Key takeaways
- Okta agreed to acquire Permiso Security for just under $200 million in an almost all-cash deal, with closure expected in Q3 of fiscal 2027.
- Permiso specializes in detecting threats exploiting stolen identities in cloud environments and recently expanded to monitor AI agents through its SandyClaw platform.
- The acquisition reflects enterprises' growing need for continuous identity threat monitoring beyond initial login as they deploy autonomous software systems.
Okta announced on Thursday that it would acquire Permiso Security, an artificial intelligence-focused identity security startup, in a deal valued at just under $200 million and structured predominantly as a cash transaction. The acquisition is expected to close during the third quarter of Okta’s fiscal year 2027, subject to standard closing conditions. Okta did not officially disclose deal terms, but TechCrunch learned the valuation from a source familiar with the agreement. When contacted, an Okta spokesperson declined to comment on specifics but did not dispute the reported price.
The transaction reflects a strategic pivot underway at Okta and other identity management vendors. These companies are moving beyond the traditional model of securing the moment when a user logs in to instead focus on continuously monitoring what users, applications, and increasingly—artificial intelligence agents do once they possess authorized access to network systems. The shift toward securing machine identities has intensified competition among identity management players as enterprises deploy autonomous software systems more deeply into their operations.
Understanding Permiso’s Mission
Permiso, which launched from stealth in 2022, develops software that helps security teams identify suspicious behavior within cloud environments after access credentials have already been granted. The startup specializes in detecting attacks that exploit stolen or compromised identities as adversaries move laterally through cloud infrastructure. This focus on post-authentication threat detection addresses a critical vulnerability: the moment someone or something gains initial access to a network is often when threats are hardest to detect.
The company has recently broadened its platform to monitor artificial intelligence agents and other non-human identities in addition to traditional user accounts and applications. This expansion puts Permiso at the intersection of two urgent enterprise concerns: cloud security and artificial intelligence governance.
SandyClaw: Testing AI Agent Behavior
In April, Permiso unveiled SandyClaw, a purpose-built platform for analyzing the capabilities and behaviors of artificial intelligence agents within a sandboxed environment before deployment to production systems. The tool is engineered to spot potentially malicious actions or unexpected outputs from AI agents, enabling security teams to prevent problematic deployments before they occur in live environments. SandyClaw exemplifies Permiso’s strategic focus on the emerging threat landscape surrounding autonomous machine entities with access to enterprise systems.
The Founding Team and Expertise
Permiso was co-founded by Paul Nguyen and Jason Martin, both former executives at FireEye, a well-known cybersecurity company specializing in threat research and incident response. Their backgrounds shaped Permiso’s approach to identifying and responding to sophisticated identity-based attacks in cloud environments, combining deep technical knowledge with practical experience responding to real-world breaches.
Permiso’s Funding History and Valuation Growth
Prior to the Okta acquisition, Permiso had raised approximately $29 million in total funding. The company’s most significant round came in April 2024, when Altimeter Capital led an $18.5 million Series A investment that valued Permiso at roughly $80 million on a post-money basis. The acquisition price of just under $200 million means Permiso’s valuation more than doubled in under two years from emergence as a public company.
This trajectory signals strong confidence among investors and acquirers in the market opportunity for artificial intelligence agent security and machine identity protection. The rapid valuation expansion also demonstrates how quickly the threat landscape has shifted to include autonomous software systems.
Okta’s Strategic Positioning
Ely Kahn, Okta’s chief product officer, explained the acquisition’s strategic logic in a formal statement: “Permiso will extend Okta’s identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta’s threat detection and prevention capabilities.”
The statement reveals Okta is acquiring both specific technical capabilities—identity threat detection and response functionality—and human talent, particularly Permiso’s accumulated threat research expertise. The deal enables Okta to offer a more comprehensive identity security solution spanning initial authentication and the continuous monitoring phase afterward.
The Evolution of Identity Security
Okta’s acquisition reflects a fundamental transformation in enterprise identity security priorities. Historically, identity security focused on controlling access: strong passwords, multi-factor authentication, and access control mechanisms designed to prevent unauthorized entry into systems.
As enterprises increasingly deploy artificial intelligence agents, automated scripts, and other autonomous systems with persistent credentials, the identity security problem becomes substantially more complex. These machine identities lack human oversight in the traditional sense. They operate autonomously and often run continuously. Securing them demands different technical approaches than securing human user access requires.
This evolution also reflects a security philosophy shift: the assumption that systems behind a firewall are inherently safe has given way to zero-trust models that assume breach as a starting point and focus on detecting anomalous behavior after access has been granted. In this paradigm, identity has become the primary security perimeter—and Okta is betting that artificial intelligence agents will represent a significant and growing component of that perimeter.
What the Deal Means Going Forward
Integration and Product Roadmap
The acquisition is expected to close in Q3 of Okta’s fiscal 2027. Once completed, Permiso’s technology and team will be integrated into Okta’s broader identity security platform, likely focusing on combining Permiso’s cloud threat detection capabilities with Okta’s existing authentication and authorization systems.
Implications for Customers
For Okta customers, this acquisition could eventually unlock new capabilities for monitoring and securing artificial intelligence agents within their identity governance frameworks. For existing Permiso customers, the Okta backing provides access to greater resources but also raises questions about how the product roadmap evolves as part of a larger organization.
Frequently Asked Questions
What is the value of Okta's acquisition of Permiso?
Okta agreed to acquire Permiso Security for just under $200 million in an almost all-cash deal, with closure expected in the third quarter of Okta's fiscal 2027.
What does Permiso's SandyClaw platform do?
SandyClaw, introduced in April, is a platform designed to analyze artificial intelligence agent capabilities and behaviors in a sandboxed environment before deployment to identify potentially malicious actions or unexpected outputs.
How much funding had Permiso raised before the acquisition?
Permiso had raised approximately $29 million in total funding, including an $18.5 million Series A round in April 2024 led by Altimeter Capital that valued the company at roughly $80 million post-money.
