
Okta buys Permiso Security to add AI agent threat detection and identity threat response. The deal, expected to close in Q3 fiscal 2027, extends Okta's identity security fabric.
Okta is buying Permiso Security, a startup focused on identity threat detection and response. The deal will add Permiso's behavioral analytics and risk signals to Okta's identity management platform, the company said Thursday.
The acquisition is expected to close in the third quarter of Okta's fiscal 2027. Financial terms were not disclosed.
Okta Chief Product Officer Ely Kahn said the company is working to secure what he called the "agentic enterprise" – environments where humans, applications, service accounts and AI agents all operate together. "Permiso will extend Okta's identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team," Kahn said in a press release.
The purchase comes as enterprises grapple with a new identity challenge: distinguishing legitimate AI agents from malicious bots. A recent PYMNTS Intelligence report noted that as digital commerce becomes more automated, companies need to verify the identities of AI agents acting on behalf of customers. Okta CEO Todd McKinnon, speaking after the company's first-quarter fiscal 2027 results in May, said AI agents are creating a "wave of identities" that must be secured.
Permiso co-founders Jason Martin and Paul Nguyen both framed the deal as a way to scale their technology. Martin said joining Okta means Permiso's work "reaches far more organizations than we could have on our own." Nguyen added that combining the two companies' capabilities will help security teams "gain deeper visibility into identity risks, respond faster to threats, and strengthen their overall security posture."
For Okta, the deal fills a specific gap. The company already offers identity posture management – tools to assess and improve security configurations. Permiso adds real-time threat detection and automated response, particularly around AI agent behavior. Okta plans to unify both functions into a single security offering.
The broader market for identity security is shifting as AI agents proliferate. Enterprises are moving beyond human-centric identity management to cover machine identities, service accounts and AI-driven workflows. Okta's move mirrors a trend across the cybersecurity industry: vendors are racing to build products that can monitor and respond to threats from non-human actors. The company's strategy positions it to serve as what McKinnon called the "unified control plane" for the secure agentic enterprise.
Kahn said Permiso's team brings deep threat research expertise that will advance Okta's detection and prevention capabilities. The acquisition is subject to customary closing conditions.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.