Photo by Marvin Meyer on Unsplash
Security has always been a game of chasing moving targets, but the targets are now moving faster and no longer require a coffee break or a paycheck. The latest land grab in the identity space underscores a shift I have watched brewing for years: we are no longer just managing access for people; we are managing it for the autonomous code they leave behind.
Okta is reportedly dropping around $200 million to bring Permiso into the fold, a move first reported by TechCrunch. Permiso specializes in identity threat detection and response (ITDR), with a specific focus on tracking what identities—both human and non-human—are actually doing across disparate cloud environments. It is a logical, if expensive, bridge for Okta to build as their customers struggle with the sprawling permissions created by modern cloud architecture.
The Non-Human Headache
In the hosting and cloud world, we have spent twenty years securing the perimeter and managing user logins. But the rise of AI agents and automated service accounts has created a massive blind spot. These non-human identities often have broad, over-privileged access to infrastructure and data, yet they don't use multi-factor authentication and they don't show up in a typical HR directory. If a developer sets up an AI agent to optimize a database and that agent is compromised, the damage happens at machine speed.
For the business owners and hosting providers I talk to, this is the next major friction point. It is not enough to know *who* is on the network; you have to know *what* is acting on behalf of the company. By acquiring a startup focused on detecting these anomalous behaviors, Okta is trying to move past simple authentication and into the much harder business of continuous behavioral monitoring. It’s a recognition that the traditional identity perimeter has effectively evaporated.
I’ve always said that complexity is the enemy of security, but if you can’t reduce the complexity, you might as well charge $200 million for the tool that monitors it.
The Long Game
This isn't just a features play; it is a defensive maneuver. As enterprises integrate AI deeper into their stacks, the surface area for identity-based attacks is exploding. If Okta wants to remain the central nervous system for enterprise access, they have to prove they can secure a workspace where half the "workers" are scripts and LLMs. The premium price tag suggests they know exactly how high the stakes are for the next decade of cloud computing.