Okta Buys AI Security Startup Permiso for $200M

Okta announced on Thursday its agreement to acquire Permiso Security, an AI identity security startup. This strategic move signals Okta's anticipation of a surge in demand for safeguarding AI agents and other machine identities as businesses increasingly integrate autonomous software into their operations.

While the identity management firm did not disclose the financial specifics of the transaction, TechCrunch has reported, citing a source familiar with the deal, that the acquisition is valued at just under $200 million and is structured primarily as an all-cash agreement. An Okta spokesperson, when queried by TechCrunch, did not dispute this figure but refrained from commenting on the precise terms of the deal.

The acquisition is projected to finalize in the third quarter of Okta’s fiscal year 2027, contingent upon customary closing conditions, as stated by the company.

Okta's decision to acquire Permiso is aligned with a broader industry trend where identity management companies are expanding their focus beyond initial user login verification. The emphasis is shifting towards continuous monitoring of the activities of users, applications, and AI agents once they have secured authorized access to a network environment. This evolution has intensified competition in securing machine identities, particularly as enterprises embed artificial intelligence more deeply into their daily functions.

Permiso, which emerged from stealth mode in 2022, develops sophisticated software designed to assist security teams in identifying suspicious activities within cloud environments after users or applications have been granted access. More recently, the startup has strategically expanded its platform to include the monitoring of AI agents and other machine identities.

Co-founded by former FireEye executives Paul Nguyen and Jason Martin, Permiso specializes in detecting sophisticated attacks that leverage stolen or compromised identities to navigate cloud infrastructure. In a significant development in April, the startup unveiled SandyClaw, a platform engineered to analyze AI agent capabilities within a sandboxed environment, aiming to identify and mitigate malicious behaviors before these agents are deployed.

This acquisition is set to significantly strengthen Okta’s commitment to securing AI agents and other non-human identities, complementing its foundational identity management business.

“Permiso will extend Okta’s identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta’s threat detection and prevention capabilities,” stated Ely Kahn, Okta’s chief product officer, in a prepared statement.

Permiso has successfully raised approximately $29 million to date. This includes an $18.5 million Series A funding round in April 2024, led by Altimeter Capital. Individuals familiar with the financing details indicated that this Series A round valued the Palo Alto-based startup at approximately $80 million on a post-money basis.