Okta Acquires Permiso Security for Identity Threat Detection

In a strategic move to fortify its identity security offerings, Okta Inc. has entered into a definitive agreement to acquire Permiso Security Inc., a startup specializing in detecting identity abuse across cloud environments and emerging AI agents. While the financial terms were not officially disclosed, industry sources indicate the transaction is valued at just under $200 million, primarily settled in cash. This acquisition is anticipated to conclude before the end of Okta's fiscal third quarter, aligning with the company's ongoing strategy to expand its security capabilities beyond its core identity and access management services.

Permiso Security, founded in 2020 by former FireEye Inc. veterans Jason Martin and Paul Nguyen, has carved a niche by developing technology that monitors and flags anomalous identity behavior. Their platform ingests data from a wide array of sources, including identity providers, SaaS applications, and infrastructure-as-code tools, to identify threats that deviate from normal usage patterns. The company boasts detection capabilities spanning over 2,500 research-driven signals across more than 70 identity partners, offering a comprehensive view of potential risks.

The startup gained early traction through its research arm, P0 Labs, which released several open-source tools designed to aid security professionals. Notable among these are CloudGrappler, a tool for identifying threat actor activity within AWS and Azure environments, and P0LR Espresso, which standardizes cloud logs from various providers to simplify analysis. More recently, Permiso expanded its focus to agentic security, developing features to monitor AI agents, AI builders, and AI users, including capabilities for agent and session discovery, runtime attribution, and the detection of over-privileged agents. Autodesk Inc. was an early adopter of these advanced agent security tools.

This acquisition marks Okta's second significant security-focused purchase in less than a year, following the acquisition of privileged access management firm Axiom Security Ltd. in August. The integration of Permiso's technology is expected to fill a critical gap in Okta's identity security fabric, particularly in runtime detection across cloud infrastructure and non-Okta controlled environments. While Okta already offers Identity Threat Protection and posture management, Permiso's capabilities will extend its threat detection and response mechanisms to assets outside of Okta's direct control plane.

Permiso Security had previously secured $28.5 million in funding, including a $18.5 million Series A round in April 2024 led by Altimeter Capital Management LP with participation from Point72 Ventures LLC. The company's client roster includes prominent names such as Nutanix Inc., Coupa Software Inc., and ACV Auctions Inc., underscoring the market's demand for advanced identity threat detection solutions.

Ely Kahn, Chief Product Officer at Okta, expressed enthusiasm for the integration, stating, "We’re thrilled to welcome Permiso to Okta as we help companies secure their agentic enterprises where humans, applications, service accounts, and AI agents work together. Permiso will extend Okta’s identity security fabric with proven identity threat detection and response capabilities." This move positions Okta to address the evolving threat vectors in an increasingly complex digital ecosystem, where the lines between human and machine identities are becoming increasingly blurred.