Okta Is Buying Security Firm Permiso to Catch Identity-Based Attacks
The deal would push Okta beyond managing who can log in and into spotting when a legitimate login is being used to do something it shouldn't.
Key points
- Okta, a company that controls who is allowed to sign in to corporate software, has agreed to acquire Permiso, a firm that watches for suspicious behaviour inside those same accounts.
- The deal moves Okta into identity threat detection and response, meaning tools that raise an alarm when a valid account starts acting oddly.
- No purchase price or regulatory approval timeline has been disclosed.
- The acquisition positions Okta to compete with vendors that already bundle login control and suspicious-activity monitoring in one product.
Okta manages identity: it is the gatekeeper that decides whether you are who you say you are when you log in to your company's software. Permiso does something different. It watches what happens after you get in.
Why does that distinction matter?
Most breaches don't start with someone kicking down a digital door. They start with a stolen password or a hijacked session token, a small piece of data your browser holds to prove you already logged in, that lets a criminal walk straight through the front gate.
Once inside, that criminal looks just like a normal employee. Standard login controls won't catch them. That is exactly the gap Permiso was built to close, watching for behaviour a real employee would be unlikely to perform: downloading thousands of files at 3 a.m., or exporting a customer list minutes after logging in from an unfamiliar country. Permiso researchers have form here; we covered their work on credential theft via ChatGPT's Markdown renderer back in May.
As SecurityWeek first reported, the deal extends Okta's reach directly into that detection space.
What changes for organisations that use Okta?
Nothing changes immediately. Acquisitions move through regulatory review and integration planning before product changes reach customers. The longer-term promise is a single platform that both controls access and watches for misuse of it.
For organisations on neither product yet, this is a consolidation signal. The identity security market is bundling fast: just weeks ago we reported on Oak raising $60 million to replace fragmented identity tools with a single platform. Buying two separate products to cover login control and post-login monitoring may simply become the old way of doing things.
Common questions
Does this affect ordinary employees who use Okta to log in to work?
Not directly, and not soon. Integration takes time. Day-to-day login screens are unlikely to change in the near term.
Should companies worry that their login data is being shared with a new entity?
Permiso analyses behaviour patterns rather than storing raw passwords. Even so, any organisation with a data-handling agreement with Okta should check what that agreement says about data use when Okta acquires a new subsidiary. Standard contract review is reasonable; alarm isn't warranted at this stage.
