Evidence

Okta, Inc. is an American identity and access management company headquartered in San Francisco, California. Founded in 2009, Okta became a public company through an initial public offering in 2017.

Microsoft Entra ID (formerly Azure Active Directory or Azure AD) is a cloud-based identity and access management service. Microsoft renamed Azure AD to Microsoft Entra ID in July 2023.

Identity and access management or Identity management (IdM) is a framework of policies and technologies to ensure that the right users have the appropriate access to technology resources. IAM systems fall under the overarching umbrellas of IT security and data management.

Cisco acquired Duo Security for approximately USD 2.35 billion in cash and assumed equity awards. Closed October 1, 2018.

On January 20, 2022, the Okta Security team was alerted that a new factor was added to a Sitel customer support engineer's Okta account. The threat actor (Lapsus$) had access to a Sitel support engineer's laptop from January 16-21, 2022.

In October 2023 Okta disclosed a breach of its customer support case management system in which HTTP archive (HAR) files uploaded by customers were accessed by a threat actor using stolen credentials.

Scattered Spider is a cybercriminal group targeting large companies and their contracted IT help desks. Actors have been observed using social-engineering techniques to obtain credentials and MFA resets, then leveraging those credentials to access identity providers such as Okta.

Thoma Bravo completed its acquisition of Ping Identity in October 2022 at approximately USD 2.8 billion, taking the identity company private.

Thoma Bravo completed its acquisition of SailPoint in August 2022 at approximately USD 6.9 billion, taking the identity governance company private.

Thoma Bravo completed its acquisition of ForgeRock on August 23, 2023, at approximately USD 2.3 billion, and combined ForgeRock with Ping Identity.

CyberArk completed its acquisition of Venafi from Thoma Bravo on October 1, 2024, for approximately USD 1.54 billion in cash and CyberArk stock, adding Venafi's machine-identity management and TLS certificate lifecycle capabilities.

Palo Alto Networks completed its acquisition of CyberArk on February 11, 2026, at approximately USD 25 billion, establishing an Identity Security platform alongside Network Security and Cloud Security.

Microsoft disclosed that the threat actor Storm-0558 obtained a Microsoft account (MSA) consumer signing key and used it to forge tokens for Exchange Online and Outlook.com, gaining access to email accounts of approximately 25 organizations.

SailPoint announced it will acquire non-human identity startup Entro Security for a reported USD 200 million to strengthen its position in agentic-identity and NHI governance.

Israel-based Entro Security specializes in non-human identity and credential security and will enable SailPoint to enhance its products for the growing NHI category.

Thoma Bravo-backed SailPoint raised USD 1.38 billion in an upsized IPO and began trading on Nasdaq under ticker SAIL on February 13, 2025 at a USD 12.8 billion market value.

SailPoint announced on June 29, 2026 that it has completed its acquisition of Tel Aviv-based Entro Security to secure agentic identities across enterprise environments.

The acquisition strengthens SailPoint's push into the fast-growing market for securing non-human identities.

The FIDO Alliance is an open industry association launched in February 2013 whose mission is to develop and promote authentication standards. FIDO2 (WebAuthn + CTAP2) is the technical foundation of passkeys.

Zero trust (ZT) provides a collection of concepts and ideas designed to minimize uncertainty in enforcing accurate, least privilege per-request access decisions in information systems and services in the face of a network viewed as compromised. Published August 2020.

Data-security firm Cyera announced an approximately USD 1 billion acquisition of Israeli non-human identity startup Oasis Security to integrate NHI/agent identity governance into a unified identity-and-data-security platform.

Okta announced acquisition of cloud-identity security firm Permiso Security for approximately USD 200 million; deal adds identity threat detection and response (ITDR) capabilities and more than 2,500 identity risk signals across human, machine, and AI-agent identities.

IBM's 2026 Cost of a Data Breach Report sets a record global average of USD 4.99 million per breach (+12% year-on-year); AI-driven attacks contributed roughly USD 1 million per incident and 92% of AI-breached organizations had inadequate access controls on their models.

At Black Hat USA 2026 SailPoint announced a unified Identity Security offering combining its Agentic Fabric (from the Entro Security acquisition) with Human Identity Security into a single platform to govern human users, machine accounts, and AI agents under one control plane.

Independent confirmation of Okta's Permiso acquisition: Okta positions the deal as unifying real-time identity threat detection with identity posture management and expanding monitoring for enterprise AI agents across cloud environments.

Independent confirmation of the USD 1 billion Cyera-Oasis deal; frames it as the largest AI-agent-security transaction to date, uniting identity intelligence with data security to govern AI and machine identities.