Okta buys Permiso as agent identities become a security target

Okta has agreed to acquire Permiso Security, an AI identity security startup, as enterprises look for better ways to monitor non-human identities. TechCrunch reports that the deal is valued at just under $200 million, citing a source familiar with the transaction.

Permiso builds tools that detect suspicious activity in cloud environments after a user, application, or machine identity has already gained access. More recently, it has expanded toward AI agents, including SandyClaw, a sandboxing product designed to analyze agent skills for malicious behavior before deployment.

The acquisition fits a shift in identity security. Companies are no longer only trying to verify people at login; they also need to understand what software agents and services do after access is granted.

Okta did not disclose deal terms. The company said the transaction is expected to close in the third quarter of its fiscal 2027, subject to customary conditions. The move gives Okta a research and detection team focused on threats that use compromised identities to move through cloud systems.