Okta, Inc.

01. Company

Okta, Inc. is a publicly traded identity and access management company headquartered in San Francisco, California. Founded in 2009, the enterprise technology firm employs approximately 6,366 individuals and reported roughly $2.9 billion in revenue for the 2025 fiscal period. Operating globally, Okta provides cloud-based identity solutions designed to secure workforce and customer identities across diverse organizational environments. The company maintains a strong market presence in the IT software and services sector, focusing on scalable identity infrastructure that supports modern enterprise security requirements and digital transformation initiatives worldwide.

02. Product

Okta’s core offering is a cloud-based identity and access management platform that functions as a centralized hub for user identities. The service delivers single sign-on, multi-factor authentication, and automated user provisioning capabilities for both workforce and customer identity use cases. By integrating with hundreds of third-party applications, the platform enables organizations to enforce least-privilege access controls and streamline secure login workflows. Enterprise buyers utilize the solution to reduce administrative overhead while maintaining robust authentication standards across hybrid and cloud-native environments globally.

03.Security & Risk

Okta maintains a dedicated Security Trust Center and publishes regular security advisories to communicate threat intelligence to its customer base. In October 2023, attackers compromised a customer support management system containing session tokens, impacting support users; an independent forensic investigation by Stroz Friedberg concluded with no evidence of further malicious activity. Additionally, a sign-on policy bypass vulnerability in the Classic application was identified in mid-2024 and patched by October 4, 2024. The company advises customers to monitor authentication logs and implement defense-in-depth strategies to mitigate identity provider risks effectively.

Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.

Last observed: Aug 12, 2026, 06:32 PM

• TLS certificate

  Certificate expires in 112 days

  infoPass

• Security headers

  4/6 security headers present

  mediumFail

• Email authentication (SPF / DMARC)

  infoPass

• DNS presence

05. Events

• [breach] 2024 Sign-on Policy Bypass Vulnerability

  A bug in the Okta Classic app allowed attackers to bypass strict sign-on policies between July and October 2024. The vulnerability was patched by October 4, 2024.

  Oct 4, 2024, 12:00 AM · Source

• [breach] October 2023 Security Incident

  Attackers accessed a support system containing session tokens, impacting customer support users. Independent forensic investigation concluded with no further malicious activity.

  Oct 13, 2023, 12:00 AM · Source

• [breach] October 2023 Customer Support System Incident

  Okta announced a cybersecurity incident affecting its customer support management system. Forensic firm Stroz Friedberg concluded the investigation with no evidence of further malicious activity.

  Oct 1, 2023, 12:00 AM · Source

• [legal] $60M Shareholder Settlement

  Okta reached a $60 million settlement regarding shareholder claims related to cybersecurity controls and incident disclosures.

  - · Source

06. Competitors

Vendors offering a similar product or service - for side-by-side comparison, not a ranking.

• Ping Identity

  Enterprise-grade flexibility and identity governance.

  Vet this vendor →

• Microsoft Entra

  Comprehensive identity and access management suite.

  Vet this vendor →

• OneLogin

  Cloud identity platform focused on simplicity and faster rollout.

  Vet this vendor →

• CyberArk

  Privileged account security and credential vaulting.

  Vet this vendor →

07. Recent News

Recent corporate updates highlight financial initiatives, including a $1 billion share repurchase program and expanded partnerships such as an agreement with the PGA of America to secure golf professionals’ identities globally. Okta also announced enhanced disaster recovery and data residency capabilities for the Indian market. However, public discourse remains heavily influenced by historical security incidents, with ongoing shareholder litigation and a $60 million settlement addressing allegations of inadequate cybersecurity controls. The company continues to emphasize transparency and long-term strategic growth amid these legal and operational developments.

08. Citations

1. [1] Okta is headquartered in San Francisco, California, and employs approximately 6,366 people. Okta Inc Company Profile
2. [2] A 2024 sign-on policy bypass vulnerability in the Okta Classic app was patched by October 4, 2024. Okta Data Breach: What It Means For Your Security
3. [3] Okta was founded in 2009 and operates as a public company on NASDAQ. Okta | OKTA Stock Price, Company Overview & News
4. [4] Okta reached a $60M shareholder settlement related to cybersecurity control disclosures. Okta (OKTA) $60M Shareholder Settlement
5. [5] Okta maintains a Security Trust Center and publishes security advisories. Okta Security Trust Center | Powered by SafeBase
6. [6] The October 2023 security incident involved attackers accessing a support system containing session tokens, with an independent forensic investigation concluding no further malicious activity. Okta October 2023 Security Incident Investigation Closure

12. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.