Finvest
OKTA Cybersecurity · SaaS · Identity · Security software · Thesis updated July 12, 2026

Okta's AI bet meets slower expansion

01 Running thesis

A leader with a new AI question

Okta sits in a key part of security. It helps companies decide who can sign in, what they can use, and when access should be blocked. That role matters more as work moves across cloud apps, remote devices, contractors, partners, and customers.

The bull case is that Okta stays the neutral identity layer. It works across many software systems instead of pushing one vendor stack. Its new Okta for AI Agents and Auth0 for AI Agents products add a bigger idea: companies may soon need to track and control AI agents the same way they control employees and apps.

The bear case is that the core expansion engine has slowed. Dollar-based net retention, which measures how much existing customers spend compared with a year earlier, was stuck at 106% for several quarters before rising to 107% in Q1 fiscal 2027. That is better, but not yet a clear trend.

This is why the stock is not a simple growth story. Okta has a strong position and improving execution, but the price still needs support from faster expansion, real AI agent revenue, or both. If those do not show up, competition and trust issues can keep pressure on the story.

May 2026Okta reported dollar-based net retention of 107% as of April 30, 2026. That was a small but important move up after several periods at 106%.
Mar 2026The fiscal 2026 10-K confirmed the subscription-heavy model, with $2.855 billion of subscription revenue and $64 million of professional services revenue. It also added clearer language on the long-term AI agent identity opportunity and AI-related risks.
Dec 2025The Q3 fiscal 2026 10-Q showed dollar-based net retention still at 106%. That kept the main concern in place: customers were expanding, but slowly.
Dec 2025Management highlighted Auth0 for AI Agents and said Okta had engaged with over 100 current customers tied to more than $200 million in existing annual contract value. This added a new long-term growth option, though not yet a proven revenue stream.
Aug 2025The Q2 fiscal 2026 filing again showed 106% dollar-based net retention. Growth was still helped by new customers and added products, but expansion inside the base remained muted.
May 2025The Q1 fiscal 2026 10-Q showed dollar-based net retention down to 106%. Management tied the slowdown to the macro environment and slower growth in existing customer annual contract value.
Mar 2025The initial view framed Okta as a leading independent identity provider with a strong SaaS model. The main offsets were Microsoft competition and reputation risk from past cybersecurity incidents.
02 Business model

Subscriptions do the heavy lifting

Okta is a software-as-a-service company, meaning customers pay to use cloud software instead of buying it once. In fiscal 2026, subscription revenue was $2.855 billion, or 98% of total revenue. Professional services were $64 million, or 2%.

Customers usually sign multi-year contracts. Fees depend on the products used and the number of users or identities covered. The model works best when Okta lands a customer with one product, then adds more users and products over time.

That land-and-expand motion is the key watch point. A dollar-based net retention rate above 100% means existing customers are spending more in total, even after downgrades and churn. Okta's 107% rate in Q1 fiscal 2027 shows expansion, but it is far below the kind of rapid upsell investors want from a premium software company.

The moat comes from being independent and widely connected. Okta plugs into thousands of apps, which can make switching painful once a company builds access rules around it. The weak point is price. Microsoft can bundle identity inside bigger software packages, which can make Okta look expensive.

03 Product portfolio

Identity for workers, customers, and agents

Cash cow

Workforce Identity

This is the main employee access business. Products like Single Sign-On, Adaptive Multi-Factor Authentication, Universal Directory, Lifecycle Management, and Identity Governance help companies control employee, contractor, and partner access.

Growth engine

Customer Identity

Okta and Auth0 help developers add login, passwordless access, attack protection, and user management to customer-facing apps. This can grow as more companies build digital products.

Steady

Auth0 Platform

Auth0 is the developer-focused platform inside Okta. It matters because developers often choose the identity layer early when building new apps.

Growth engine

Identity Governance

Identity Governance helps companies review who has access and prove controls to auditors. It can deepen Okta's role beyond login.

Option

Okta for AI Agents

This new product aims to give companies visibility and control over non-human identities and AI agents. The market could be large, but adoption and pricing are still early.

Option

Auth0 for AI Agents

This product helps developers secure agentic apps. Management said it had already engaged with over 100 current customers tied to more than $200 million in existing annual contract value, but that is not the same as booked AI revenue.

04 Business segments

One segment, two revenue types

Subscription98%modest
Professional Services2%flat

Okta reports one operating segment. For fiscal 2026, revenue was mainly subscriptions, with a small professional services piece, and 80% of revenue came from the United States.

05 Risk factors

What could break the thesis

Expansion stays stuck

High impact · Medium odds

Okta needs existing customers to buy more seats and more products. Dollar-based net retention rose to 107% in Q1 fiscal 2027, but it had been 106% for several quarters. If that metric does not keep improving, growth may stay only modest.

We watchDollar-based net retention over the next two or more quarters.

Microsoft bundles away demand

High impact · High odds

Microsoft can include identity tools as part of larger software and cloud deals. That can pressure Okta's pricing, especially with customers trying to cut software costs. This threat is strongest when buyers see identity as a feature, not a best-of-breed security layer.

We watchCustomer growth, large customer count, and management comments on win rates against Microsoft.

Another security incident hurts trust

High impact · Medium odds

Okta sells trust, so security events matter more here than at many software firms. The October 2023 breach still hangs over the brand. Another material incident could hurt sales cycles, renewals, and Okta's claim to be a core security partner.

We watchAny material cybersecurity disclosure, customer support breach, or unusual churn commentary.

AI agent revenue takes too long

Medium impact · Medium odds

AI agent identity could become a large market, but the products are new. Early customer talks do not guarantee near-term revenue. If management cannot show adoption metrics or paid usage, the AI story may stay more promise than profit.

We watchNamed customer wins, paid deployments, or reported revenue tied to Okta for AI Agents and Auth0 for AI Agents.

AI rules and errors create new liability

Medium impact · Medium odds

Okta's filings warn that AI technology can create reputational, legal, and operating risk. Bad outputs, intellectual property disputes, or new rules could slow customer use of AI identity tools. This risk grows if Okta becomes a control layer for many non-human actions.

We watchNew AI regulation, customer limits on agent use, and any AI-related legal claims.
06 Quick answers

In one breath

What does Okta actually do?

Okta helps companies manage digital identity. In simple terms, it checks who is trying to sign in, decides what they can access, and helps block risky access.

Why is Okta compared with Microsoft?

Both sell identity and access tools to businesses. Microsoft is dangerous because it can bundle identity with software many companies already buy, while Okta sells itself as a neutral platform that works across many systems.

What is dollar-based net retention for Okta?

It measures how much Okta's existing customers spend compared with the prior year, including upgrades, downgrades, and churn. Okta reported 107% as of April 30, 2026, up from 106% in several recent periods.

Why do AI agents matter to Okta?

AI agents are software systems that can take actions for users or companies. If they get access to apps and data, companies need identity controls for them, which could create a new market for Okta.