Permiso

What the company sells

Permiso's Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. Permiso states that the chain stays unbroken from a human SSO login to a Lambda function to an MCP tool call.

Permiso states that modern threat actors are compromising identity providers and moving across environments through cloud service providers, SaaS apps and CI/CD pipelines. Permiso's library of integrations tracks activity across cloud environments. Permiso identifies the gap in agent security as what happens after authentication, where IdPs go blind to every tool call, MCP invocation and sub-agent spawn.

Permiso Discover gives enterprises an inventory of human, non-human and AI identities wherever they live. Permiso Protect continuously evaluates the risk posture of identities based on usage patterns, exposure and entitlements. Permiso Protect surfaces and quantifies high-risk identities, stale access and toxic combinations across human, vendor, AI and non-human accounts. Permiso's Universal Identity Graph inventories identities in all cloud environments and assesses exposure risk. Permiso describes removing zombie accounts and identities, including vendors, that are no longer active in an environment. Permiso shows where MFA is not used and monitors the age and rotation of password and access keys. Permiso provides visualizations of different ways threat actors could compromise identities to move laterally and gain access to sensitive data.

Permiso provides identity threat detection and response for human and non-human identities across environments. Permiso's detection engine has 1500+ detection rules engineered by its P0 Labs team, which actively researches and monitors attacks in the wild. Permiso detects access and behavioral anomalies in environments such as AWS, Azure, GCP, GitHub, Slack and Salesforce. Permiso monitors activity and correlates user behavior to produce identity security alerts across AWS, Azure, Okta and M365. Permiso tracks the entire lifecycle of credentials, their privileges and posture, and all of the sessions in which those credentials were used and by what identity. Permiso's watchlist capability identifies and mitigates threats from employees, contractors and other trusted individuals who may pose security risks to the organization. Permiso monitors human and non-human identities for access and behavior anomalies in AWS, GitHub, Jira, Salesforce and Snowflake.

Permiso defines non-human identities (NHIs) as any digital identity that authenticates and operates without direct human control. Permiso inventories human and non-human identities, including keys, tokens, service accounts, roles and groups. Permiso identifies orphaned, stale and overly permissive NHIs across cloud environments. Permiso provides a centralized dashboard to monitor NHIs. Permiso monitors the behavior of non-human identities and the humans using them to detect suspicious and malicious activity.

Permiso ties every run, event and tool call to the identity behind it in real time across cloud, infrastructure, SaaS and on-prem environments. Permiso launched AI agent runtime security, bringing Identity Runtime Attribution to every agent in production. The Permiso platform gives security teams visibility into agent runs, tool calls and MCP invocations across the full agent lifecycle. Permiso finds agents in Lambda functions, containers and VMs, in the code repositories where they are defined, and behind the model endpoints where they execute. Permiso ties every agent action to a specific human, non-human or AI identity in real time. Permiso visualizes agent actions through the Universal Identity Graph and preserves them as a complete audit trail. SandyClaw runs every skill in a controlled sandbox before it touches the environment, recording every action, every tool call and every downstream request. Permiso's agent lifecycle covers discovering agents, attributing identity at runtime, detecting anomalies, sandboxing skills and enforcing controls, including kill switches. Autodesk is among the first enterprises to deploy the agent capabilities, securing AI agents across its products, workforce and cloud infrastructure.

Permiso detects suspicious activity in Google Cloud Platform across Compute, Storage, App Engine, Secrets Manager, Logging, Network, SSO and IAM. Permiso monitors when GitHub repositories have been transferred outside the organization or updated to public. Permiso provides threat detection for 1Password's password management system. Permiso inventories users in Open AI and monitors their posture and corresponding risk. Permiso monitors only the control plane and is not exposed to any underlying or transaction data. Permiso encrypts control plane data at rest and in transit. ACV Auctions is a Permiso customer. Nutanix is a Permiso customer. Modern Health is a Permiso customer. Permiso states its mission as simplifying cloud security for technology and security professionals.^{[1][3][4][6][7][8][9][10][11][12][13]}

Categories

• Identity threat detection and response (primary category)
• Non-human identity security
• Cloud detection and response
• Compare Permiso with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Owned by Okta since 2026^[2][5]

CISO on record

Not yet on our record. Send a verified source

Website

permiso.io

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Permiso Discover^[3]

  Provides an inventory of human, non-human and AI identities wherever they live.

  Permiso Discover gives enterprises an inventory of human, non-human and AI identities wherever they live. Permiso inventories identities and assesses exposure risk in identity providers, cloud service providers and SaaS applications.

• Permiso Protect^[3]

  Evaluates the risk posture of identities based on usage patterns, exposure and entitlements.

  Permiso Protect continuously evaluates the risk posture of identities based on usage patterns, exposure and entitlements. Permiso Protect surfaces and quantifies high-risk identities, stale access and toxic combinations across human, vendor, AI and non-human accounts.

• Universal Identity Graph^[3][11]

  Connects every identity to the credentials it owns, the machines it creates and the agents it runs.

  The Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. Permiso states that the chain stays unbroken from a human SSO login to a Lambda function to an MCP tool call. Permiso's Universal Identity Graph inventories identities in all cloud environments and assesses exposure risk.

• Identity Threat Detection and Response^[7]

  Detects threats to human and non-human identities across environments.

  Permiso provides identity threat detection and response for human and non-human identities across environments. The detection engine has 1500+ detection rules engineered by the P0 Labs team. Permiso detects access and behavioral anomalies in environments such as AWS, Azure, GCP, GitHub, Slack and Salesforce.

• Identity Runtime Attribution^[3]

  Ties agent runs, events and tool calls to the identity behind them.

  Permiso launched AI agent runtime security, bringing Identity Runtime Attribution to every agent in production. Permiso ties every run, event and tool call to the identity behind it in real time. Every agent action is tied to a specific human, non-human or AI identity in real time and is preserved as a complete audit trail.

• SandyClaw^[11]

  Runs agent skills in a controlled sandbox.

  SandyClaw runs every skill in a controlled sandbox before it touches the environment. SandyClaw records every action, every tool call and every downstream request.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Permiso's categories, then alphabetical. A list from the record, never a ranking.

• On identity threat detection and response, Permiso competes with Silverfort, Semperis, Acalvio, AuthMind, Beyond Identity, Cygrid, Delinea, Mitiga, Oasis Security, P0 Security and 16 more.

• On non-human identity security, Permiso competes with AuthMind, Cygrid, Oasis Security, Aembit, Akeyless, Astrix Security, Clutch Security, Infisical, NewCore, Token Security and 30 more.

• On cloud detection and response, Permiso competes with Mitiga, Miggo, Skyhawk Security, Stream.Security, Acalvio, Vectra AI, Dynatrace, Lacework, Orca Security, Sweet Security and 4 more.

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• July 30, 2026

  Okta said it signed a definitive agreement to acquire Permiso Security, a startup whose software detects attackers abusing identities across cloud, SaaS and AI agent environments. SiliconANGLE^[14]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]permiso.ioPermiso · permiso.io · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Okta signs definitive agreement to acquire permiso securityOkta · okta.com · published August 26, 2026 · Tier A: the company, a regulator or a filing
3. [3]Detect and protect against human and non-human identity threats in real-timePermiso · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
4. [4]Identity Security Posture Management + Identity Threat Detection & ResponsePermiso · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
5. [5]Coverage across cloud environments to better secure the attack surfacePermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Human and Non-Human Identity Inventory, Risk Posture and GovernancePermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Identity Threat Detection and Response (ITDR) for Human and Non-Human IdentitiesPermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]How Permiso Detects Compromised Credentials In Your EnvironmentPermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]What Are Non-Human Identities? Complete Guide to NHI Security for 2025Permiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Non-Human Identity (NHI) Threat Detection and ResponsePermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Secure Every AI Agent, Skill, and Action | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Security - At Permiso, we don't take security lightlyPermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
13. [13]Learn about how we make cloud zeros into cloud heroes | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]Okta to acquire Permiso Security in reported $200M identity security deal - SiliconANGLESiliconANGLE · published July 30, 2026 · Tier B: trade or business press

Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Permiso? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.