology and contradict each other, so we do not repeat them. A free trial does exist, but only for the Identity Security for AI product, not the core platform.

Is Saviynt FedRAMP authorized?

Yes at Moderate, and this is more nuanced than most reviews state. Saviynt Enterprise Identity Cloud has been FedRAMP Authorized at Moderate impact since 1 March 2019, via the agency path, with five agency reuses, currently in continuous monitoring. Separately, a package called Saviynt High Security Identity Platform has been FedRAMP In Process at High impact since 4 August 2026, still in initial implementation with zero authorizations. So Saviynt is not FedRAMP High authorized today. Note also that several Saviynt marketing pages claim the platform meets DoD Impact Level 5 requirements, which the FedRAMP Marketplace record does not support.

What certifications does Saviynt hold?

Its trust page lists ISO 27001:2022, ISO 27017:2015, SOC 1 Type II, SOC 2 Type II, FedRAMP Moderate, PCI-DSS, and Cyber Essentials plus Cyber Essentials Plus. It has also achieved an IRAP assessment at PROTECTED level for Australian government work, though the assessment date is not published. No NIST CMVP certificate for FIPS 140-2 or 140-3 could be located, and no StateRAMP listing exists.

Does Saviynt have security vulnerabilities?

Its record is unusually clean. The National Vulnerability Database contains exactly two Saviynt CVEs, both from January 2022: CVE-2022-23855 (CVSS 9.8, an authentication bypass allowing unauthenticated password reset on any local account) and CVE-2022-23856 (5.3, user enumeration). Both affect the self-managed Enterprise Identity Cloud 5.5 SP2.x line rather than the current SaaS platform. Zero CVEs were published in 2023, 2024, 2025 or 2026, and no Saviynt entry appears in the CISA KEV catalog. No breach disclosure was found.

Who owns Saviynt and how well funded is it?

Saviynt is privately held. In December 2025 it raised 700 million dollars in a Series B growth equity round led by KKR, with Sixth Street Growth, TenEleven and existing investor Carrick Capital Partners participating, at a valuation of roughly 3 billion dollars. Founder Sachin Nayyar returned as CEO in 2023. No SEC registration or IPO filing exists, and no acquisitions by or of Saviynt have been announced.

How big is Saviynt?

The company reports more than 600 global enterprise customers including over 20 percent of the Fortune 100, and states it secures more than 100 million identities. Revenue, ARR and employee counts are not disclosed in any primary source.

What does Saviynt do for AI agent identity?

More than most IGA vendors. In March 2026 it launched Identity Security for AI, a control plane for governing autonomous agents with discovery, registration and real-time monitoring, an Agent Access Gateway, and posture management for shadow AI. In June 2026 it added Intent-Aware Runtime Authorization, evaluating agent actions at runtime against identity, context, policy and intent. Named integrations span Amazon Bedrock, Microsoft Copilot Studio, Google Vertex AI, ServiceNow AI, Salesforce Agentforce, Microsoft Foundry and Snowflake Cortex.

What are the best Saviynt alternatives?

SailPoint is the closest competitor and the other half of most enterprise IGA shortlists, generally with deeper analyst recognition. One Identity suits Microsoft-heavy enterprises wanting IGA, PAM and Active Directory management from one vendor, though it is mid-spin-out. ConductorOne and Lumos are the modern cloud-first choices for faster deployment. Veza is the pick when access visibility rather than lifecycle governance is the real problem.