Okta Secure Identity Commitment
The Okta Secure Identity Commitment is our long-term commitment to lead the industry in the fight against identity attacks.
We’re committed to taking action
Learn about the definitive steps we’re taking to fight against identity-based attacks, alongside empowering our customers and the industry to identify and mitigate emerging threats.
Market leading identity products & services
We relentlessly invest in keeping our products hardened and secure. After all, the world’s most trusted brands trust Okta for the strength of security within our platform.
We recognize that our security posture is your security posture, so we continue to innovate and further strengthen our product and services to deliver market leading protection.
Harden our corporate infrastructure
We treat all of our internal technology, people, and processes with the same cyber threat profile as our customer-facing environment.
We are accelerating our investments to further harden our ancillary (production-adjacent) and corporate systems.
Champion customer best practices
Misconfigured identity is just another entry point for a bad actor or negligent insider. With 16 years experience and nearly 20k customers, we have the unique expertise to ensure our customers have the right identity configuration.
To make sure our customers benefit from our depth of experience, we are further strengthening our customer policies. We are committed to ensuring our products are deployed with Okta’s security best practices.
Elevate our industry
Identity has become the primary enterprise security entry point for all workforce and consumer apps.
The volume and complexity of attacks against entities large and small continues to accelerate.
Detecting and protecting against these attacks is a mission-critical requirement. Organizations need a neutral and independent identity provider. As the only vendor recognized as a leader in every Gartner® Magic Quadrant™, Okta has a responsibility to lead the way.
We’re already helping secure over 20,000 customers
And we're continually evolving in the fight against identity-based attacks.
attacks (credential stuffing, malicious bots) denied over a 90-day period*
malicious (or risky) access attempts blocked over a 90-day period*
operational uptime delivered globally to support seamless access
logins secured with 24x7 support and 16+ years of identity expertise
Investing in market-leading products and services
What we recently delivered
Okta for AI agents
Securely manage your AI agents from a single control plane. Bring your AI agents into Okta to discover, onboard, protect, and govern them at scale.
Cross-App Access
Enable trusted connections between apps and AI agents. Shift access control and consent decisions from the user to the identity provider, allowing enterprise IT to decide which apps are connecting — and see exactly what’s being accessed.
Auth0 for AI Agents
Empower developers to build AI agents that are secure by design. Identify human users with User Authentication, enforce zero standing privileges with Token Vault, secure data access with FGA for RAG and establish guardrails for sensitive actions with Async auth.
Acquire Permiso Security
Okta’s platform will offer comprehensive identity threat protection, helping customers identify and remediate risks at any stage in the identity lifecycle.
Hardening our corporate infrastructure
What we recently delivered
Okta Threat Intelligence
Okta now publishes threat advisories on the latest identity-based attacks we have observed at security.okta.com — these observations are available exclusively for the security contacts of Okta customers. Read on for more on how to access these resources.
HTTP2Crash: A Denial of Service (DoS) in HTTP/2 Flow Control
The Okta Red Team discovered a Denial of Service (DoS) vulnerability in HTTP/2 Flow Control.
OpenSSL HollowByte: A DoS Hiding in 11 Bytes
The Okta Red Team discovered HollowByte, a Denial of Service (DoS) vulnerability in OpenSSL.
Championing customer best practices
What we recently delivered
Global CISO Insights 2026
Okta surveyed over 300 global CISOs to uncover how they’re rethinking security for the AI era. See the data behind the agentic anxieties keeping CISOs up at night—and where the biggest alignment gaps with the C-suite remain.
ADT CISO Tim Rains on why AI agent access is crucial — and risky
ADT's Tim Rains breaks down the tension at the heart of agentic AI: the same access that makes agents useful is what makes them dangerous. Learn why observability, trust, and data protection are non-negotiable before agents touch sensitive systems.
Shadow AI and securing the agentic enterprise with Okta Regional CSO Matt Immler
Employees are quietly deploying their own AI tools to get work done faster—with or without approval. Okta's Matt Immler explains why treating AI agents as "first-class identities" is key to bringing shadow AI out of the shadows.
Raising the bar for our industry
Implementing AI Ethics in Organizations
With 45 billion AI agents expected by year's end, securing these autonomous systems is critical. Okta's role is to secure AI agents while embedding ethical AI into our core strategy through four key elements: aligning principles with business values, establishing governance, embedding principles into functions, and supporting industry standards.
Nonprofits at Work 2026
The Nonprofits at Work 2026 report reveals how organizations manage identity risks in the age of AI. Nonprofits are the most-targeted industry, with threat-to-authentication ratios reaching 78%. While organizations deploy AI to automate tasks, a critical gap exists: lack of identity controls needed to govern AI agents safely.
AI Agents for Nonprofits
AI agents can multiply nonprofit capacity by automating donor communications and grant proposals. But securing sensitive data requires strong security foundations. By treating agents as non-human identities with proper access controls, nonprofits unlock efficiency gains while avoiding identity debt and prompt injection risks. Okta and Auth0 enable secure AI innovation.
$25.3M committed with Okta for Good
Okta for Good (O4G) has committed $25.3M towards its $50M philanthropy commitment. We launched our 2026 Okta for Good Impact Report, which shares our progress toward building a more secure world where everyone can belong and thrive.
We’re committed to sharing results
Check back for quarterly updates to learn what we’ve done and what’s next when it comes to Okta’s commitment.