Company record · security vendor
Okta
Where Okta appears on the record (29)
Every page on CISO Tribune and its network that carries this company, 29 in all.
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2026 · Item 1C, filed March 5, 2026
- Compared with (26)
vs 1Kosmos, vs Amazon Web Services, vs Atos, vs Auth0, vs CyberTrust Consulting, vs Cybolt, vs Cyderes, vs Descope, vs DXC Technology, vs HID, vs I-TRACING, vs IBM, vs Judy Security, vs JumpCloud, vs Microsoft, vs Nametag, vs NCS, vs NewCore, vs Oloid, vs RSA Security, vs Secret Double Octopus, vs SecurEnvoy, vs Token, vs Transmit Security, vs WatchGuard Technologies, vs Wipro
- In the vendor directory (2)
- Workforce IAM and SSO vendors · primary category
- Customer identity and access management vendors · category
What the company sells
Okta sells a platform that secures identities, including the AI agents running across a business. Okta has over 20,000 enterprise customers.
Okta describes AI agents as a new kind of identity. Okta says AI adoption is outpacing controls. Okta names excessive agency, credential sprawl and lack of runtime visibility as the primary security risks of deploying autonomous AI agents, which can allow unmanaged agents to access sensitive enterprise data or execute unauthorized operations.
Okta describes the threat of autonomous agents granted overly broad permissions that let them read, write or execute destructive actions across enterprise tools beyond their intended operational scope. Okta describes malicious or malformed inputs that manipulate an agent into executing unauthorized API calls or exfiltrating data via third-party integrations. Okta describes the threat of compromising an agent's persistent memory or runtime context to alter its behavioral constraints and bypass safety guardrails. Okta describes enterprise teams spinning up unvetted agents with hardcoded, long-lived API keys. Okta says that without identity, most enterprises are left with gaps such as no inventory of which agents exist, who owns them or what they are authorized to do. Okta says that without identity, most enterprises have no record to produce when an auditor asks who authorized an action.
Okta says a named owner tied to a human gives accountability. Okta says permissions enforced at runtime give authorization. Okta says logged actions against a verified identity give an audit trail. Okta says runtime detection, access policies and a kill switch all depend on an identity foundation.
Okta for AI Agents extends discovery, lifecycle management and governance to every agent in the enterprise. Okta describes an offering that establishes secure permissions, verifies AI agent identity and audits automated actions. Okta describes tracking each agent, verifying ownership, governing access and shutting down rogue actions in real time. Okta describes verifying the agent, brokering credentials at runtime and logging each tool call without code changes to agents or tools. Okta describes tracing every action, delegating on a user's behalf, or running agents unsupervised, all under one auditable record. Okta describes tools for agentic commerce and for offering B2B agentic experiences at scale.
Okta's AI agent security stack is built around three capabilities across workforce and customer identity use cases. Okta makes the open Cross App Access standard part of core Okta SSO, giving every Okta customer an identity model for AI agents. Okta describes relationship-based access control (ReBAC) that evaluates and enforces permissions at the individual tool-call level in real time. Okta provides a control plane that spans multi-cloud environments, heterogeneous SaaS platforms and custom developer architectures.
Okta describes a single, secure ecosystem for an entire business that keeps employees, partners and AI agents connected. Okta describes an offering built for enterprise scale that centralizes business directories, streamlines access and is aimed at meeting global compliance standards. Okta describes authentication designed to protect user data. Okta has joined a cross-industry coalition to help organizations secure AI and govern the agentic stack. Okta has partnered with other organizations to co-author a blueprint that answers four questions about securing AI agents.[1][13][17][19]
- Categories
- Headquarters
- San Francisco, United States[2]
- Founded
- 2009[2]
- CISO on record
- Not yet on our record. Send a verified source
- Website
- okta.com
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
Okta for AI Agents extends discovery, lifecycle management and governance to every agent in the enterprise.
Cross App Access[19]
Cross App Access is an open standard that Okta makes part of core Okta SSO.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Okta's categories, then alphabetical. A list from the record, never a ranking.
On workforce iam and sso, Okta competes with Amazon Web Services, HID, JumpCloud, RSA Security, SecurEnvoy, Auth0, Descope, Nametag, Atos, CyberTrust Consulting and 14 more.
On customer identity and access management, Okta competes with Auth0, Descope, Transmit Security, Nametag and 1Kosmos.
What review platforms show
The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.
Named customers
Organizations publicly named as customers, each linked to the page that names it. Not a complete list, and not an endorsement.
Recent news
Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.
November 5, 2026
Okta announced that its board approved a share repurchase program authorizing purchases of up to $1 billion of its Class A Common Stock, effective immediately. Okta, Inc.[18]
September 22, 2026
Okta launched new Okta for AI Agents capabilities, including endpoint discovery of unmanaged agents, an agent gateway and agent-to-agent connection controls. Okta[9]
August 26, 2026
Okta reported second quarter fiscal 2027 revenue of $805 million, up 11% year over year, with subscription revenue of $793 million. Okta[10]
July 30, 2026
Okta signed a definitive agreement to acquire Permiso Security, a cloud identity threat detection company covering human, non-human and AI agent identities. Okta[11]
March 7, 2026
Okta and Datadog added rules from the Okta Security Detection Catalog to Datadog's Cloud SIEM out-of-the-box detections for identity-related threats. Okta Security[15]
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]okta.comOkta · okta.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [2]CompanyOkta · okta.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [3]DefaultOkta Investor Relations · investor.okta.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
- [4]okta.comOkta · okta.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
- [5]HubspotOkta · okta.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
- [6]HitachiOkta · okta.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
- [7]News corpOkta · okta.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
- [8]okta.comOkta · okta.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
- [9]Ai innovations oktane 2026Okta · okta.com · published September 22, 2026 · Tier A: the company, a regulator or a filing
- [10]Okta announces second quarter 2027 financial resultsOkta · okta.com · published August 26, 2026 · Tier A: the company, a regulator or a filing
- [11]Okta signs definitive agreement to acquire permiso securityOkta · okta.com · published July 30, 2026 · Tier A: the company, a regulator or a filing
- [12]Secure Identity for Employees, Customers, and AI | OktaOkta · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
- [13]Okta Security Trust Center | Powered by SafeBaseOkta · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
- [14]Why Work At Okta? | OktaOkta · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
- [15]Datadog and Okta Combine for New Customer DetectionsOkta Security · published March 7, 2026 · Tier A: the company, a regulator or a filing
- [16]Okta Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
- [17]Zero Trust Framework: Identity-powered Modern Security | OktaOkta · published August 10, 2026 · Tier A: the company, a regulator or a filing
- [18]Okta Announces $1 Billion Share Repurchase ProgramOkta, Inc. · published November 5, 2026 · Tier A: the company, a regulator or a filing
- [19]Okta Secures AI | Identity for the Agentic Enterprise | OktaOkta · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded September 27, 2026, expanded November 10, 2026 from the references above.
Work for Okta? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Security leadership
CISO Tribune has not yet recorded who holds the top security seat at Okta. We add a seat only from a verified source; if you have one, send it to the desk.
Questions CISOs ask about Okta
- What does Okta sell?
- Okta sells Okta for AI Agents and Cross App Access. Okta for AI Agents: Okta for AI Agents extends discovery, lifecycle management and governance to every agent in the enterprise. Cross App Access: Cross App Access is an open standard that Okta makes part of core Okta SSO.
- Who does Okta fit?
- From its own pages, Okta addresses organizations securing AI agents, whether those organizations deploy third-party solutions or code agents from scratch. Okta speaks to security teams that need control to contain blast radius and to builders who delegate user authority. Okta places its AI agent security stack across workforce and customer identity use cases. Okta addresses businesses that pursue agentic commerce or offer B2B agentic experiences. Okta's identity offering covers employees, partners and AI agents across an entire business. Okta describes an offering built for enterprise scale and global compliance standards.
- How does CISO Tribune file Okta?
- CISO Tribune files Okta under Workforce IAM and SSO, with Customer identity and access management as a secondary category.
- Where is Okta headquartered?
- Okta is headquartered in San Francisco, United States.
- When was Okta founded?
- Okta was founded in 2009.
- Who owns Okta?
- Okta is publicly listed on NASDAQ under the ticker OKTA.
- Which customers does Okta name?
- Organizations publicly named as Okta customers on CISO Tribune's record: Box, HubSpot, Hitachi, News Corp and Jamf.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.