Okta acquires AI security startup Permiso for $200M as identity threats multiply

Okta just dropped $200 million to buy Permiso Security, a Palo Alto-based startup that specializes in detecting identity threats across cloud environments. The deal, announced on July 30, is squarely aimed at one of the fastest-growing attack surfaces in tech: non-human identities like AI agents, automated bots, and service accounts that operate across multi-cloud setups.

What Okta is actually buying

Permiso brings more than 2,500 research-driven detection signals sourced from over 70 identity partners. Its platform uses behavioral analytics to spot anomalies in how identities, both human and machine, interact with cloud infrastructure.

The startup also recently developed what it calls AI agent runtime security capabilities, including a dynamic sandbox environment branded SandyClaw. Think of it as a controlled testing ground where AI agents can be observed for suspicious behavior before they’re let loose in production environments.

Ely Kahn, Okta’s Chief Product Officer, said the acquisition would deliver “comprehensive identity threat protection” for enterprises operating with agentic identities.

The deal is expected to close in Q3 of Okta’s fiscal year 2027, which translates to early calendar year 2027. Okta confirmed the acquisition won’t change its existing financial guidance from May 27, 2026.

Why this matters beyond enterprise software

Recent research cited by Okta indicates that 58% of executives experienced an AI-related security incident or near-miss within the past year.

Okta’s last major acquisition was Auth0 in 2021, a deal valued at approximately $6.5 billion. That purchase was about consolidating developer-focused authentication tools. The Permiso deal, at $200 million, targets a threat category that barely existed when Auth0 was acquired: autonomous AI agents operating at scale.

Notable clients like Autodesk already use Permiso’s platform to gain visibility into identity usage and security across their systems.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.