Matt Mills

Overview

Matt Mills is identified in the current source as president of SailPoint and an advocate for extending identity governance from human accounts to non-human identities and AI agents.

Current Profile

Mills presents enterprise security as a problem of governing access to data through people, devices, bots, and agents. His current operating position keeps every agent attached to an accountable human while moving authorization toward real-time, context-sensitive policy. He also distinguishes controlling access from guaranteeing the quality or predictability of an agent’s output.

Key Characteristics

• Frames identity as a frontline security control rather than a back-office compliance function.
• Supports accountable human ownership for discovered non-human identities.
• Favors contextual, fine-grained, real-time authorization over static permissions.
• Treats regulation, transparency, auditability, and demonstrated performance as foundations for trust.
• Acknowledges that complex probabilistic systems will still produce unintended consequences.

Evidence

• Identity and ownership - Who Is Responsible When AI Agents Make Decisions | Matt Mills x Shekhar Natarajan attributes to Mills the model of discovering machine identities and attaching them to accountable owners.
• Authorization and trust - Who Is Responsible When AI Agents Make Decisions | Matt Mills x Shekhar Natarajan attributes to Mills the move toward contextual real-time access decisions, AI-supported policy engines, transparent audit, and credibility earned through repeated performance.
• Accountability boundary - Who Is Responsible When AI Agents Make Decisions | Matt Mills x Shekhar Natarajan records his view that people authorizing or certifying agents remain punishable and responsible even when agent behavior cannot be fully predicted.

Qualifications

The wiki knows Mills through one vendor interview summarized rather than transcribed in full. His title, career history, company figures, breach estimate, customer response, product performance, and regulatory demand remain source-reported, and the episode does not independently test whether SailPoint’s controls prevent misuse or resolve legal liability.

What Changed

• Established Mills’s identity-governance position and its human-accountability boundary.

Relationships

• SailPoint - company he leads as president in the current source.
• Entro - acquired discovery capability he says SailPoint integrated.
• Shekhar Natarajan - interviewer who presses the limits of formal human responsibility.
• Agent Identity Governance - core governance frame he advances.
• Contextual Agent Authorization - access model he expects to become real time.
• Human Accountability For AI Agents - responsibility position he defends and qualifies.