Okta buys AI security startup Permiso; source says for about $200M

Okta Inc., a leading identity and access management provider, has agreed to acquire Permiso Security, an artificial intelligence-driven cybersecurity startup, in a deal valued at approximately $200 million. The acquisition, set to close in the third quarter of Okta's fiscal year 2027, marks a strategic expansion into securing AI agents and other machine identities as enterprises increasingly rely on autonomous systems. The agreement was confirmed by a source familiar with the deal, who indicated that the transaction is nearly entirely cash-based. While Okta did not officially confirm the valuation, a representative for the company did not challenge the $200 million estimate when approached for comment. The acquisition aligns with Okta’s broader goal of evolving from traditional user authentication to continuous monitoring of activities within enterprise networks. Permiso, founded in 2022, has developed technology aimed at identifying anomalous behavior in cloud environments after initial access has been granted. Its recent focus includes monitoring AI agents and other non-human entities, addressing growing concerns over threats posed by compromised machine identities. The startup’s co-founders include Paul Nguyen and Jason Martin, both formerly with FireEye, a well-known cybersecurity firm. In April of this year, Permiso launched SandyClaw, a platform designed to evaluate AI agent behaviors in isolated environments to detect potential malicious actions prior to deployment. This innovation positions Permiso as a key player in the emerging field of AI security, where threats are becoming more sophisticated and harder to detect using conventional methods. Okta’s decision to acquire Permiso reflects a broader industry trend toward enhancing security measures for machine identities. As organizations integrate AI more deeply into their operational frameworks, the need for robust protection against cyber threats involving these systems becomes critical. Okta aims to leverage Permiso’s expertise to bolster its existing identity management solutions with advanced threat detection and response capabilities. Ely Kahn, Okta’s chief product officer, stated that integrating Permiso’s technologies would enhance Okta’s ability to detect and prevent identity-based threats. He emphasized the value of Permiso’s research team and its established threat detection methodologies, which he believes will significantly contribute to Okta’s ongoing efforts to improve its security offerings. Prior to the acquisition, Permiso had secured around $29 million in funding, including an $18.5 million Series A investment in April 2024 led by Altimeter Capital. At the time of that round, the startup was valued at approximately $80 million on a post-money basis, indicating strong investor confidence in its growth prospects and technological innovations. The acquisition underscores the increasing importance of securing AI systems within corporate IT infrastructures. With the rise of autonomous processes and intelligent systems, the risk landscape is shifting, requiring new approaches to cybersecurity that address vulnerabilities in both human and machine identities alike. Okta’s move to acquire Permiso signals a commitment to staying ahead of these challenges and reinforcing its position as a leader in the identity and access management sector.