Okta has signed an agreement to acquire Permiso Security, a startup based in Palo Alto, California, for just under $200 million, according to a source with knowledge of the deal. TechCrunch

Okta's official press release did not disclose financial terms. Okta An Okta spokesperson declined to comment on specifics when asked by TechCrunch but did not dispute the approximately $200 million figure. The transaction is structured as almost all-cash and is expected to close in the third quarter of Okta's fiscal year 2027, subject to customary closing conditions. TechCrunch

Permiso launched publicly in 2022, co-founded by former FireEye executives Paul Nguyen and Jason Martin. The company builds software that helps security teams catch hackers who have stolen someone's login details and are using them inside cloud systems. Think of it like a bank card that has been stolen: the thief does not need to break into the bank, because they already have a valid card. Permiso's job is to notice that the card is being used in a strange way. The company raised approximately $29 million in total funding, including an $18.5 million Series A in April 2024 led by Altimeter Capital, which valued the company at roughly $80 million. TechCrunch

In April 2026, Permiso introduced a platform called SandyClaw that tests AI agents in a safe, isolated environment before they are put to work in live company systems. The idea is to catch any malicious behavior in advance. This matters because companies are starting to use autonomous AI agents that can access systems and data on their own, and if one of those agents is compromised or built to do harm, it becomes a security risk in itself. TechCrunch

Okta's chief product officer Ely Kahn stated that Permiso will extend Okta's identity security platform with the ability to detect and respond to identity-based threats. Okta Permiso confirmed the acquisition on its own website, directing readers to Okta's announcement for further information. Permiso

Okta's main business is identity management: confirming who a user is and deciding what they can access. Permiso's technology adds a layer on top of that, watching for situations where a legitimate user's account is acting strangely inside cloud systems, which could mean the account has been taken over by a hacker. By bringing that capability in-house, Okta expands from simply managing logins to continuously watching for signs that those logins have been compromised.

The SandyClaw part of the deal looks further ahead. Most companies have not yet deployed AI agents widely enough to worry about securing them, because most are not yet using AI agents at scale in sensitive production environments. Okta is buying this capability before the market is fully developed, which brings both opportunity and risk. The risk is that demand for this kind of security grows more slowly than expected, or that large cloud providers build similar tools into their own platforms.

For Permiso's investors, the deal is a good outcome. A roughly $200 million acquisition against $29 million in total funding is a strong return for a company that had been operating for about four years. The transaction also reflects a broader trend of consolidation in the identity security space, where smaller, specialized companies are increasingly bought up by larger platform vendors rather than staying independent.

Permiso won a 2026 SC Award, noted on its homepage alongside the acquisition notice. Permiso

The broader context here is that this deal follows a pattern we have seen across many technology cycles: a large platform company buys a specialized security tool to strengthen its own product and keep competitors at bay. What is genuinely new is the focus on securing AI agents. Whether that capability becomes something every company needs or stays a niche offering depends on how quickly autonomous AI agents become a routine part of how businesses operate, a question that, as of mid-2026, does not yet have a clear answer.