Okta Expands Cybersecurity Arsenal with $200M Acquisition of AI Startup Permiso

TL;DR

• Okta has agreed to acquire Permiso Security, a startup focused on identity threat detection and protection for cloud and AI environments, in a deal widely reported at about $200 million.
• The acquisition is aimed at strengthening Okta’s visibility into non-human identities, including AI agents, service accounts, and machine identities, as enterprise adoption of AI accelerates.
• The move continues Okta’s broader push to build an identity security fabric, following earlier acquisitions and product investments in identity threat detection, privileged access, and AI security.

Okta widens its security push with Permiso deal

Okta has signed a definitive agreement to acquire Permiso Security, an AI and cloud security startup that specializes in identity threat detection, posture management, and runtime protection. The companies said the combination is intended to help organizations gain deeper visibility into identity activity and adopt AI more securely at scale.

The deal has been reported as an all-cash transaction valued at roughly $200 million, although Okta has not publicly confirmed the exact price in its official materials.

Why Permiso matters

Permiso is focused on the fast-growing problem of securing identities that are not tied to a human user, such as service accounts, machine identities, and AI agents. That category has become increasingly important as enterprises deploy more automated software and generative AI tools across cloud environments.

According to reporting on the acquisition, Permiso’s technology is designed to monitor post-access activity and detect suspicious behavior after an identity has already gained access, which can help spot compromise before it escalates into a broader breach. The startup was founded in 2022 by former FireEye executives and has also built tools aimed at analyzing AI agent behavior.

Okta’s strategic bet on agentic enterprises

Okta has framed the acquisition as part of its vision for the “agentic enterprise,” where humans, applications, service accounts, and AI agents all operate together inside a single identity ecosystem. The company said Permiso’s capabilities will complement its existing identity threat detection and runtime protection offerings.

That strategy aligns with Okta’s recent product messaging around securing AI-driven enterprises. In 2025, Okta announced new platform capabilities designed to help organizations build secure AI agents and weave them into an identity security fabric for lifecycle management and fraud prevention. The Permiso deal appears to extend that effort further by adding specialized detection technology for cloud and runtime environments.

Part of a broader acquisition pattern

The Permiso deal is not an isolated move. Okta previously acquired Spera Security in 2023 to strengthen identity threat detection and security posture management, and later completed the acquisition in 2024. In 2025, it also acquired Axiom Security, a privileged access management company focused on cloud, SaaS, and database environments.

Taken together, these acquisitions show Okta steadily expanding beyond authentication into a wider identity security stack that includes posture management, privileged access, and threat detection. That broader platform approach could help the company defend against risks that arise when AI agents and machine identities become first-class actors in enterprise systems.

What comes next

Okta said the Permiso acquisition is expected to help customers reduce risk and improve visibility across modern identity environments. Reporting on the deal says it is expected to close in Okta’s third fiscal quarter of 2027, assuming standard closing conditions are met.

For enterprise security teams, the message is clear: the identity layer is no longer just about employees logging in. It now has to account for AI systems, service accounts, and other non-human actors that can interact with cloud infrastructure at machine speed.

AndroGuider Team

Articles written by the AndroGuider team. We try to make them thorough and informational while being easy to read.