Today, Okta announced it has signed a definitive agreement to acquire Permiso Security, a cloud-native identity security platform that detects and mitigates threats across human, non-human, and agentic identities in multi-cloud environments. With the addition of new identity risk signals, behavioral analytics, and threat detections from Permiso, the Okta Platform will offer comprehensive identity threat detection and response (ITDR) capabilities, helping customers surface identity-related risk faster, remediate vulnerabilities and excessive privileges, and stop attacks across their technology stack.
The rapid growth of human, non-human, and agentic identities is creating new security challenges for enterprises, with 58% of executives reporting an AI-related security incident or near miss in the past year. As attackers increasingly leverage post-authentication techniques to bypass traditional defenses, security teams need a unified approach to identity to protect their organizations.
Permiso provides security teams with the tools to discover, protect, and respond to threats across every identity, using more than 2,500 research-driven signals across 70+ identity partners, such as overprivileged access, unused permissions, anomalous agent behavior and tool usage, policy violations, and high blast radius behavior, in real time. Once integrated with Okta’s identity security fabric, these capabilities will help organizations mitigate critical operational blind spots by extending advanced runtime detection and response across all identity types.
“We’re thrilled to welcome Permiso to Okta as we help companies secure their agentic enterprises where humans, applications, service accounts, and AI agents work together," said Ely Kahn, Chief Product Officer, Okta. "Permiso will extend Okta’s identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta's threat detection and prevention capabilities."
"Everything we've built at Permiso has been driven by one goal: helping customers stay ahead of identity-based threats in an increasingly complex security landscape," said Jason Martin, Co-Founder of Permiso. "Joining the leading, neutral identity provider means that work now reaches far more organizations than we could have on our own.”
"Together, we'll help security teams gain deeper visibility into identity risks, respond faster to threats, and strengthen their overall security posture," added Paul Nguyen, Co-Founder of Permiso. "Combining our technology and expertise with Okta's platform is what makes comprehensive identity threat protection possible at this scale."
Advanced identity threat detection and response for the agentic era
Okta is unifying identity threat detection and identity posture management into a single security offering. Following the close of the transaction, Permiso’s capabilities will help Okta customers to:
Advanced identity threat detection: Detect sophisticated attacks across all identity types by combining authentication signals with behavioral analytics.
Enhanced visibility into agent behaviors: Continuously identify risky behavior across AI agents running locally, on SaaS platforms, or in Cloud Environments, machine identities, and privileged accounts.
Dynamic sandbox for AI agent skills and prompts: SandyClaw is the first platform to bring dynamic sandbox detonation to AI agent skills. Leveraging dynamic behavioral analysis and a multi-engine detection stack, SandyClaw detects AI supply chain attacks in AI agent skills and prompts before they reach customer environments.
Automated AI identity response: Investigate and contain compromised or misconfigured AI agents in real time, reducing the risk of unauthorized access and misuse.
"When you need to secure enterprise AI at scale, visibility and threat detection are non-negotiable. Permiso gives Autodesk the ability to discover and monitor all identities across our environment, making it an important part of our broader cloud security strategy," said Sebastian Goodwin, Chief Trust Officer at Autodesk. "This helps us uphold the trust our customers place in Autodesk so they can design and make with confidence. We are excited about the potential of Okta and Permiso under one offering for securing our human, machine, and agentic identities."
This acquisition will expand Okta’s footprint beyond identity management into the core Security Operations Center, enabling Okta to further partner with enterprise CISOs on evolving SecOps challenges. Permiso’s P0 Labs will expand Okta’s research capabilities, bringing post-authentication insight into suspicious behavior across cloud and AI environments. Together with Okta Threat Intelligence, these complementary insights will strengthen the Okta Platform’s detections, hunting capabilities, and product roadmap across the identity lifecycle.
Transaction details
The transaction is expected to close in the third quarter of Okta's fiscal year 2027, subject to the satisfaction of customary closing conditions. This transaction is expected to have no impact on Okta's guidance issued on May 27, 2026.
