Ping Identity
Enterprise identity and access management vendor for large regulated companies.
On the record
Checkpoint: Thoma Bravo weighs a sale or re-IPO of Ping given rising ARR and free cash flow
The call
Ping sits on regulated enterprise IAM contracts Microsoft can't easily take, while its bet on AI-agent identity is new enough that a hyperscaler could still bundle around it.
Ping Identity is a company that helps large banks, governments, and enterprises control who can log into their systems, especially when those systems are spread across multiple cloud providers and on-premises servers. It is hard to replace because switching to a different system is expensive and risky for heavily regulated customers like financial institutions and government agencies, and Microsoft (which competes in this space) is blocked from doing what Ping does because Microsoft needs to sell its own products to those same customers. The biggest threat is that Amazon, Google, or Microsoft could bundle AI-agent identity management (tools that let artificial intelligence systems verify who they are) directly into their cloud services for free or cheap, which could undercut Ping's newest product line that launched in mid-2026.
Why
01
AI pressure: Hyperscaler-native AI-agent-identity layers (AWS Bedrock, Google Vertex, Microsoft Entra). AI agents need their own identity layer; cloud giants could bundle that free, undercutting Ping's new Runtime Identity line. Could AI do the core job? Unlikely.
02
Bigger players: Microsoft Entra ID. Entra ID ships bundled with M365 and dominates low-end workforce IAM, though it stays boxed out of Ping's regulated hybrid-cloud accounts. Could a giant copy it? Probably.
03
What protects it. Regulated enterprises with hybrid, multi-cloud setups need vendor-neutral, FedRAMP High identity infrastructure that Microsoft can't credibly sell them.
What would change this call
AWS, Google, or Microsoft ships a native bundled AI-agent-identity governance console feature. Would undercut Ping's Runtime Identity line with free hyperscaler-bundled alternative.
Thoma Bravo announces a re-IPO or strategic sale of Ping within 18 months. Growth-narrative exit; a distressed or discounted sale would signal weakness instead.
Reports of ForgeRock or Keyless customers churning or delaying renewals during migration. Would show integration strain undermining Ping's lock-in moat.
Thoma Bravo announces a re-IPO or strategic sale of Ping within 18 months. Growth-narrative exit; a distressed or discounted sale would signal weakness instead.
Reports of ForgeRock or Keyless customers churning or delaying renewals during migration. Would show integration strain undermining Ping's lock-in moat.
Key numbers
- ARR near $800M, SaaS revenue up 31% YoY
- Gartner Access Management Leader for 9 straight years
- Keyless zero-knowledge biometrics deal closed
Named risks
- Hyperscaler-native AI-agent-identity layer could undercut Ping's new Runtime Identity product.
- Thoma Bravo exit timing uncertain, could be growth IPO or distress sale.
- ForgeRock and Keyless integration execution risk if customer migrations lag.
- Key ARR and growth figures are sponsor-reported, not independently audited.
- Industry standardization efforts like DNSid could commoditize AI-agent identifiers.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Microsoft Entra ID | contesting | Bundled with M365, dominant in low-end workforce IAM but structurally conflicted for regulated hybrid identity, ongoing 2026 |
| Okta | contesting | Competes head-on for enterprise IAM deals with no neutrality barrier, ongoing 2026 |
| SailPoint | contesting | Also Thoma Bravo-owned, overlapping identity governance market, per 2025-2026 sourcing |
| CyberArk | contesting | Overlaps in privileged and machine identity, JIT privileged access launched Aug 2025 by Ping |
| Hyperscaler-native agent identity (AWS/Google/Microsoft) | gaining on | Vint Cerf-backed DNSid project working to commoditize AI-agent identifiers as of July 2026 |
Questions people ask
- Is Ping Identity profitable?
- Ping is private under Thoma Bravo since October 18, 2022 and reports ARR rather than GAAP profit. Thoma Bravo stated on June 5, 2025 that the combined Ping plus ForgeRock entity is quickly approaching $1B in ARR and generates significant free cash flow.
- Who owns Ping Identity?
- Thoma Bravo, a private equity firm, completed an all-cash take-private acquisition of Ping Identity on October 18, 2022 for about $2.8B at $28.50 per share, delisting it from NYSE where it traded as PING.
- Could AI replace Ping Identity?
- Unlikely for its core business. Deep multi-protocol federation, FedRAMP High certification and enterprise lock-in resist commoditization, and Ping itself is monetizing AI by treating AI agents as billable identities, GA'ing Identity for AI on March 24, 2026.
- Is Microsoft Ping Identity's biggest competitor?
- Microsoft Entra ID, bundled with M365, dominates low-end workforce IAM but is structurally conflicted for neutral, regulated hybrid identity where Ping is strong. Okta competes more directly with Ping in enterprise deals with no such neutrality barrier.
- Will Ping Identity go public again?
- No confirmed plans as of mid-2026. Thoma Bravo's June 5, 2025 commentary drew a parallel to its SailPoint re-IPO, but nothing has been officially announced for Ping, which remains privately held.
- What is Ping Identity's ARR?
- Ping announced it was approaching $800M ARR with 31% YoY SaaS growth as of September 30, 2024. Thoma Bravo said on June 5, 2025 the combined Ping plus ForgeRock entity is quickly approaching $1B ARR with positive free cash flow.
Timeline
- 2026-06-16Extended Runtime Identity for AI agents across AWS, Google Cloud and Cloudflare
- 2026-05-27Launched headless AI identity control plane with MCP, CLI and API access
- 2026-03-24GA of Identity for AI, treating AI agents as first-class enterprise identities
- 2026-01-07Completed acquisition of Keyless for zero-knowledge biometric authentication
- 2026-01-01Appointed Adnan Chaudhry as Chief Revenue Officer for the AI era
- 2025-11-18Named Leader in Gartner Magic Quadrant for Access Management, 9th straight year
- 2025-09-17Launched AI-Driven Trust Framework for governing AI agents
- 2024-11-14Announced approaching $800M ARR with 31% YoY SaaS growth
- 2023-08-23Thoma Bravo completed ForgeRock acquisition, merged it into Ping
- 2022-10-18Thoma Bravo completed $2.8B take-private acquisition of Ping
Revision history
24 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Thoma Bravo Completes Acquisition of Ping Identity (2022-10-18)
- Thoma Bravo Completes Acquisition of ForgeRock; Combines ForgeRock into Ping Identity (2023-08-23)
- Ping Identity Marks Digital Trust Milestone with Zero-Knowledge Biometrics in the Age of AI (2026-01-07)
- Ping Identity Surpasses 30% Annual Growth in SaaS Revenue and Approaches 800M ARR (2024-11-14)
- How Ping Identity Mastered Identity Security for Global Enterprises (2025-06-05)
- Ping Identity Recognized as a Leader in 2025 Gartner Magic Quadrant for Access Management (2025-11-18)
- Ping Identity Holding Number of Employees 2026 (2026-06-29)
- Ping Identity - Headcount, Funding & Open Jobs (2026-07-08)
- Ping Identity CEO: The behind-the-scenes story of 100-day ForgeRock whirlwind merger (2024-05-03)
- Ping Identity Shapes the Future of Enterprise Security With AI-Driven Trust Framework (2025-09-17)
- Ping Identity Press Releases (2026-06-15)
- Ping Identity Defines the Runtime Identity Standard for Autonomous AI (2026-03-24)