Okta has signed a definitive agreement to acquire Permiso Security, a cloud-native identity security platform that detects and mitigates threats across human, non-human, and agentic identities in multi-cloud environments. With the addition of new identity risk signals, behavioral analytics, and threat detections from Permiso, the Okta Platform will offer comprehensive identity threat detection and response (ITDR) capabilities, helping customers surface identity-related risk faster, remediate vulnerabilities and excessive privileges, and stop attacks across their technology stack.
The rapid growth of human, non-human, and agentic identities is creating new security challenges for enterprises, with 58% of executives reporting an AI-related security incident or near miss in the past year. As attackers increasingly leverage post-authentication techniques to bypass traditional defenses, security teams need a unified approach to identity to protect their organizations.
Permiso provides security teams with the tools to discover, protect, and respond to threats across every identity, using more than 2,500 research-driven signals across 70+ identity partners, such as overprivileged access, unused permissions, anomalous agent behavior and tool usage, policy violations, and high blast radius behavior, in real time. Once integrated with Okta’s identity security fabric, these capabilities will help organizations mitigate critical operational blind spots by extending advanced runtime detection and response across all identity types.
“We’re thrilled to welcome Permiso to Okta as we help companies secure their agentic enterprises where humans, applications, service accounts, and AI agents work together,” said Ely Kahn, Chief Product Officer, Okta. “Permiso will extend Okta’s identity security fabric with proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta’s threat detection and prevention capabilities.”
“Together, we’ll help security teams gain deeper visibility into identity risks, respond faster to threats, and strengthen their overall security posture,” added Paul Nguyen, Co-Founder of Permiso. “Combining our technology and expertise with Okta’s platform is what makes comprehensive identity threat protection possible at this scale.”
Advanced identity threat detection and response for the agentic era
Okta is unifying identity threat detection and identity posture management into a single security offering. Following the close of the transaction, Permiso’s capabilities will help Okta customers to:
- Advanced identity threat detection: Detect sophisticated attacks across all identity types by combining authentication signals with behavioral analytics.
- Enhanced visibility into agent behaviors: Continuously identify risky behavior across AI agents running locally, on SaaS platforms, or in Cloud Environments, machine identities, and privileged accounts.
- Dynamic sandbox for AI agent skills and prompts: SandyClaw is the first platform to bring dynamic sandbox detonation to AI agent skills. Leveraging dynamic behavioral analysis and a multi-engine detection stack, SandyClaw detects AI supply chain attacks in AI agent skills and prompts before they reach customer environments.
- Automated AI identity response: Investigate and contain compromised or misconfigured AI agents in real time, reducing the risk of unauthorized access and misuse.
