Okta, the identity and access management giant, is acquiring Permiso, an AI security startup, for about $200 million, according to a person familiar with the deal. The acquisition, first reported by a source close to the negotiations, underscores a critical shift in enterprise security: the need to protect not just human users, but the rapidly growing number of AI agents and machine identities operating across cloud systems.
Why Okta is betting big on non-human identity security
As enterprises deploy more AI agents—automated software that performs tasks, makes decisions, or interacts with other systems—the security perimeter has expanded beyond human logins. These non-human identities (NHIs), such as service accounts, API keys, and AI bots, now outnumber human identities in many organizations. They also present unique vulnerabilities: they can be compromised, misused, or exploited without the behavioral cues that flag human account takeovers. Permiso’s technology specializes in detecting threats targeting these machine identities, offering real-time visibility into suspicious activity across cloud environments.
What Permiso brings to Okta’s platform
Permiso, founded in 2021, focuses on identity threat detection and response (ITDR) for cloud and AI workloads. Its platform monitors authentication patterns, API calls, and machine-to-machine interactions to spot anomalies—such as an AI agent suddenly accessing data it shouldn’t, or a service account behaving like a human attacker. For Okta, which already secures human identities for thousands of enterprises, adding Permiso’s capabilities fills a critical gap. The deal positions Okta to offer a unified identity security layer that covers both human and non-human entities.
The $200 million price tag: What it signals
While neither company has confirmed the figure, the reported $200 million valuation reflects the strategic importance of this niche. For context, Okta’s market cap is around $17 billion, making this a relatively small but highly targeted acquisition. The price also signals that the market for AI-specific security tools is heating up. Permiso had raised about $20 million in venture funding from investors including Ballistic Ventures and Foundation Capital. The acquisition multiple—roughly 10x on an undisclosed revenue base—suggests Okta sees Permiso as a technology and talent acquisition rather than a revenue play.
Who is affected by this deal
For Okta’s existing customers—ranging from mid-sized businesses to Fortune 500 companies—the acquisition promises enhanced protection for their growing AI workloads. Security teams that manage cloud infrastructure, DevOps pipelines, and AI agent deployments will benefit from integrated threat detection without needing a separate tool. However, the integration timeline remains unclear. Permiso’s current customers, who use the platform independently, may face uncertainty about product continuity and support during the transition.
Okta’s response and the broader context
Okta has not issued a public statement about the acquisition. The company has been under pressure in recent years to strengthen its security posture after a high-profile breach in 2022 that exposed customer data. Since then, Okta has invested heavily in its own identity threat detection capabilities. The Permiso acquisition appears to be a natural extension of that strategy, specifically targeting the AI and cloud-native threat landscape. Industry analysts have noted that securing non-human identities is becoming a top priority for CISOs, as AI agents increasingly handle sensitive data and critical business processes.
Why this matters beyond Okta
The deal reflects a broader industry trend: the convergence of identity security and AI security. As companies like Microsoft, CrowdStrike, and Palo Alto Networks also build or buy capabilities in this space, the race to define the standard for machine identity protection is accelerating. For enterprises, this means more options—but also more complexity in choosing the right platform. Okta’s move suggests that identity-first security, long focused on human users, must now expand to include every entity that authenticates, whether human or machine.
Confirmed facts vs what remains unclear
What is confirmed: Okta is acquiring Permiso, according to a source familiar with the deal. The price is approximately $200 million. Permiso’s technology focuses on identity threat detection for AI agents and non-human identities in cloud environments. What remains unclear: the exact terms of the deal, the timeline for integration, whether Permiso will operate as a standalone unit, and how existing Permiso customers will be affected. Neither company has confirmed the acquisition publicly, and the source spoke on condition of anonymity because the deal is not yet public.
Risks and balanced view
Acquisitions in the security space often face integration challenges. Okta’s own history with acquisitions—such as its $6.5 billion purchase of Auth0 in 2021—has been mixed, with some customers reporting friction during product consolidation. There is also the risk that Permiso’s technology, while innovative, may overlap with Okta’s existing ITDR efforts, leading to redundancy. Additionally, the $200 million price tag may raise questions about return on investment if the market for AI agent security does not grow as quickly as expected. Critics might argue that Okta is paying a premium for a niche capability that could have been built internally.
The wider trend: AI agents and the new identity perimeter
The Permiso acquisition is part of a larger shift in enterprise security. As AI agents become more autonomous—handling customer service, code deployment, financial transactions, and even security operations—the attack surface expands. Unlike human users, AI agents can operate at machine speed, making manual threat detection impractical. This has given rise to a new category of security tools focused on machine identity and behavior analytics. Okta’s move signals that identity platforms must evolve to become the central control point for all entities, human or not.
What enterprises should do now
For security teams evaluating identity platforms, this acquisition is a signal to prioritize non-human identity security in their vendor assessments. Organizations already using Okta should watch for product updates and integration roadmaps. Those managing AI agents or extensive cloud automation should consider whether their current identity solution can detect threats from machine-to-machine interactions. It may also be a good time to audit existing non-human identities—service accounts, API keys, and AI bot credentials—to understand the full scope of the attack surface.
Future outlook
If the integration is successful, Okta could offer a unified identity security platform that covers both human and non-human entities, giving it a competitive edge over rivals that focus only on one side. The deal also positions Okta to capture a share of the growing AI security market, which some analysts project will exceed $50 billion by 2030. However, the success of this acquisition will depend on execution—how quickly and smoothly Permiso’s technology is embedded into Okta’s core platform, and whether customers see tangible improvements in threat detection.
Our Take
The Okta-Permiso deal is a smart, targeted acquisition that addresses a genuine and growing enterprise need. As AI agents proliferate, the security industry can no longer treat machine identities as an afterthought. Okta’s move is both defensive—protecting its own platform from emerging threats—and offensive, positioning it for the next wave of identity security. The $200 million price tag is reasonable for a technology that could become essential. The real test will be integration. If Okta can weave Permiso’s capabilities into its platform without disrupting existing customers, this deal could prove to be a defining moment in the evolution of identity security.
Frequently Asked Questions
Why is Okta acquiring Permiso?
Okta is acquiring Permiso to add identity threat detection capabilities for AI agents and non-human identities in cloud environments. As enterprises deploy more AI-driven automation, securing machine-to-machine authentication has become critical.
How much is Okta paying for Permiso?
According to a source familiar with the deal, Okta is paying about $200 million for Permiso. Neither company has officially confirmed the price.
What does Permiso do?
Permiso specializes in identity threat detection and response (ITDR) for cloud and AI workloads. Its platform monitors authentication patterns, API calls, and machine-to-machine interactions to detect suspicious activity involving non-human identities like AI agents and service accounts.
How will this affect Okta customers?
Okta customers can expect enhanced security for AI agents and cloud workloads in the future. The integration timeline is unclear, but the acquisition aims to provide a unified identity security layer covering both human and non-human entities.
