Okta to Buy AI Identity Security Startup Permiso for ~$200M

The interesting part of Okta's move on Permiso Security isn't the price. It's what Okta is admitting the identity layer doesn't do anymore. According to TechCrunch, Okta has agreed to buy the Palo Alto startup in an almost all-cash deal valued at just under $200 million, with a source with knowledge of the deal confirming the number. The transaction is expected to close in the third quarter of Okta's fiscal 2027.

Permiso emerged from stealth in 2022, co-founded by former FireEye executives Paul Nguyen and Jason Martin, and specializes in detecting suspicious activity in cloud environments after users or applications have already been granted access. In April the company launched SandyClaw, a platform designed to analyze AI agent skills in a sandboxed environment to identify malicious behavior before deployment. Permiso had raised about $29 million to date, including an $18.5 million Series A in April 2024 led by Altimeter Capital that valued the company at roughly $80 million on a post-money basis, so the reported price is a real step up from that last round.

The reason this matters is the shape of identity security going forward. Okta's chief product officer Ely Kahn said Permiso 'will extend Okta's identity security fabric with proven identity threat detection and response capabilities.' In plainer terms, letting the right entity in the door was the whole game for a while; now the entity might be an autonomous agent acting on someone's behalf, and watching what it does once it is inside is a separate discipline. Buying rather than building is Okta's shortcut to that discipline.

The honest caveat is that the ~$200 million figure comes from a single source rather than a disclosed price, and specifics like retention terms for Permiso's founders and threat research team, or whether SandyClaw stays a standalone product, are not in the reporting. Take the number as reported, not settled. What the piece also doesn't give you is how Okta plans to price post-login AI agent monitoring against native cloud provider offerings, which is where this fight actually gets decided.

If the AI agent identity thesis holds, this deal gives Okta a head start on rival identity and cloud security vendors circling the same category, and it hands enterprise buyers a single-vendor story that covers both who gets in and what they do afterwards. That's the bet worth watching.