Okta to Acquire Permiso Security in Move to Bolster Identity Threat Detection Capabilities

SAN FRANCISCO (AP) — Okta Inc. announced Wednesday that it has signed a definitive agreement to acquire Permiso Security, an identity threat detection firm specializing in real-time monitoring and response for compromised credentials.

The acquisition marks a strategic expansion of Okta's security operations portfolio as the company seeks to compete more directly with established players in the Identity Threat Detection and Response (ITDR) market. By integrating Permiso's technology, Okta aims to close gaps in its current offerings regarding the detection of lateral movement and compromised user accounts within enterprise environments.

Under the terms of the deal, which was finalized on July 30, 2026, Permiso will operate as a subsidiary of Okta pending regulatory approval. The transaction is expected to enhance Okta's ability to provide end-to-end identity security solutions, moving beyond traditional access management into active threat hunting and incident response.

Permiso Security has gained recognition in the cybersecurity sector for its approach to analyzing user behavior across cloud applications without requiring agents on endpoints. Its platform focuses on identifying anomalies that indicate an attacker is leveraging stolen credentials to move laterally through a network. Okta stated that combining Permiso's detection engine with its existing identity infrastructure will allow customers to identify and neutralize threats faster.

Industry analysts view the deal as a direct challenge to competitors who have been building proprietary ITDR capabilities or forming partnerships in this space. The cybersecurity market has seen increased investment in identity-centric security following a surge in attacks targeting cloud-based authentication systems over the past two years.

Okta executives indicated that the Permiso team will be fully integrated into Okta's product and engineering groups immediately upon closing. No changes to existing customer contracts or service level agreements are expected during the transition period, though specific integration timelines remain under review.

The deal comes as enterprises increasingly struggle with sophisticated phishing campaigns and credential stuffing attacks that bypass traditional multi-factor authentication measures. By acquiring Permiso, Okta is positioning itself to offer a unified platform for both managing identity access and detecting threats associated with those identities in real time.

Financial terms of the acquisition were not disclosed by either company. Both organizations stated they are working toward closing the transaction within the next quarter, subject to customary regulatory conditions and shareholder approvals where applicable.

Questions remain regarding how Okta plans to price the new combined ITDR capabilities for existing customers versus those currently using standalone Permiso solutions. Additionally, industry observers are watching closely to see if other major identity providers will respond with similar acquisitions or accelerated product development in response to this consolidation.