Okta announced Thursday that it has agreed to acquire Permiso Security, a startup focused on identity threat detection and response for cloud environments, AI agents, and machine identities. The deal is reportedly valued at just under $200 million in an almost all-cash transaction, according to a person familiar with the terms. Although Okta did not disclose the purchase price, a company spokesperson did not dispute the figure when questioned about it. The acquisition is expected to close in the third quarter of Okta's fiscal 2027, subject to customary closing conditions.
The purchase comes at a time when identity management companies are rapidly rethinking their role in enterprise security. Traditionally, identity management has centered on verifying users at the moment of login. But with the rise of AI agents and automated workflows, security teams are beginning to focus on what happens after a user or machine has been granted access. Okta's acquisition of Permiso signals a strategic bet on continuous monitoring and threat detection for the new wave of non-human identities.
Permiso's technology and founding
Permiso was founded by Paul Nguyen and Jason Martin, two former FireEye executives. The startup emerged from stealth in 2022 with a focus on detecting suspicious behavior in cloud environments after authorization has been granted. Its platform is designed to identify attacks that abuse stolen or compromised identities, often allowing attackers to move laterally across cloud infrastructure. More recently, Permiso expanded into monitoring AI agents and machine identities, a segment that is quickly becoming a centerpiece of enterprise cybersecurity.
In April, Permiso introduced SandyClaw, a platform that analyzes AI agent skills in a sandboxed environment. The tool is designed to identify malicious behavior before an AI agent is integrated into production systems. By allowing security teams to simulate and inspect what an AI agent can do, SandyClaw aims to prevent prompt injection attacks, unsafe tool usage, and other AI-specific threats. This type of capability is increasingly relevant as enterprises adopt agents that can interact with internal systems, external APIs, and sensitive data.
Why Okta is acquiring Permiso
The acquisition is part of Okta's broader push to secure AI agents and other non-human identities alongside its core identity management business. Okta's chief product officer, Ely Kahn, said in a prepared statement that Permiso will extend Okta's identity security fabric with proven identity threat detection and response capabilities. He also noted that Permiso brings an "incredible threat research and security team" that will help advance Okta's own threat detection and prevention capabilities.
Permiso has raised approximately $29 million to date. That includes an $18.5 million Series A round in April 2024 led by Altimeter Capital. According to people familiar with the financing, the Series A valued the Palo Alto-based startup at about $80 million on a post-money basis. The nearly $200 million acquisition price represents a significant premium over that valuation, reflecting the strategic importance of AI identity security.
Growing machine identity security market
The deal highlights a growing competitive landscape for identity threat detection and response. Okta's rivals, including Microsoft, Ping Identity, and various security startups, are also investing in capabilities that go beyond static access management. Microsoft, for example, has developed tools for cloud infrastructure entitlement management and identity protection. Ping Identity has emphasized AI-driven security for its customers. Other vendors are building identity security posture management solutions that aim to provide visibility into machine identities and their permissions.
Industry analysts have pointed out that machine identities now outnumber human identities in many enterprises by a wide margin. Every application, service, container, and API has its own identity. Securing these identities requires a different approach than traditional user identity management. Permiso's technology is built to address exactly this challenge, offering continuous monitoring and behavioral analysis for both humans and machines.
The deal also reflects a shift in how identity providers understand the modern attack surface. Stolen credentials are still the leading entry vector for security breaches. But once inside a network, attackers increasingly use legitimate credentials to move between systems. Permiso's platform helps security teams detect these movements by analyzing anomalies in user behavior, privilege usage, and cloud API calls. The startup's threat research team also publishes findings on attack techniques, adding an intelligence layer to the product.
Strategic context
Okta's acquisition of Permiso can be seen as a direct response to the growing number of AI-specific threats. As more enterprises deploy autonomous agents, the risks associated with identity misuse multiply. AI agents can be tricked into revealing sensitive information or performing unintended actions. They may also operate with excessive privileges, creating new avenues for attackers. By adding Permiso's capabilities, Okta aims to give its customers a way to monitor AI agents in the same way they would monitor human employees.
From a financial perspective, the deal is not one of Okta's largest acquisitions, but it is significant given Permiso's early stage. Okta has previously acquired companies such as Auth0 for $6.5 billion, and it has made several smaller purchases to expand its security portfolio. The Permiso acquisition is more of a strategic fill-in than a transformative buy, but it could have an outsized impact as the security industry shifts to identity-based threat detection.
For Permiso, the acquisition provides an exit for its investors and a path to scale its technology through Okta's enterprise distribution. The company's founders and employees will likely join Okta's identity security team and continue to develop threat detection products. The integration will also bring Permiso's threat research into Okta's larger security operation, potentially improving Okta's ability to respond to emerging identity-based threats.
Observers note that the acquisition price of about $200 million for a company that raised just under $30 million indicates how much strategic value Okta places on securing AI agents. It also signals a belief that the market for machine identity security will expand in the coming years. Enterprises are moving quickly to deploy AI tools, often without a full understanding of the security implications. Companies like Okta are betting that they can be the ones to solve those security problems.
The deal is expected to be completed in the third quarter of Okta's fiscal 2027. Until then, the two companies will operate independently. Okta says it will provide more details about the integration once the transaction closes. For now, the announcement gives Okta customers a sense of the direction the company is heading: toward a future where identity security is not just about verifying who you are, but also about continuously validating what you do — especially when the "you" is an AI agent.
Source: TechCrunch News