Saviynt passes $300 million ARR and launches Zuma for AI identity security

Saviynt announced on Wednesday from Dubai that it had surpassed $300 million in annual recurring revenue and released Zuma, a platform designed to discover, govern and control AI agents, large language models, AI-based applications and non-human identities across the enterprise.

By the numbers:

●         More than $300 million in annual recurring revenue.

●         Bookings growth of more than 80%.

●         Customer retention of 96%.

Why it matters: AI agents now make decisions and reach systems at machine speed, and most enterprises cannot answer basic questions about how many they operate, who created them, or what data they touch. Identity has become the enforcement layer for AI deployment, and the vendors that own it are moving to claim the category before the security budget settles elsewhere.

What they’re saying: “AI is fundamentally changing the identity security equation,” said Sachin Nayyar, Chief Executive Officer of Saviynt. “Enterprises are no longer securing only human users. They are now responsible for AI agents and non-human identities that can decide and access systems at machine speed. Saviynt’s momentum reflects the urgency we are seeing from customers around the world, and Zuma represents a major step forward in helping them embrace AI with confidence and control.”

How it works: Zuma operates as a single control plane across three components. Zuma Insights continuously discovers AI and non-human identities and maps what they access and who owns them. Zuma Access evaluates agent intent, context, permissions and risk at runtime, restricting agents to the actions a specific task requires. Zuma Governance establishes ownership, lifecycle controls, access reviews and audit-ready evidence for unmanaged or orphaned agents.

The customer view: “Like many large enterprises, we are looking at how to safely scale AI across the business without losing visibility or control,” said Sarita Dsouza, Identity and Access Management Leader at Cytiva, a Danaher company. “The challenge is that AI agents and non-human identities don’t fit neatly into legacy identity processes. Saviynt is bringing the right pieces together- discovery, ownership, runtime controls, and governance- in a way that maps to how security teams actually need to manage this risk.”

Between the lines: Governance products have historically sold on audit readiness, and the runtime enforcement in Zuma Access points to a harder commercial claim: that identity infrastructure can prevent an agent from acting rather than only recording that it did. “Customers are telling us they need more than another dashboard,” added Nayyar. “They need a control plane that can help them see every AI and non-human identity, govern it with accountability, and protect the business in real time. That is the problem Zuma was built to solve.”

The bottom line: Enterprises have accelerated AI adoption ahead of the controls required to supervise it, and the identity security market is being rebuilt around closing that gap.