AI
Okta Acquires AI Security Firm Permiso for ~$200M to Strengthen Machine Identity Protection
The identity management giant is doubling down on protecting AI agents and autonomous systems as enterprises increasingly embed machine intelligence into their operations.
TechCrunch — AI
Okta has announced it will acquire Permiso Security, an AI-focused identity security startup, in a deal worth approximately $200 million—structured almost entirely in cash. The transaction underscores the identity management sector's shift toward defending not just human users, but also autonomous software and machine identities as they become more central to enterprise operations.
Background on Permiso#
Permiso Security emerged from stealth in 2022 to address a critical gap in cloud security. Founded by former FireEye executives Paul Nguyen and Jason Martin, the startup built tools that help security teams detect unusual behavior in cloud environments after access has already been granted—moving beyond the traditional perimeter defense. The Palo Alto-based company has since expanded its scope to monitor AI agents and other non-human identities, a growing concern as businesses roll out autonomous tools at scale.
What's Changing in Identity Security#
The nature of identity threats has evolved significantly. Rather than simply verifying who someone is at login, modern security teams must now continuously track what users, applications, and increasingly AI agents do once inside a network. This ongoing monitoring represents a fundamental shift in how enterprises protect their infrastructure.
Permiso's approach focuses on identity threat detection and response, particularly for scenarios where attackers have compromised or stolen credentials to navigate cloud systems undetected. In April, the company introduced SandyClaw, a sandbox platform that tests AI agent capabilities to identify potentially malicious behavior before agents are deployed.
Why Okta Made the Move#
Okta frames the acquisition as an extension of its identity security platform. The deal provides what the company calls "proven identity threat detection and response capabilities" alongside Permiso's security research team—assets that will strengthen Okta's threat detection capabilities across human and machine identities alike.
The broader context is clear: as enterprises deploy more autonomous systems, the ability to defend machine identities has become strategically important. Okta is betting that this market will expand considerably.
