Okta has agreed to acquire Permiso Security, an AI-focused identity security startup, in a deal valued at just under $200 million, according to a person familiar with the transaction. The acquisition underscores the growing importance of securing AI agents, machine identities, and cloud workloads as enterprises accelerate their adoption of autonomous software.

The identity management company announced Thursday that it is acquiring Permiso, but did not disclose the financial terms of the deal. A source familiar with the matter said the acquisition is valued at just under $200 million and is structured as an almost all-cash deal. When Okta CEO Todd McKinnon was asked about the report, a spokesperson for the company did not dispute the figure, though Okta declined to comment on specific deal terms. Okta said the transaction is expected to close in the third quarter of its fiscal 2027, subject to customary closing conditions.

Why Okta is buying Permiso

The acquisition is part of a broader shift in the identity and access management market. For years, identity security has revolved around verifying a user's identity at the point of login. But now security teams are increasingly focused on what happens after access is granted. They want to continuously monitor users, applications, and AI agents for suspicious behavior, especially as workloads move into cloud environments and AI tools gain access to sensitive data and critical systems.

Permiso is a player in this emerging category of identity threat detection and response, or ITDR. The startup develops software that helps security teams spot malicious activity in cloud environments after users or applications have already been authenticated. Rather than only blocking unauthorized access, Permiso's platform analyzes signals across cloud infrastructure to identify attackers who use compromised identities to move laterally through an organization's systems.

Okta's chief product officer, Ely Kahn, emphasized that the acquisition would strengthen the company's broader identity security fabric. In a prepared statement, Kahn said Permiso will extend Okta's identity security fabric with proven identity threat detection and response capabilities, as well as an "incredible threat research and security team" that will advance Okta's threat detection and prevention capabilities.

Permiso's technology and products

Permiso emerged from stealth in 2022 with a focus on detecting attacks that rely on stolen or compromised identities. The company was co-founded by Paul Nguyen and Jason Martin, both former executives at FireEye, the well-known cybersecurity firm that specialized in incident response and threat intelligence.

The startup's core platform is designed to detect irregular activity in cloud environments, such as unusual API calls, abnormal access patterns, or suspicious use of credentials. It is particularly focused on detecting identity-based attacks, where an adversary gains access using a legitimate user's credentials and then moves through cloud infrastructure without triggering traditional security alarms.

In April, Permiso introduced SandyClaw, a new platform designed to analyze AI agent skills in a sandboxed environment. The goal is to identify malicious behaviors before AI agents are deployed in production. As AI agents become more common, they are being given access to corporate applications, data stores, and even infrastructure, creating a new attack surface that many security teams are not fully prepared to protect.

A growing market for AI and machine identity security

The deal comes as cybersecurity vendors race to secure machine identities, a category that includes APIs, service accounts, IoT devices, and AI agents. Machine identities are growing at an explosive rate, and they often have broad permissions within cloud environments. This makes them an attractive target for attackers.

Okta's move to acquire Permiso signals that the company wants to expand beyond its traditional identity and access management business into this fast-growing area. The company has been building what it calls an identity security fabric, and integrating ITDR capabilities is a natural next step.

The acquisition could also help Okta differentiate itself in an increasingly crowded identity market. Large technology companies, including Microsoft and CrowdStrike, have made their own investments in identity security. Startups like Zscaler and others are also building ITDR tools. By acquiring Permiso, Okta gains not only a product but also a team with deep expertise in threat research and incident response.

Funding and valuation history

Permiso has raised roughly $29 million in total funding to date. The most significant round was an $18.5 million Series A round completed in April 2024, led by Altimeter Capital. According to people familiar with the financing, that Series A round valued the Palo Alto-based startup at approximately $80 million on a post-money basis.

The acquisition price of nearly $200 million would represent a significant return for Permiso's early investors, more than doubling the company's last reported private valuation. It also demonstrates the premium that large identity platforms are willing to pay for security technology that addresses the growing AI agent market.

What this means for customers

For Okta's customers, the acquisition could lead to new capabilities for detecting threats across the entire identity lifecycle. Instead of just managing access, Okta will be able to provide security teams with visibility into what is happening after a user, application, or AI agent authenticates. This could help organizations respond faster to credential theft, insider threats, and compromised machine identities.

For Permiso's customers, the deal could bring additional resources and scale. Okta has one of the largest identity networks in the world, with thousands of enterprise customers. Permiso's technology could be integrated into Okta's existing products, while also being made available to Okta's customer base.

Executive backgrounds and company history

Paul Nguyen and Jason Martin have deep roots in cybersecurity. Both spent years at FireEye, a company known for its threat intelligence and incident response work. Their experience has been critical in shaping Permiso's approach to identity-based attacks.

Since emerging from stealth, Permiso has focused on developing capabilities that go beyond traditional endpoint security. The company's platform is built to work across cloud environments, including Amazon Web Services, Microsoft Azure, and Google Cloud. It collects and correlates data from multiple sources, including identity provider logs, cloud activity logs, and API traffic, to build a comprehensive picture of potential threats.

Strategic context for Okta

Okta has long been one of the most recognizable names in identity and access management. The company was founded in 2009 and helped popularize the modern approach to workforce and customer identity. But in recent years, Okta has faced increased competition and pressure to adapt to a changing security landscape.

The rise of generative AI has created both opportunities and risks. Attackers are using AI to automate phishing campaigns and scale their attacks. At the same time, enterprises are deploying AI agents to automate business processes, and these agents are getting access to sensitive data and systems. That combination has created a pressing need for new security controls that can understand and protect non-human identities.

Okta has already taken steps to incorporate AI into its own products, including AI-driven identity verification and automated threat detection. But the Permiso acquisition is a clear signal that Okta wants to lead in the emerging space of AI agent security.

The details of the agreement

Okta did not disclose how it will fund the transaction, but the almost all-cash structure suggests the company is relying on its existing balance sheet. Analysts will likely watch the deal closely to see if Okta can successfully integrate Permiso's technology and expand its reach.

The acquisition is expected to close in the third quarter of Okta's fiscal 2027. Okta said the closing is subject to customary conditions, including regulatory approvals. Until then, both companies will operate independently, and Permiso's products will remain available to existing customers.

The acquisition of Permiso is one of the most significant M&A moves in the AI security space this year. It highlights a growing consensus among enterprise security leaders that AI agents and machine identities require a new generation of protection. As autonomous software becomes more common, the ability to detect and respond to identity-based threats will become a core requirement for organizations of all sizes.

Source:TechCrunch News