Okta Acquires Permiso Security for $200M to Strengthen AI Security and Identity Threat Defense

Okta to Acquire Permiso Security in $200 Million Identity Security Deal

Okta agreed to acquire Permiso Security, an AI identity security startup, in a deal valued at just under $200 million, according to sources familiar with the transaction1

1

. The acquisition, structured as an almost all-cash deal, is expected to close in the third quarter of Okta's fiscal 2027, subject to customary closing conditions2

2

. While Okta did not disclose official terms, a company spokesperson did not dispute the $200 million figure when questioned1

1

.

Permiso Security, founded in 2020 by former FireEye executives Jason Martin and Paul Nguyen, emerged from stealth mode in 20223

3

. The Palo Alto-based startup has raised approximately $29 million to date, including an $18.5 million Series A round in April 2024 led by Altimeter Capital, which valued the company at about $80 million post-money1

1

. The acquisition represents a significant premium, reflecting the growing importance of identity threat detection in cloud environments.

Expanding Identity Threat Defense Across Human, Machine, and AI Agent Identities

The deal positions Okta to expand beyond traditional identity management into comprehensive identity threat detection and response (ITDR) capabilities. Permiso's platform monitors identities while they work, ingesting activity from identity providers, cloud accounts, software-as-a-service applications, and infrastructure-as-code tools2

2

. The system flags behavior that deviates from what a given account, key, or agent normally does with its access, drawing on over 2,500 research-driven signals across more than 70 identity partners2

2

.

Okta Chief Product Officer Ely Kahn emphasized the strategic importance of securing agentic enterprises where humans, applications, service accounts, and AI agents work together. "Permiso will extend Okta's identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta's threat detection and prevention capabilities," Kahn stated5

5

. The acquisition addresses a critical gap in Okta's platform, as its previous runtime detection focused primarily on sessions and identities within Okta's control plane, while Permiso's detections operate across cloud accounts, keys, and agents outside it2

2

.

Securing AI Agents Amid Rising Security Incidents

Data cited by Okta reveals that approximately 58% of executives have dealt with an AI-related security incident in the past year3

3

. This alarming statistic underscores the urgency behind Okta's move to strengthen AI security capabilities. Permiso moved into agentic security in September, extending its platform to cover AI users, AI builders, and AI agents2

2

. The company expanded these capabilities with agent and session discovery, runtime attribution linking activity back to specific identities, detection of over-privileged AI agents, and kill switches2

2

.

In April, Permiso introduced SandyClaw, a sandboxing platform designed to analyze AI agent skills in a controlled environment to identify malicious behavior before deployment1

1

. This sandbox detonates agent skills and prompts to observe their behavior before they run in production, protecting against supply-chain style attacks3

3

. Autodesk deployed Permiso's agent tooling across its products, workforce, and cloud infrastructure in May, demonstrating real-world validation of the technology2

2

.

Strengthening Cloud Threat Detection and Behavioral Analytics

Permiso gained early recognition through P0 Labs, its research arm, which develops open-source security tools. CloudGrappler, released in 2024, hunts for known threat actor activity inside Amazon Web Services and Azure accounts2

2

. Three additional tools launched in November 2024, bringing P0 Labs' open-source count to 10. P0LR Espresso, introduced in October, flattens cloud logs from rival providers into a single format, eliminating the need for analysts to rewrite queries for every platform2

2

.

The acquisition brings identity risk signals and behavioral analytics that will provide Okta customers with advanced identity threat detection capabilities5

5

. Once integrated, these capabilities will give security teams a unified view of identity risk from human employees, service accounts, and autonomous AI agents, rather than requiring separate tools for each category3

3

. Permiso's platform flags issues like excessive permissions, unused access, and unusual behavior from AI agents, addressing widespread problems with over-privileged identities3

3

.

Implications for the Identity Security Market

This marks Okta's second security acquisition in under a year, following the purchase of privileged access management startup Axiom Security in August2

2

. The deal extends Okta's reach beyond core identity management into Security Operations Center functions4

4

. Chris Konrad, vice president of global cyber at World Wide Technology, noted that identity security is becoming increasingly central to AI strategies, as AI agents require the same governance, policies, and controls as human identities4

4

.

Jason Martin emphasized the existential nature of the identity security challenge: "It's very likely going to be catastrophic if people don't get identity under control"4

4

. Paul Nguyen added that combining Permiso's technology and expertise with Okta's platform makes "comprehensive identity threat protection possible at this scale"2

2

. The acquisition comes during a wave of consolidation in identity security, with Cyera announcing a $1 billion deal to acquire non-human identity specialist Oasis Security earlier this week4

4

. As enterprises embed AI deeper into operations and autonomous agents proliferate, expect intensified competition among identity management providers to deliver comprehensive protection across all identity types.