Okta Buys Permiso Security to Protect AI Agents From Identity-Based Attacks
The acquisition will integrate Permiso's identity risk signals, behavioral analytics, and threat detection capabilities into the Okta Platform,
Identity and access management company Okta has signed a definitive agreement to acquire Permiso Security, a cloud-native identity security platform, to strengthen its identity threat detection and response (ITDR) capabilities.
The acquisition will integrate Permiso's identity risk signals, behavioral analytics, and threat detection capabilities into the Okta Platform, enabling organisations to identify identity-related risks faster, reduce excessive privileges, and detect attacks across human, non-human, and agentic identities.
"Permiso will extend Okta’s identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta's threat detection and prevention capabilities," Ely Kahn, Okta Chief Product Officer, said.
According to Okta, enterprises are facing growing security challenges as AI adoption accelerates. The company cited research showing that 58% of executives reported an AI-related security incident or near miss over the past year, highlighting the need for identity-centric security beyond traditional authentication.
Permiso currently helps security teams detect and respond to threats using more than 2,500 research-driven signals across over 70 identity partners. Its platform identifies risks such as overprivileged accounts, unused permissions, anomalous AI agent behavior, policy violations, and other suspicious activities across multi-cloud environments.
"Everything we've built at Permiso has been driven by one goal: helping customers stay ahead of identity-based threats in an increasingly complex security landscape. Joining the leading, neutral identity provider means that work now reaches far more organisations than we could have on our own,” Jason Martin, Permiso Co-Founder, said.
"Together, we'll help security teams gain deeper visibility into identity risks, respond faster to threats, and strengthen their overall security posture. Combining our technology and expertise with Okta's platform is what makes comprehensive identity threat protection possible at this scale," Paul Nguyen, Permiso Co-Founder, added.
Following the acquisition, Okta plans to unify identity threat detection with identity posture management into a single security offering.
New capabilities will include advanced runtime detection across all identity types, enhanced visibility into AI agent behavior, automated AI identity response, and support for SandyClaw, Permiso's dynamic sandbox designed to detect AI supply chain attacks targeting AI agent skills and prompts.
The acquisition also expands Okta's presence within enterprise Security Operations Centers (SOC) by incorporating Permiso's P0 Labs research team into its threat intelligence capabilities.
The transaction is expected to close in the third quarter of Okta's fiscal 2027, subject to customary closing conditions, and is not expected to affect the company's previously issued financial guidance.
