Okta has acquired Permiso, a security startup focused on identity threats, for $200 million. The deal, announced Tuesday, brings the smaller company's technology into Okta's product lineup as the identity giant looks to counter a rising wave of attacks powered by artificial intelligence.
Why Permiso
Permiso builds tools that detect suspicious behavior inside cloud environments and identity systems. The startup's software watches for signs of compromised credentials, unusual access patterns, and automated attacks — the kind of threats that have become harder to spot as attackers lean on AI to mimic legitimate user activity.
Okta, which already sells identity and access management products, said the acquisition will help it offer customers a more complete picture of who — or what — is trying to get into their systems. The company has been under pressure to improve its security posture after a series of high-profile breaches tied to identity weaknesses.
The $200 million deal
The purchase price is $200 million, a figure that reflects the growing value of security startups that specialize in identity protection. Okta will pay in a mix of cash and stock, according to the company. The deal is expected to close in the current quarter, subject to regulatory approvals.
Permiso was founded in 2021 and had raised roughly $50 million from investors including Ballistic Ventures and Foundation Capital. Its technology will be integrated into Okta's existing platform, though the company said it will continue to support Permiso's standalone customers.
For Okta's existing customers, the acquisition means they will eventually get access to Permiso's detection and response capabilities without having to buy a separate product. The startup's tools are designed to spot identity-based attacks in real time, including those that use AI to generate convincing login attempts or to move laterally across a network after gaining a foothold.
Okta said the combination will allow it to offer a more proactive approach to identity security — one that doesn't just verify who someone is but also watches for signs that a legitimate account has been hijacked. The company plans to roll out the new features over the next year.
The deal also signals that Okta is betting big on the idea that identity threats will only grow more sophisticated. With AI tools becoming cheaper and easier to use, attackers are increasingly automating the reconnaissance and credential-stuffing phases of their operations. Okta's acquisition of Permiso is a bet that the best defense is a detection system that can keep up with machines.
