“Okta has acquired identity threat detection startup Permiso for approximately $200 million, bolstering its ability to secure non-human identities like AI agents across cloud environments. As enterprises deploy more autonomous AI systems, managing and monitoring their access privileges has become a critical security challenge. This deal positions Okta at the intersection of identity management and AI security, a fast-growing market segment.”
Key Takeaways
- Okta acquired AI security startup Permiso for approximately $200 million, according to a source familiar with the deal.
- Permiso specialises in identity threat detection, focusing on non-human identities such as AI agents and service accounts in cloud environments.
- The acquisition comes as enterprises face rising pressure to secure autonomous AI agents that operate with significant system access.
Okta snaps up Permiso to tackle the growing threat of unsecured AI agents.
trending_upWhy It Matters
As enterprises rapidly adopt AI agents that autonomously access data, APIs, and cloud services, traditional identity security tools — built for human users — are struggling to keep pace. Non-human identities now vastly outnumber human ones in many organisations, creating a largely unmonitored attack surface. Okta's acquisition of Permiso signals that identity platforms must evolve beyond workforce logins to govern machine and AI-driven access. Competitors like CrowdStrike and Wiz are also moving into this space, suggesting consolidation around AI agent security will accelerate. Enterprises deploying agentic AI systems should expect identity governance to become a core compliance and risk management requirement in the near term.
FAQ
What does Permiso actually do?
Permiso is a cloud security startup specialising in detecting threats tied to non-human identities — such as AI agents, service accounts, and API keys. It monitors how these identities behave across cloud environments to flag suspicious or unauthorised activity.
Why are non-human identities a security concern for AI?
AI agents often require broad access to systems, data, and APIs to perform tasks autonomously, making them high-value targets if compromised. Unlike human users, they typically lack granular monitoring, making it harder to detect when their credentials are stolen or misused.
How does this acquisition change Okta's product offering?
Okta has historically focused on managing human user identities and access. Adding Permiso's technology extends its platform to detect and respond to threats involving machine and AI-driven identities, which is increasingly critical as enterprises scale agentic AI deployments.
