Okta: The Last Independent Identity Platform Is the Picks-and-Shovels Play on Agentic AI

Ask a CISO where the perimeter is these days and you will get a long pause. It used to be the network edge, the firewall chokepoint every packet crossed. That world is gone. Applications live in every cloud, employees work from everywhere, and the castle now has tenants without bodies. AI agents are being deployed by the thousands, each one logging in and touching data. Eighty-eight percent of organizations report AI-agent security incidents, and non-human identities outnumber humans by as many as fifty to one. The perimeter has not disappeared; it has moved to identity — who or what is allowed to do what. Standing on that new perimeter as the last independent landlord is Okta.

Look at how the neighborhood has emptied out. CyberArk, the crown jewel of privileged access, was absorbed by Palo Alto Networks in a deal north of twenty-five billion dollars. Ping and ForgeRock were folded into Thales. Microsoft's Entra is the biggest identity platform on the planet, but it is welded to Azure — adopt Entra and you are renting the castle from the cloud vendor. That leaves exactly one large, neutral, multi-cloud identity company standing, and independence is the moat: the Forrester Wave this spring handed Okta a perfect five out of five in nine criteria, praising its freedom from any suite or single cloud. When an enterprise wants identity without handcuffing itself to a stack, Okta is the only game at scale.

The financials have caught up with the narrative. In the May quarter, revenue grew 11 percent to 765 million dollars, non-GAAP earnings of ninety-one cents beat estimates by six, remaining performance obligations climbed 16 percent to 4.72 billion, and free cash flow hit 271 million dollars — a 35 percent margin. Fiscal 2026 was the inflection year: the first full-year GAAP operating profit, 863 million dollars in free cash flow, more than twenty thousand customers, over five thousand paying north of a hundred grand a year. Management raised full-year guidance, and with 2.2 billion in net cash and a billion-dollar buyback authorized, the balance sheet behaves like a mature franchise's.

But the fundamental story — the reason this stock has surged more than seventy percent year to date — is agents. Every AI agent needs an identity: something to authenticate it, authorize its tools, audit its actions, and revoke it the moment it goes rogue. Okta for AI Agents went generally available in late April, bringing shadow-agent discovery, agent-to-agent connection mapping, and a Universal Logout kill switch that can yank a rogue swarm offline with one command. Six weeks later Okta became the featured identity provider for Anthropic's Claude Enterprise launch, with Ramp, Webflow, and HubSpot as marquee customers. The timing is no accident: the Model Context Protocol became a Linux Foundation standard in December with tens of millions of monthly SDK downloads, and the XAA standard, backed by two dozen-plus vendors, routes every agent-to-app call through identity policy.

The Permiso Security acquisition announced in late July — roughly two hundred million dollars — is the tell. Permiso hunts compromised credentials across identity systems Okta does not even run, from Entra ID to legacy Active Directory, turning Okta into a security operations story and cementing the neutrality pitch: secure identity everywhere, even where someone else is the system of record. Add eighteen thousand prebuilt integrations — the industry's largest catalog — plus Universal Directory as the system of record, and you have a tollbooth that gets busier whether Okta wins the deal or merely secures it.

The honest caveats deserve airtime. Growth is decelerating — the full-year guide of roughly nine percent is a far cry from the thirty percent days, and net revenue retention has drifted from 124 percent to 107. Microsoft will keep bundling Entra into Azure deals and undercutting on price; the 2022-2023 breach still shadows procurement conversations. Agentic revenue is not yet a line item — the thesis is real, but for now it is a story inside the numbers. At roughly thirty-five times forward earnings after a seventy percent run, the market is not giving this away.

Here is the bottom line. The agentic AI era is a gold rush, and the reliable money in a gold rush is picks and shovels. Every model vendor wants to sell you the AI; Okta sits at the enforcement point where that AI meets your data, across every cloud and every model. The next catalyst is the August earnings report, and the long game is simpler: identity is the new perimeter, the perimeter gets more crowded with machines by the day, and Okta is the last independent landlord on the block. That is a position worth a reasonable premium.

Disclosure: The Signal holds no position in OKTA. Positions may change. This is not financial advice.