Saviynt hits $300m ARR and launches Zuma AI identity platform
Saviynt has announced it has surpassed $300 million in annual recurring revenue, alongside an 80% year-on-year increase in new logo bookings and a 96% customer retention rate. Alongside that financial milestone, the Los Angeles-based identity security vendor has launched Zuma, a platform purpose-built to discover, govern and protect AI agents, large language models and non-human identities operating inside enterprise environments.
The company counts Lloyds Banking Group, Maersk, AXA, Shell and Hertz among its customers. Saviynt did not disclose a valuation or indicate any associated funding round with the ARR announcement.
What Zuma does
Zuma is structured around three components. Zuma Insights provides continuous discovery of AI agents, LLMs and non-human identities across an enterprise estate, mapping what each identity can access, who owns it and where lifecycle changes have occurred. Zuma Access operates at runtime, evaluating agent intent, permissions and contextual risk in real time to prevent privilege misuse before it affects business systems. Zuma Governance establishes policy guardrails, access review workflows and audit-ready evidence trails for AI and non-human identities, including orphaned or unmanaged agents.
Sachin Nayyar, chief executive of Saviynt, said: "Enterprises are no longer securing only human users. They are now responsible for AI agents and non-human identities that can decide and access systems at machine speed."
Sarita Dsouza, IAM leader at Cytiva, a Danaher company, said AI agents and non-human identities do not fit legacy identity processes, adding that Saviynt is "bringing the right pieces together" across discovery, ownership, runtime controls and governance.
Market context
The launch addresses a governance gap that has widened rapidly as agentic AI deployments have moved from proof-of-concept into production. Traditional identity and access management tools were designed around human users authenticated through directories; they were not built to track ephemeral software agents that spin up, acquire permissions and execute actions without human initiation.
Saviynt operates in a market that includes established IAM vendors such as SailPoint, CyberArk and One Identity, as well as a growing cohort of startups positioning specifically around non-human identity and machine identity management. The competitive intensity has risen sharply over the past 12 months as enterprises contend with sprawling AI deployments that can, in some configurations, access sensitive data stores and trigger transactions without a human in the loop.
From a regulatory standpoint, the EU AI Act's high-risk system provisions, which are beginning to phase in across 2026, require documented oversight and human accountability for consequential AI actions. Organisations deploying autonomous agents in regulated sectors such as financial services, healthcare and critical infrastructure will need exactly the kind of audit trail and governance evidence that Zuma claims to provide. The UK's ICO has separately signalled that automated decision-making under UK GDPR carries accountability obligations that extend to the systems granting AI agents access to personal data.
Saviynt's 96% retention figure suggests it has held its core IAM customer base while the market transitions, but the 80% new logo growth number will be watched closely by investors and analysts to determine whether Zuma accelerates that trajectory or primarily serves existing accounts upgrading their deployments. The platform is available now, with a free trial offered directly through the company's website.