Okta agrees to buy Permiso Security

Okta has agreed to acquire Permiso Security in a deal TechCrunch reports is valued at just under $200 million, as the identity-management company positions itself for a world where access is granted not only to employees but to autonomous software. Okta did not disclose terms, but a spokesperson did not dispute the reported figure and declined to comment on specifics. The acquisition is expected to close in the third quarter of Okta’s fiscal year 2027, subject to customary conditions.

Permiso, which emerged from stealth in 2022, builds tools that help security teams detect suspicious activity in cloud environments after an identity has already been authenticated. That emphasis matters because many real-world intrusions do not begin with breaking encryption; they begin with a stolen token, a compromised account, or a misused service identity that looks legitimate at the moment of login. According to TechCrunch, Permiso has recently expanded its platform to monitor AI agents and other machine identities—exactly the kind of “non-human” access that proliferates as companies wire AI into internal systems.

Okta is framing the deal as a shift from being a gatekeeper at the door to being a monitor inside the building. The company says it wants to go beyond verifying users at login to continuously observing the actions of users, applications, and AI agents after access is granted. In practice, that moves identity from a discrete event—authentication—to an ongoing behavioral problem, where the question becomes what an account is doing minute by minute across cloud services.

Permiso’s background points to where the market is heading. The company was co-founded by former FireEye executives Paul Nguyen and Jason Martin, and it focuses on detecting attacks that use compromised identities to move laterally through cloud infrastructure. In April 2024, Permiso introduced a product called SandyClaw that analyzes AI agent “skills” in a sandbox to identify malicious behavior before deployment, a nod to the fact that agentic software can be both a tool and a liability.

The numbers also show why consolidation is arriving early. TechCrunch reports Permiso has raised about $29 million, including an $18.5 million Series A in April 2024 led by Altimeter Capital; sources familiar with that financing said the round valued the company at about $80 million post-money. A purchase price reported at roughly $200 million turns a specialist product into a feature inside a larger platform—while giving Okta a story to tell customers who are beginning to treat AI agents as first-class users.

Okta’s chief product officer Ely Kahn said Permiso will extend Okta’s capabilities with identity threat detection and response. The deal’s premise is straightforward: as more “employees” are pieces of software, the cheapest breach is the one that logs in correctly.