Identity security: Saviynt appoints an APJ application-security lead as AI raises the stakes
Saviynt, an identity security vendor, has appointed Clinton Mottram as Head of Application Identity Security for Asia Pacific and Japan (APJ). Based in Singapore, Mottram will lead the company’s application identity security work across the region, helping customers with access governance, risk and compliance as they scale AI adoption.
The release carries no commercial terms — it is a personnel announcement, and it stands as a signal of intent rather than a result. Mottram joins from AWS, where he was an enterprise sales leader in Singapore and led SAP cloud transformation strategy across ASEAN; he previously worked at SoftwareOne and began his career at SAP, where he spent 14 years.
Why application identity security is growing
The appointment lands in a market that is expanding quickly, and the reason is AI. As enterprises deploy AI agents and other non-human identities, the question of who — or what — can access critical applications becomes harder to answer with the tools built for human users. Saviynt’s own platform for this, Zuma, discovers AI agents and non-human identities, enforces access at runtime, and governs their lifecycle; the company says it has passed $300 million in annual recurring revenue.
Independent research supports the direction. Analyses put machine identities at roughly 40 to 82 times the number of human identities in a typical enterprise, and forecast a large rise in deployed AI agents by 2028. The non-human identity security and governance market sits at about $9.85 billion in 2026, heading toward roughly $28 billion by 2031. The consolidation reflects the same premise: Palo Alto Networks bought CyberArk, Cisco bought Astrix, and Okta bought Permiso, each treating identity as a control point rather than a feature.
Saviynt’s regional pitch also leans on SAP, where it has deepened its focus as older SAP identity products sunset and enterprises migrate to S/4HANA — and where Mottram’s background, spanning SAP and SAP-on-cloud sales, is directly relevant. The appointment follows the company’s availability in the SAP Marketplace.
What to watch
For Saviynt, the test is whether the appointment converts into named APJ customers and deployments, and whether its application identity security line grows faster than the broader market. The role’s scope — application access governance across APJ — also reflects where the demand is: enterprises running large application estates, including SAP, that must prove who can reach them. For enterprises in the region, the practical questions are the same ones the market is still answering: how to give every AI agent an owner and a lifecycle, how to enforce least privilege at runtime rather than at setup, and how to keep access auditable as agents multiply. The hire does not answer them; it only signals that Saviynt intends to sell into them.
The honest summary is that this is a routine executive appointment with an unremarkable news value, made notable only by the market behind it. Application identity security is becoming a distinct discipline because AI agents are becoming a distinct class of user, and vendors are staffing up for it. Whether Saviynt’s APJ bet pays will show in its customer list, not in its org chart.
Editor’s Note: This article draws on the company’s announcement and public product material, plus independent market data on identity security and non-human identities. The appointment details are as stated by the company; no commercial terms, customer or outcome are disclosed. No interview was conducted. See the source list in the publication package.