SGNL

Overview

SGNL is an enterprise authorization platform focused on continuous, context-aware access for privileged and sensitive actions. Rather than a general-purpose application authorization library, it evaluates access in real time against business context (identity, relationships, risk, and data pulled from systems of record) and supports the Continuous Access Evaluation Profile (CAEP) to revoke active sessions the moment conditions change. Founded in 2021 and privately held, it sits in the policy-management and PDP family alongside PlainID, but with a sharper focus on privileged access and continuous evaluation rather than broad app authorization.

CrowdStrike signed a definitive agreement to acquire SGNL on 8 January 2026 for approximately 740 million dollars, predominantly cash, with closing expected in CrowdStrike's fiscal 2027. SGNL is to become the continuous-authorization layer of Falcon, which pairs CAEP session revocation with endpoint risk signals but also narrows the odds of SGNL remaining an independent policy decision point. See the news item.

What it is good at

Real-time, policy-driven decisions tied to live business context are the core strength. Where most authorization is evaluated only at login or token issuance, SGNL continuously re-evaluates and can cut access mid-session through CAEP, which is valuable for high-value privileged operations and just-in-time access. It ingests data from CRM, HR, ticketing, and other systems so policies can reflect real organizational state, and governance and audit are strong for enterprises that must prove access was appropriate at the moment it was used.

Where it falls short

The focus is narrow by design. SGNL targets enterprise privileged and sensitive-action use cases, not everyday application object permissions, so it is the wrong tool if you want a simple in-app authorization library. CAEP adoption depends on downstream systems honoring revocation signals, which is still maturing across the ecosystem. As a SaaS-only platform it offers less deployment flexibility than self-hostable engines.

Pricing

Enterprise subscription, quote-based, with a sales-led evaluation and no transparent self-serve tier. Model the cost against your privileged-access footprint with the TCO calculator.

Best for, and who should look elsewhere

Choose SGNL if you are an enterprise that needs continuous, context-aware authorization and real-time revocation for privileged access. If you need general application authorization, look at Cerbos, OpenFGA, or Oso; see the authorization guide for the model landscape.

Bottom line

A strong fit for enterprises that need continuous, context-aware authorization and real-time access revocation for sensitive and privileged actions, not a general-purpose app authorization tool.