Okta buys AI security startup Permiso for around 200 million dollars

Okta has agreed to acquire Permiso Security, a startup specializing in identity security for cloud infrastructure and, more recently, for AI agents. According to a source with knowledge of the deal who spoke to TechCrunch, the agreement is valued at just under $200 million and is structured as an almost entirely all-cash transaction. Okta has not officially disclosed the financial terms, although a company spokesperson did not deny the $200 million figure when TechCrunch put the question to chief executive Todd McKinnon. The deal is expected to close in the third quarter of Okta's 2027 fiscal year, subject to customary closing conditions.

The acquisition fits into a broader trend among identity management companies: moving from verifying users only at the moment of sign-in to continuously monitoring what users, applications and, increasingly, AI agents do once they have obtained authorized access to a network environment. That shift has intensified competition to secure so-called "machine identities" as companies integrate AI more deeply into their day-to-day operations.

Permiso emerged from stealth in 2022 and develops software that helps security teams detect suspicious activity in cloud environments after users or applications have been granted access. More recently, the company expanded its platform to also monitor AI agents and other non-human identities. It was co-founded by Paul Nguyen and Jason Martin, both former FireEye executives, and specializes in detecting attacks that use stolen or compromised identities to move through cloud infrastructure. In April, the startup unveiled SandyClaw, a platform designed to analyze AI agents' skills in a sandbox environment in order to identify malicious behavior before they are deployed.

With this purchase, Okta strengthens its push into securing AI agents and other non-human identities, adding it to its core identity management business. Okta's chief product officer, Ely Kahn, said in a statement that "Permiso will extend Okta's identity security fabric with proven identity threat detection and response capabilities, and an extraordinary threat research and security team that will advance Okta's threat detection and prevention capabilities".

As for its funding history, Permiso has raised around $29 million to date, including an $18.5 million Series A closed in April 2024 and led by Altimeter Capital. Sources close to that deal put the Palo Alto-based startup's valuation at the time at around $80 million post-money. The sale to Okta for close to $200 million would therefore imply a notable multiple on that valuation from little more than two years earlier.

The move comes at a time when AI agent security is emerging as a growing front for investment and consolidation in the sector: as companies deploy autonomous software across their operations, the need to treat those agents as identities that must be authenticated, authorized and monitored — just like employees or applications — is shaping up as one of the next battlegrounds in corporate cybersecurity.