Okta announced Thursday that it has agreed to acquire Permiso Security, an AI identity security startup, in a deal that underscores the growing importance of protecting AI agents and other machine identities in enterprise environments. A source familiar with the transaction said the acquisition is valued at just under $200 million and is structured as an almost all-cash deal, though Okta did not publicly disclose the terms. The company declined to comment on specifics beyond confirming the expected closing date.

Key facts at a glance

• Okta has agreed to acquire Permiso Security, an AI identity security startup.
• The deal is valued at just under $200 million, according to a source familiar with the transaction.
• The acquisition is expected to close in the third quarter of Okta's fiscal 2027, subject to customary closing conditions.
• Permiso was founded in 2022 by former FireEye executives Paul Nguyen and Jason Martin.
• The startup has raised about $29 million, including an $18.5 million Series A led by Altimeter Capital.
• Okta plans to integrate Permiso's identity threat detection and response capabilities into its identity security fabric.

Why Okta is buying Permiso

The move comes as identity management companies face pressure to evolve from traditional access control at login to a more continuous model of verification that tracks behavior across cloud environments. With enterprises increasingly deploying autonomous AI agents that interact with sensitive data, the potential for compromised machine identities has become a key concern for security teams. Okta's acquisition of Permiso is a direct bet that this demand will accelerate.

Permiso emerged from stealth in 2022 and has since built a reputation for detecting suspicious activity in cloud environments after credentials have been granted. It focuses on identity threat detection and response (ITDR), a category that has gained traction as security analysts realize that many attacks involve valid credentials being misused. The startup was co-founded by Paul Nguyen and Jason Martin, both former FireEye executives, and its technology is designed to spot attacks that rely on stolen or compromised identities to move laterally through infrastructure.

Permiso's technology and SandyClaw

Permiso's core platform monitors cloud environments for abnormal behavior, including compromised identity usage, privilege escalation, and other indicators of attack. The company expanded its focus in April with the introduction of SandyClaw, a platform that analyzes AI agent skills in a sandboxed environment to identify malicious behavior before AI agents are deployed. That tool is particularly relevant as organizations begin putting AI agents into production workflows, where they can access data and systems autonomously.

SandyClaw allows security teams to test AI agent skills in isolation, observing what the agent would do in a controlled environment. This approach helps identify harmful or unexpected behavior before deployment. It also gives Okta a differentiated capability in the fast-growing area of AI agent security.

Deal terms and funding history

Permiso has raised approximately $29 million to date. Its most recent funding round was an $18.5 million Series A announced in April 2024, led by Altimeter Capital. People familiar with the financing have said that round valued Palo Alto-based Permiso at around $80 million on a post-money basis. The acquisition price of just under $200 million therefore represents a significant premium over the startup's last private valuation.

The transaction is expected to be structured as an almost all-cash deal, according to the source. Okta's spokesperson did not dispute the figure when approached by the publication, but the company would not comment further on the financial details. The deal is expected to close in the third quarter of Okta's fiscal 2027, subject to customary closing conditions.

Okta's AI security strategy

Okta has been investing heavily in identity security for AI workloads and machine identities. The acquisition of Permiso is one of the company's largest moves in this space. It follows the launch of Okta's identity security fabric, which is designed to connect threat detection and response across the identity landscape. Permiso's team and technology are expected to be integrated into that fabric.

Ely Kahn, Okta's chief product officer, said in a prepared statement that Permiso will extend Okta's identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta's threat detection and prevention capabilities. That statement highlights Okta's intention to absorb not just Permiso's products but also its security research expertise.

Industry context: the rise of ITDR and AI agents

Identity threat detection and response has become one of the fastest-growing segments in cybersecurity. While traditional identity and access management (IAM) focuses on verifying who has access to what, ITDR goes further by monitoring behavior after access is granted to detect anomalies. This shift is partly a response to the realities of modern attacks, which often use legitimate credentials rather than exploiting software vulnerabilities.

The adoption of AI agents has added another layer of complexity. These agents are essentially non-human identities that can perform tasks like querying databases, sending emails, or modifying code. If an attacker compromises an AI agent, they can potentially harness its privileges to cause significant damage. Permiso's SandyClaw is aimed at addressing exactly this problem by testing AI agents before they are deployed.

Machine identities are also proliferating across enterprises. Every application, API, service account, and now AI agent needs an identity to authenticate and authorize access to resources. This creates an enormous attack surface that traditional security tools are not always equipped to handle. Okta's decision to acquire Permiso signals that the company wants to be at the forefront of securing this expanding identity universe.

What might come next

After the deal closes, Okta is likely to integrate Permiso's ITDR capabilities across its workforce and customer identity products. The company may also embed SandyClaw into its existing identity security tools for AI agents, giving customers a way to assess and monitor agent behavior. The deal could also spur more acquisitions in the ITDR and AI security spaces, as larger vendors compete to offer end-to-end protection against increasingly sophisticated threats.

Permiso's founders and team are expected to join Okta, bringing deep expertise in cloud security and identity-based attacks. The acquisition will effectively validate the ITDR category as an essential component of the enterprise security stack, particularly as machine identities multiply and become an attractive target for attackers.

Source: TechCrunch News