On July 31, 2026, Beijing time, TechCrunch public subscription reported from 16:09:42 UTC on July 30 that identity management company Okta acquired artificial intelligence security startup Permiso. The title stated the transaction price as approximately US$200 million according to anonymous sources; the official pages of Okta and Permiso reviewed by this editor did not publish the transaction, nor did they confirm the amount. It is impossible to determine from the available materials whether the transaction has been signed, completed, or is at other stages.
Media metadata overview
A one-sentence summary provided by TechCrunch said the deal would bring identity threat detection capabilities to Okta as companies secure artificial intelligence agents and other non-human identities in cloud environments. This is a summary of the direction of the deal from media metadata, not a rationale for the deal released by the two companies. The summary did not list the form of the agreement, payment method, financing sources, approval arrangements, closing date or integration plan, nor did it explain how the reported approximately US$200 million was calculated, nor did it provide quotes from company personnel or links to official documents.
Okta announced in an official article published on April 29 that Okta for AI Agents is officially available, and wrote the product scope as discovering, accessing, protecting and governing artificial intelligence agents. The company said the product can cover different agent frameworks, cloud platforms and software-as-a-service environments, register self-built agents as official identities, and can also import known agents from external platforms. The above content was earlier than reported on this acquisition. It is Okta’s explanation of existing products and cannot be used to confirm the transaction.
Okta’s existing AI agent identity management capabilities
Access controls listed in the same Okta article include scoped short-lived tokens, on-demand managed secrets, governed service accounts, and management of application authorization and MCP server connections. The life cycle management part includes access application and review, deactivating abnormal agents, recording tool calls and authorization decisions, and sending telemetry data to security information and event management systems. The official article also lists threat detection as a project to be expanded in the coming months, without stating that Permiso is involved.
Permiso stated in an official article on May 14 that its artificial intelligence agent runtime security capabilities have been launched on the existing platform, and said that the relevant direction has been under construction for three years. The company describes the Universal Identity Graph as a system for tracking human and non-human identities across identity providers, cloud infrastructure, software-as-a-service applications and continuous integration and delivery processes, with artificial intelligence agents added to the same graph. What is described here is Permiso’s existing products, not a post-merger joint solution.
Permiso’s runtime security platform positioning
According to Permiso's product description, the platform can discover agents in clouds, software as a service, identity providers, code warehouses, functions, containers and virtual machines, and attribute each run, event, tool call and MCP call to a specific identity. The company also lists data access observation, behavioral anomaly detection, least privilege recommendations based on actual usage, approval gates for high-risk operations, and identity layer stop controls. These capabilities are self-reported by the company and there are no third-party testing or post-acquisition operational results from existing sources.
The links covered by the public materials of the two companies are adjacent but not the same. Okta's article focuses on agent identity registration, connection permissions, access life cycle and auditing; Permiso's article focuses on runtime ownership after login, tool and data observability, anomaly detection and handling. The TechCrunch summary summarizes the reported transaction as adding identity threat detection capabilities to Okta, but the official page does not explain whether the two sets of products will be merged, retained, or operated separately, nor does it provide a technical roadmap and timetable.
Team members and position status
The Permiso team page confirms that Jason Martin and Paul Nguyen are both co-founders and co-CEOs, Phani Modali is co-founder and senior vice president of engineering, and Ian Ahl is chief technology officer. The headlines and summaries provided in the TechCrunch feed make no mention of managers and do not disclose headcount, retention terms, reporting lines, office location changes or team whereabouts. The official Permiso page reviewed this time still uses existing positions to introduce the team and cannot be used to infer post-transaction employment arrangements.
The clearest limitation at present comes from the layer of information between sources: both the acquisition and the approximately US$200 million price come from TechCrunch media metadata, in which the amount is clearly attributed to anonymous sources; the official materials from Okta and Permiso only prove the existing product scope of both parties and Permiso’s current team positions, without confirming the transaction. The signing and delivery status, final consideration, payment structure, financing, consultants, regulatory procedures, employee processing, brand arrangements and product integration have not been disclosed. Subsequent conclusions need to be based on company announcements or regulatory documents.