Identity & Access Okta to Acquire Identity Threat Detection Firm Permiso The deal extends Okta’s reach beyond identity management and into the realm of security operations, positioning the company to compete more directly on identity threat detection and response. By SecurityWeek News | July 30, 2026 (3:10 PM ET) Flipboard Reddit Whatsapp Whatsapp Email Okta on Thursday said it has signed a definitive agreement to acquire Permiso Security , a cloud-native identity security platform that specializes in detecting and mitigating threats across human, non-human, and agentic identities in multi-cloud environments. The deal extends Okta’s reach beyond identity management and into the realm of security operations, positioning the company to compete more directly on identity threat detection and response (ITDR). Once folded into Okta’s identity security fabric, Permiso’s technology is expected to help organizations close operational blind spots and extend runtime detection and response across every type of identity in their environment. “We’re thrilled to welcome Permiso to Okta as we help companies secure their agentic enterprises where humans, applications, service accounts, and AI agents work together,” said Ely Kahn, Chief Product Officer at Okta. He added that Permiso brings “proven identity threat detection and response capabilities, and an incredible threat research and security team that will advance Okta’s threat detection and prevention capabilities.” Following the close of the transaction, Okta plans to unify identity threat detection and identity posture management into a single security offering, built around several capabilities inherited from Permiso. Expanding Into the Security Operations Center Beyond product features, the acquisition is expected to expand Okta’s footprint into the core Security Operations Center (SOC), giving the company a stronger foothold to partner with enterprise CISOs on evolving SecOps challenges. Permiso’s threat research arm, P0 Labs, will be folded into Okta’s research capabilities, adding post-authentication insight into suspicious behavior across cloud and AI environments. Combined with Okta’s existing threat intelligence operation, the company says this will strengthen detections, threat hunting, and its product roadmap across the identity lifecycle. Deal Terms The transaction is expected to close in the third quarter of Okta’s fiscal year 2027, subject to customary closing conditions. Okta said the deal is not expected to affect the financial guidance it issued on May 27, 2026. Financial terms of the acquisition were not disclosed Advertisement. Scroll to continue reading. Related : Palo Alto Networks to Acquire CyberArk for $25 Billion Written By SecurityWeek News Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from SecurityWeek News In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws AegisAI Raises $36 Million for AI-Powered Email Security Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday Abstract Raises $25 Million to Expand Composable Security Operations Platform Assaf Keren Appointed New CISO of Meta Palo Alto Networks to Acquire Observability Platform Provider Embrace Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity Latest News Timeless Compliance: Why Better Questions Beat Bigger Frameworks DataBahn Raises $40 Million for Agentic Data Pipeline Management Discern Security Raises $13 Million in Series A Funding Cantina Emerges From Stealth With $8 Million in Funding Onyx Security Raises $113 Million to Control AI Agents in the Enterprise ‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale Semiconductor Firm Analog Devices Discloses Data Breach Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms Trending Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Webinar: Rethinking Cyber Defense for AI-Speed Attacks August 18, 2026 Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default. Register Virtual Event: CodeSecCon 2026 August 19, 2026 CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Register People on the Move Alex Levinson has been named Executive Director at the National Collegiate Cyber Defense Competition. Hack The Box has appointed Konstantinos Dolkas as CTO and has promoted Christine Bartlett to CMO. The Department of Energy has appointed Andrew McClure as Director of the Office of Cybersecurity, Energy Security, and Emergency Response (CESER). More People On The Move Expert Insights Timeless Compliance: Why Better Questions Beat Bigger Frameworks The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change. (Matt Honea) Is Patching Dead? Vulnerability Management in the Post-Mythos Era You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win. (Danelle Au) When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. (Torsten George) Legacy Systems, Real-World Impacts: The Reality of OT Security Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts. (Tod Beardsley) The Shift Toward Business-Aligned Risk Management Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences. (Steve Durbin) Flipboard Reddit Whatsapp Whatsapp Email