Okta is moving to expand its capabilities in identity threat detection and response with plans to acquire Permiso Security, a startup that specializes in this fast-growing area of cybersecurity.
Okta Seals Deal for Permiso
The tech giant announced Thursday that it intends to purchase Permiso, though specific financial terms were not disclosed. Okta expects the transaction to close by the end of October.
Under the agreement, Permiso’s technology for detecting and mitigating threats across all types of identities will join the Okta identity security platform. This includes capabilities for human, non-human, and agentic identities.
Permiso provides critical risk signals and behavioral analytics that Okta intends to integrate into its existing infrastructure. The goal is to help partners and customers more effectively manage excessive privileges and accelerate the detection of identity-driven risks.
Security Operations Center Expansion
Okta officials noted the deal will push the platform beyond traditional identity management and deeper into the Security Operations Center. By adding these detection tools, the company aims to close long-standing gaps that are increasingly being targeted in modern cyberattacks.
Because nearly every attack exploits identity credentials or privileges in some way, even autonomous attacks launched by artificial intelligence agents will function similarly, according to Jason Martin, co-founder and co-CEO of Permiso.
Related: HPE VP Monica Gille Departs for New Chapter
Executives at Permiso warned that the widespread issue of excessive privileges leaves doors open for attackers. They suggested that without better control over identities, organizations face a significant risk of catastrophic security failures.
Industry analysts have observed that identity security is becoming a central component of AI strategies. As agents designed to access applications and data require the same governance as human users, the need for strict controls around these digital identities is rising rapidly.
The Okta-Permiso transaction follows another major deal this week. Data security startup Cyera announced Tuesday that it reached an agreement to acquire Oasis Security for $1 billion.
AI Agents and Identity Governance
The integration of Permiso’s tools is specifically designed to address the complex governance challenges posed by artificial intelligence agents. These autonomous programs are increasingly being deployed to access applications and data, necessitating the same rigorous security measures applied to human users. As the adoption of AI agents accelerates, the requirement for strict controls around their digital identities is rising rapidly. Identity security is becoming an increasingly central component of AI strategies across the industry.
Okta and Permiso executives highlighted that identities with excessive privileges represent a widespread problem. Companies that fail to address this issue effectively are leaving the door open for attackers to utilize these over-permissioned accounts to enable attacks. It is very likely going to be catastrophic if people do not get identity under control, executives warned during a previous interview.
Long-standing gaps in identity security are expected to see increasing exploitation in cyberattacks going forward, including in attacks that are autonomously executed by AI agents. Because nearly all attacks exploit identity and privileges in some way today, autonomous attacks will necessarily function the same way. The push for these agents places identity at the center of the security conversation, as these agents need an identity and the same governance, policies, and controls as humans.
