Okta has agreed to acquire identity security startup Permiso Security as businesses deploy more AI agents, applications and other non-human identities across their operations. The companies did not disclose the financial terms, although TechCrunch reported that the almost all-cash transaction is valued at just under $200 million.
The acquisition is expected to close during the third quarter of Okta’s 2027 fiscal year, subject to customary conditions. Permiso’s identity threat detection and response technology will become part of Okta’s broader identity security platform.
Permiso Monitors Activity After Login
Traditional identity management systems largely focus on confirming that a person or application is permitted to access a service. Permiso extends that protection by monitoring what human users, applications, service accounts and AI agents do after authentication.
Its platform connects activity across identity providers, cloud infrastructure, software services and other environments through what the company calls a Universal Identity Graph. Security teams can use that information to identify compromised credentials, excessive permissions and unusual behaviour across human and non-human accounts.
Okta said the acquisition would add identity threat detection and response capabilities to its identity security fabric. These tools are designed to help customers investigate and contain compromised or incorrectly configured AI agents before they gain wider access to company systems.
SandyClaw Tests AI Agent Skills
Permiso launched SandyClaw in April as a security-testing platform for AI agent skills and prompts. It runs the software inside a sandbox and records its behaviour at the language-model and operating-system levels.
The system is intended to identify malicious instructions, data theft and other supply-chain threats before a skill is deployed in a company’s production environment. Okta plans to combine SandyClaw with its tools for discovering, governing and securing AI agents throughout their operating lifecycle.
Okta Expands Beyond Access Management
The deal reflects a broader shift in identity security as autonomous software gains permission to access files, databases and business applications without constant human supervision. These agents can inherit the permissions of the applications or service accounts that operate them, increasing the potential impact of a compromised identity.
Permiso was founded by former FireEye executives Paul Nguyen and Jason Martin and emerged from stealth in 2022. It has raised about $29 million, including an $18.5 million Series A round led by Altimeter Capital in 2024.
Okta Chief Product Officer Ely Kahn said Permiso would strengthen the company’s threat research, detection and prevention capabilities as customers begin managing workforces made up of both people and autonomous software.
Featured image credits: Atlas Digital Group
For more stories like it, click the +Follow button at the top of this page to follow us.