# permiso-security

Source: https://startwithidentity.com/vendors/ai-identity/permiso-security/
Last updated: 2026-10-16
License: content by Start with Identity. Cite the source URL.

---

## Overview

Permiso Security focuses on identity threat detection and response (ITDR) across human and non-human identities, tracking identity behavior and activity across cloud environments at runtime. Founded in 2020 in Palo Alto, it bridges the NHI and [ITDR](https://startwithidentity.com/guides/fundamentals/what-is-itdr/) worlds, watching how identities actually behave rather than only cataloging them. It is detection-focused by design.

[Okta](https://startwithidentity.com/vendors/iam/okta/) signed a definitive agreement to acquire Permiso on 30 July 2026, reportedly for just under 200 million dollars, with closing expected between August and October 2026. Permiso's detections are to become the ITDR layer of the Okta Platform, so buyers evaluating it standalone today should assume the multi-cloud coverage and packaging will be renegotiated inside Okta's licensing. See the [news item](https://startwithidentity.com/blog/2026-07-30-okta-signs-definitive-agreement-to-acquire-permiso-security/).

## What it is good at

The strength is runtime detection of risky identity behavior across both human and [non-human identities](https://startwithidentity.com/guides/fundamentals/what-is-non-human-identity/), correlating activity to surface compromise, privilege abuse, and anomalous access. Governance and audit visibility score highest, with authentication and authorization analysis close behind. For cloud security teams, having one runtime lens across human and machine identity activity is genuinely useful for investigation and response.

## Where it falls short

It is detection-focused, so it complements rather than replaces governance and vaulting; it will not provision, certify, or vault credentials for you. It is not a governance-only tool either, so teams wanting static reviews alone may find it broader than needed, and it is not traditional PAM. As with the category, integration breadth and agent coverage keep evolving.

## Pricing

No public pricing. Quote-based subscription through a sales-led process. Model identity volume and connected clouds with the [TCO calculator](https://startwithidentity.com/tools/tco-calculator/) before comparing.

## Best for, and who should look elsewhere

A fit for cloud security teams that want runtime identity-threat detection spanning human and non-human identities. Look elsewhere if you want a governance-only tool or traditional PAM vaulting. Pair it with governance tools like [Astrix Security](https://startwithidentity.com/vendors/ai-identity/astrix-security/) (now part of Cisco and no longer sold standalone) or access governance like [P0 Security](https://startwithidentity.com/vendors/ai-identity/p0-security/), and see the wider [AI identity](https://startwithidentity.com/vendors/ai-identity/) category.

## Bottom line

A strong runtime identity-threat detection option spanning human and non-human identities. Best paired with a governance or vaulting layer.