The Business of Cyber Security

Operational Value Creation: SailPoint

06d describes the operating model in the abstract and 06e works the return math; 06f reads four deals at the moment of signing. This section follows one named cyber asset through a complete hold cycle — entry, the operating playbook applied, and the exit — to show where the value came from. The asset is SailPoint under Thoma Bravo, the most fully documented round-trip in cyber: take-private in 2022, re-IPO in 2025.

On April 11, 2022, Thoma Bravo agreed to take SailPoint private for ~$6.9B ($65.25/share, all cash); shareholders approved it June 30, 2022 and the deal completed in August 2022 (Thoma Bravo, SailPoint). Less than three years later, on February 12, 2025, SailPoint priced an upsized IPO at $23/share, raising ~$1.38B and re-entering the Nasdaq under SAIL at a market value of ~$12.8B (SailPoint, Bloomberg). What follows examines the ~30 months in between and which lever moved the value.

Entry

SailPoint is the leader in identity governance and administration (IGA) (Identity) — the unglamorous but non-discretionary discipline of deciding who should have access to what and proving it to auditors. By 2022 it had everything a sponsor underwrites: a defensible category position, recurring, compliance-driven demand that survives the cycle, and — critically — a half-finished business-model transition that the public market was punishing. SailPoint had begun shifting from perpetual licenses to term/SaaS subscriptions during its first public life, and that transition optically depresses revenue and margin for years before it pays off. Public investors hate that trough; a sponsor on a multi-year clock can fund straight through it (06d). That mismatch — a great asset mid-transformation, valued by a market that wanted the transformation finished yesterday — is the single most reliable take-private setup in software.

The hold

Going private bought SailPoint the one thing it lacked publicly: time and air-cover to finish the model shift. Over the hold, Thoma Bravo's operating playbook (Value Creation) showed up as four concrete moves:

  1. Complete the SaaS/cloud transition. SailPoint finished migrating its base from perpetual and on-prem toward cloud subscription, exiting the hold with ~94% of revenue recurring — the structural change that re-rates an identity vendor from "software company" to "compounding ARR machine" (Strategy of Security).
  2. Re-platform the product. In 2024 SailPoint launched the Atlas unified platform — a single data model spanning every identity, human and machine — repositioning IGA as the control plane for the non-human-identity wave (03a). Re-platforming is the move that lets a mature category leader credibly claim a growing TAM rather than a saturated one.
  3. Re-rate pricing and land-and-expand. SailPoint exited the hold with net revenue retention around 120% among enterprise accounts — the expansion motion that makes ARR compound without proportional sales spend (Economics).
  4. Professionalize for the public round-trip. Governance, reporting, and the equity story were rebuilt for a re-IPO, not a strategic sale — Thoma Bravo's signature exit when an asset is scaled enough to stand alone.

The result by IPO: ~$813M ARR growing ~30% YoY, with the recurring mix and NRR that justify a software multiple (Bank Info Security).

Where the value came from

The headline looks like a clean ~$6.9B → ~$12.8B round-trip, but that is equity value at two different points in the capital structure (take-private equity check vs. IPO-day market cap of a still-levered company), so it overstates the multiple of money. The honest read of the drivers: the value was manufactured by growth + mix-shift re-rating, not financial engineering. SailPoint didn't bolt on its way to the exit (the big bolt-on, Entro, came after the IPO — 11); it grew ARR and converted the revenue base to recurring, which is exactly the lever 06e identifies as the largest contributor to a software return. Deleveraging and multiple-timing helped, but the engine was operational.

The SailPoint round-trip — and what drove the re-rate $14B $11B $8B $5B $0 ~$6.9B Take-private equity Aug 2022 ($65.25/sh) ~$12.8B IPO market value Feb 2025 ($23/sh) ~30-month hold SaaS transition finished · Atlas re-platform ARR → ~$813M (+30%) · ~94% recurring · ~120% NRR Equity value at two capital-structure points (not a clean MoM). The driver was operational: growth + recurring-mix re-rate — not bolt-ons (Entro came post-IPO) and not financial engineering.
A take-private's value is manufactured in the middle, not at the endpoints. SailPoint's re-rate was earned by finishing the SaaS transition off the public clock and proving durable 30% ARR growth — the textbook operational value-creation case.

What the case shows

Stage What Thoma Bravo did The generalizable lesson
Entry Bought a category leader mid-transition that public markets mispriced The best take-privates are unfinished transformations, not broken companies
Hold Funded the SaaS shift, re-platformed (Atlas), drove NRR Operational value creation > financial engineering when the asset can grow
Exit Re-IPO when scaled enough to stand alone; retained a controlling majority A re-IPO is a partial exit — the sponsor keeps compounding the upside

The exit detail matters: Thoma Bravo did not sell SailPoint to a strategic; it floated a minority and retained a controlling majority (reported in the ~76–88% range across sources), monetizing some equity via the IPO while keeping the bulk of the position to compound. That is increasingly the scaled-asset exit of choice when the IPO window is open but strategic demand for a $12B+ asset is thin — and it keeps the sponsor in the chair as a continuing serial acquirer (06h).

→ Cross-references: Private Equity, Thoma Bravo, Operating Model & Mechanics, Buy-and-Build Math, Worked Case Studies, Hold Periods & Exit Timing, Identity, Value Creation Playbook, M&A Deals & Comps.

Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.