SailPoint has announced new integrations between SailPoint Identity Security Cloud and the CrowdStrike Falcon platform, aimed at strengthening detection and response to identity-based threats. The integrations are positioned as a way to connect identity governance data with security operations workflows.
According to SailPoint, the integrations enable shared data and automated actions across identity security and SOC tooling, allowing organizations to better correlate identity risk with active threats. The integrations connect SailPoint’s identity governance capabilities with several components of the Falcon platform, including Falcon Next-Gen Identity Security, Falcon Next-Gen SIEM, and Falcon Fusion SOAR, which CrowdStrike positions as part of its Charlotte AI automation framework.
SailPoint says the integrations are designed to surface CrowdStrike identity risk insights directly within identity governance processes, supporting dynamic, risk-based access decisions. At the same time, identity data from SailPoint can be ingested into Falcon Next-Gen SIEM, where it can be correlated with endpoint, workload, and threat intelligence signals. The goal, according to the companies, is to provide security teams with clearer context around who has access to what, and how that access intersects with active attack activity.
The integrations also support automated response workflows. Using Falcon Fusion SOAR, CrowdStrike customers can trigger SailPoint remediation actions when risk thresholds are met, including disabling accounts or revoking access. SailPoint and CrowdStrike have framed this as a way to shorten response times for identity-related incidents and reduce manual intervention.
Additional detail is provided through CrowdStrike Marketplace listings. One listing describes a SailPoint Identity Security Cloud Risk Connector that uses CrowdStrike identity risk scores to inform governance actions in near real time as an identity’s risk profile changes. A separate listing outlines SOAR actions that allow Falcon Fusion workflows to automate identity administration tasks in SailPoint, including lifecycle and least-privilege management functions.
In the announcement, SailPoint EVP of Product and CTO Chandra Gnanasambandam emphasized the importance of bringing identity context into SOC workflows, while CrowdStrike’s Chris Stewart highlighted interoperability between platforms. Accenture Cybersecurity CTO Rex Thexton also commented on the growing complexity of managing identities across people, devices, and AI agents, and the need to combine digital identity data with threat intelligence.
Sources: SailPoint, CrowdStrike Marketplace
—
By the ID Tech Editorial Team
