AIToday
AI Safety & AlignmentAI Business & IndustryTechCrunch AIPublished: Jul 31, 2026, 04:01 JST4 min read

Okta buys AI security startup Permiso for about $200M

Okta buys AI security startup Permiso for about $200M

Key takeaway

  • Okta has agreed to acquire Permiso Security, an AI identity security startup, for just under $200 million in an almost all-cash deal expected to close in the third quarter of Okta's fiscal 2027.

  • The acquisition reflects growing enterprise demand to secure AI agents and other machine identities as companies embed autonomous software deeper into operations.

  • Permiso specializes in detecting suspicious activity and attacks in cloud environments after access has been granted, and recently expanded to monitor AI agents through its SandyClaw platform.

3 Key Points

  1. What happened

    Identity management company Okta agreed to acquire Permiso Security, an AI identity security startup, in an almost all-cash deal valued at just under $200 million. The deal is expected to close in the third quarter of Okta's fiscal 2027.

  2. Why it matters

    Okta is expanding beyond verifying user login to continuously monitoring what users, applications, and AI agents do after gaining access to networks. As enterprises deploy autonomous software more widely, demand to protect AI agents and other machine identities is expected to grow, and this acquisition strengthens Okta's ability to detect and respond to identity-based threats.

  3. What to watch

    Permiso, founded by former FireEye executives, recently introduced SandyClaw in April, a platform designed to analyze AI agent skills in a sandboxed environment to identify malicious behavior before deployment. The startup has raised about $29 million to date, including an $18.5 million Series A round in April 2024 that valued it at about $80 million post-money.

In Depth

Read the full story

Okta, a leader in identity management software, has agreed to acquire Permiso Security, an AI-focused identity security startup, in a deal valued at just under $200 million and structured as an almost all-cash transaction. The acquisition, announced on Thursday, is expected to close in the third quarter of Okta's fiscal 2027. While Okta did not formally disclose deal terms, a source with knowledge of the transaction confirmed the valuation to TechCrunch; when asked about the $200 million figure, Okta's CEO Todd McKinnon did not dispute it, though the company declined to comment on specific deal terms.

Permiso, a Palo Alto-based startup founded by former FireEye executives Paul Nguyen and Jason Martin, emerged from stealth in 2022 with a focused mission: helping security teams detect suspicious activity in cloud environments after users or applications have been granted access. The startup has since expanded its platform to monitor AI agents and other machine identities. In April, Permiso introduced SandyClaw, a platform designed to analyze AI agent skills in a sandboxed environment to identify malicious behavior before deployment. The company specializes in detecting attacks that use stolen or compromised identities to move through cloud infrastructure—a vulnerability that has become more pressing as enterprises embed AI deeper into operations.

Okta's acquisition reflects a fundamental evolution in identity security. Rather than focusing solely on verifying users at login, identity management companies are now working to continuously monitor what users, applications, and AI agents do once they have authorized access to network environments. This shift has intensified competition to secure machine identities as autonomous software becomes more prevalent. Okta's chief product officer Ely Kahn said in a prepared statement that "Permiso will extend Okta's identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta's threat detection and prevention capabilities." The deal strengthens Okta's push into securing AI agents and other non-human identities alongside its core identity management business.

Permiso had raised about $29 million in funding to date before the acquisition, including an $18.5 million Series A round in April 2024 led by Altimeter Capital. That funding round valued the startup at about $80 million on a post-money basis, suggesting Okta acquired the company at a modest premium less than five months later—a testament to the perceived value of Permiso's technology and security expertise as enterprises accelerate their deployment of AI agents.

Context & Analysis

Okta's $200 million acquisition of Permiso reflects a broader shift in identity security: as enterprises increasingly deploy AI agents and autonomous software, the risk surface has expanded beyond protecting human users to securing machine identities. Permiso, which emerged from stealth in 2022, was well-positioned in this emerging category. Founded by former FireEye security executives Paul Nguyen and Jason Martin, the startup built expertise in detecting attacks that exploit stolen or compromised identities moving through cloud infrastructure—a critical vulnerability as AI systems gain access to sensitive environments. By acquiring Permiso, Okta signals that identity management companies must evolve beyond their traditional login-verification role to provide continuous monitoring and threat detection across all authenticated actors, human and machine alike.

The timing of the deal underscores how competitive this frontier has become. Permiso's introduction of SandyClaw in April—just months before the acquisition announcement—demonstrated the startup's ability to innovate in AI agent security, analyzing agent behavior in a controlled environment before live deployment. For Okta, this acquisition brings both proven threat-detection technology and a specialized security research team to strengthen its threat prevention capabilities. The almost all-cash structure and relatively low valuation compared to Permiso's April 2024 post-money valuation of about $80 million also suggests Okta negotiated favorable terms, though the startup's specialized technology and threat expertise clearly justified the strategic investment.

FAQ

When will the Okta-Permiso deal close?
The deal is expected to close in the third quarter of Okta's fiscal 2027, subject to customary closing conditions.
What does Permiso do?
Permiso develops software that helps security teams detect suspicious activity in cloud environments after users or applications have been granted access. The startup has expanded to monitor AI agents and other machine identities, and in April introduced SandyClaw, a platform designed to analyze AI agent skills in a sandboxed environment to identify malicious behavior before deployment.
How much funding had Permiso raised before the acquisition?
Permiso had raised about $29 million to date, including an $18.5 million Series A round in April 2024 led by Altimeter Capital, which valued the Palo Alto-based startup at about $80 million post-money.

Get the latest AI Safety & Alignment news every morning

AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.

Free · takes 30 seconds · unsubscribe anytime

Related Articles

Next articleApple researchers show UMAP's hidden kNN graph beats standard methods for data analysis

The AI news that matters, in one minute each morning.

Sign up free