Okta Acquires Security Firm Permiso for Around $200 Million

A Strategic Deal in the Digital Identity Space

Okta, the leading digital identity management company, has announced an agreement to acquire Permiso Security, an AI-powered identity security startup. Available information indicates the deal is valued at close to $200 million, structured as an almost entirely cash transaction, though Okta has not officially disclosed the financial details. The acquisition is expected to close during the third quarter of fiscal year 2027, according to the company.

Why Permiso?

Permiso was co-founded by Paul Nguyen and Jason Martin, both former executives at cybersecurity firm FireEye. The company launched commercially in 2022 and focuses on detecting suspicious behavior within cloud environments after users or applications have been granted access — a critical phase that traditional security systems often overlook, as they typically only verify identity at the point of entry.

Last April, Permiso unveiled its SandyClaw platform, designed to examine AI agent capabilities within an isolated environment to detect potentially harmful behaviors before actual deployment. This approach directly addresses a pressing security challenge: how to ensure the safety of autonomous software agents that are increasingly operating within enterprise infrastructure.

The Broader Context: Securing Non-Human Identities

This deal comes at a time when large organizations are accelerating the integration of AI tools into their daily operations. Securing what are known as "non-human identities" — including applications, bots, and AI agents — has become an urgent necessity rather than a luxury. These identities can be exploited by attackers to leverage legitimate access privileges and move quietly through systems without revealing their intent.

Okta is well aware of this shift and is working to evolve from a "verify at entry" model to a more comprehensive approach that continuously monitors activity after access is granted. By acquiring Permiso, Okta adds a sophisticated layer of identity-based threat detection and response to its platform.

Financial Value and Funding History

Permiso has raised approximately $29 million in venture funding across multiple rounds. The most recent was a Series A round of $18.5 million in April 2024, led by Altimeter Capital, at a post-money valuation of nearly $80 million. This means the acquisition delivers a return of more than double the company's last valuation, reflecting the growing market interest in identity security solutions.

What Does Okta Gain?

Okta's Chief Product Officer Ely Kahn described the acquisition as a meaningful addition to Okta's security portfolio, noting that Permiso will enhance the company's capabilities in detecting and responding to identity-based threats. The key gains can be summarized across three areas:

• Technology: A specialized platform for detecting attacks that exploit compromised identities to move laterally within cloud infrastructure.
• Human Expertise: A research and security team with deep experience in identity threat intelligence.
• AI Market Leadership: Tools for vetting AI agents before deployment — a field that is still taking shape.

Conclusion

This deal embodies a clear direction that major cybersecurity companies are pursuing: shifting from protecting people to protecting machines, and from point-in-time verification to continuous monitoring. As AI adoption accelerates across enterprises, securing non-human identities will remain one of the most urgent and high-value frontiers in cybersecurity in the years ahead.

✦ بقلم فريق دروب أيديا