Okta shares fall as company declines to give guidance for next fiscal year

Okta reported Q3 adjusted EPS of $0.82 versus $0.76 expected and revenue of $742 million versus $730 million expected, with revenue up ~12% year-over-year from $665 million and net income rising 169% to $43 million ($0.24/sh). Subscription revenue was $724 million (ahead of a $715 million estimate) and backlog (returning performance obligations) rose 17% to $4.29 billion (vs. $4.17 billion est). The company withheld fiscal 2027 guidance citing seasonality, but provided Q4 revenue guidance of $748–$750 million and adjusted EPS $0.84–$0.85 (consensus $738M and $0.84), and highlighted a new AI agent capability that management says could materially expand TAM over five years; shares fell ~3% after hours on the lack of long-term guidance.

Analysis

Market structure: Okta’s beat (+82c EPS vs. 76c; $742M rev vs. $730M) and 17% RPO growth to $4.29B signal durable enterprise demand for IAM; near-term weakness (AH -3%) reflects guidance omission, not fundamentals. Winners: Okta (OKTA) and platform partners (GOOGL) if AI agents scale; losers: legacy on-prem IAM vendors and small point-solution vendors that can be displaced. The backlog growth implies demand > supply of vetted identity services, supporting pricing power for cloud IAM over the next 12–36 months.

Risk assessment: Key tail risks are execution on AI agents (overpromised TAM expansion), hyperscaler bundling (GOOGL undercuts partners), and regulatory/privacy constraints that could slow adoption; probability moderate, impact high. Timeline: immediate — volatility around FY27 guidance; short-term (weeks–months) — re-rating around product adoption metrics; long-term (3–5 years) — TAM upside if CEO’s claim that AI agents exceed core TAM materializes. Hidden dependency: monetization requires large-customer adoption and low churn; if churn rises >2–3ppt, unit economics compress materially.

Trade implications: Tactical alpha comes from asymmetric option exposure and size-managed longs. Use defined-risk, 12–18 month call spreads to capture multi-year AI TAM while capping premium; overweight cybersecurity equities by +1–2% vs. benchmarks, funded by trimming cyclical financial exposure (e.g., BAC). Watch for catalysts: FY27 guidance, major customer wins, or measurable AI agent ARR contributions (>5% of new ARR) within 2–4 quarters.

Contrarian angles: The market is likely underpricing longer-term upside from embedded AI automation — but also underestimating near-term conservatism risk from management. The negative reaction to no FY27 guide is likely overdone if management formalizes conservative stance; conversely, if Okta cannot convert agent interest into >5–10% incremental ARR within 12–18 months, downside is underappreciated. Historical parallel: early cloud platform pivots where product-led TAM expansion took 12–24 months to monetize, suggesting patience but disciplined sizing.

Key Decisions for Investors

• Initiate a 2–3% long position in OKTA on a pullback of >5% from current levels or immediately with a hard stop at -18%; target 35–45% upside over 12–24 months driven by AI agent monetization and backlog conversion.
• Buy a defined-risk 12–18 month OKTA call spread (size ~1% of portfolio) aimed at capturing 50–80% upside while capping premium; close or roll on material ARR proof points (AI agents >5% of new ARR) or at 12 months.
• Overweight cybersecurity sector by +1–2% (allocate into OKTA and selective platform plays like GOOGL) funded by reducing financials exposure (e.g., BAC) by 1.5% and discretionary by 0.5%, rebalancing after FY27 guidance within 30–60 days.
• If OKTA rallies >15% on guidance or product adoption news within 3 months, sell 50% of the position and begin selling 3–6 month covered calls to monetize gains; if key metrics miss (YoY subscription growth <8% or RPO growth <10%), trim remaining position by 50%.
• Monitor four metrics over the next 90–180 days before scaling: quarterly AI-agent-sourced ARR (>5% target), subscription ARR growth rate (threshold 10–12% YoY), net churn delta (must stay within +/-2ppt), and large-customer net new ARR (>=$100M); failure to meet two of four should trigger reduction of exposure by at least 50%.