Okta announced on July 30, 2026, that it has signed a definitive agreement to acquire Permiso Security. The acquisition aims to bolster Okta's identity threat detection and response (ITDR) offerings by integrating Permiso's technology, which detects and mitigates threats across human, non-human, and AI agent identities. This move addresses the growing security challenges posed by the proliferation of AI agents and other autonomous systems operating in complex multi-cloud environments.
The rapid expansion of AI and machine identities has created new security vulnerabilities, with a significant percentage of executives reporting AI-related security incidents or near misses in the past year. Attackers are increasingly exploiting post-authentication techniques to bypass traditional defenses, necessitating a unified approach to identity security. Permiso's platform provides over 2,500 research-driven signals across more than 70 identity partners to identify risks such as overprivileged access, anomalous agent behavior, and policy violations in real time.
Ely Kahn, Chief Product Officer at Okta, stated that Permiso will extend Okta's identity security fabric with proven ITDR capabilities and a strong threat research team. Permiso's technology is designed to discover, protect, and respond to threats across every identity type. Once integrated, Permiso's capabilities will help Okta customers gain deeper visibility into identity risks, respond faster to threats, and strengthen their overall security posture. The acquisition is expected to close in the third quarter of Okta's fiscal year 2027, subject to customary closing conditions.
Permiso, founded in 2022 by former FireEye executives, emerged from stealth with a focus on securing AI agents. The company's platform offers capabilities such as agent discovery, runtime identity attribution, and behavioral anomaly detection for AI agents. Permiso's SandyClaw platform, introduced in April 2026, provides dynamic sandbox detonation for AI agent skills, aiming to detect supply chain attacks in AI agent skills and prompts before they reach customer environments. Autodesk has been a customer, deploying Permiso's platform to secure AI agents operating within its products, workforce, and cloud infrastructure.
The deal signifies Okta's strategic move to expand its security operations center (SOC) capabilities and move beyond identity management. The integration of Permiso's technology is expected to accelerate the identification and remediation of identity-driven risks, including excessive privileges, across the entire identity lifecycle. Okta plans to maintain Permiso's broad integration model, supporting best-of-breed tools and a diverse partner ecosystem.