SailPoint, Inc. (Nasdaq: SAIL), a leader in enterprise identity security, today at Fal.Con 2026 announced an expansion of its partnership with CrowdStrike, bringing SailPoint SecOps Identity Intelligence into CrowdStrike Falcon® Next-Gen SIEM to enrich investigations with identity governance and access context and accelerate threat detection and response.
Falcon Next-Gen SIEM unifies security data across the enterprise to give SOC teams the context they need to detect, investigate, and respond to threats at speed. The new integration brings SailPoint identity governance and access data into Falcon Next-Gen SIEM, enabling security teams to correlate SailPoint insights with endpoint, identity, cloud, and other security telemetry in the Falcon platform. By bringing this additional context directly into existing SOC workflows, analysts can investigate identity-related activity faster and take action without moving between disparate tools.
Chandra Gnanasambandam, EVP of Product and Chief Technology Officer at SailPoint, said:
“Identity has become a critical part of the modern attack surface, making it essential for security teams to understand who has access to what when investigating potential threats. By bringing SailPoint’s identity intelligence into CrowdStrike Falcon Next-Gen SIEM, we’re giving joint customers additional context directly within their existing security workflows, helping them investigate identity-related risk and respond faster.”
With SailPoint SecOps Identity Intelligence integrated into Falcon Next-Gen SIEM, joint customers can:
Enrich security investigations with identity context: Bring SailPoint identity governance, access, and risk data for all human and non-human identities into Falcon Next-Gen SIEM to provide analysts with additional context during investigations.
Correlate data across the security environment: Analyse SailPoint data alongside endpoint, identity, cloud, threat intelligence, and other third-party telemetry in Falcon Next-Gen SIEM.
Accelerate investigation and response: Give SOC teams identity and access context directly within Falcon workflows, reducing manual investigation and helping analysts respond faster.