Okta pops 15% after topping estimates as AI threat spikes demand for identity security

Okta shares jumped ~15% in extended trading after Q2 adjusted EPS rose to $1.05 vs. $0.97 expected and revenue came in at $805M vs. $795M, with revenue up 11% YoY. Subscription backlog increased 17% YoY to $4.86B (and $2.59B due in the next 12 months), and the company bumped full-year guidance to $3.22B–$3.23B revenue and $3.90–$3.94 adjusted EPS, slightly above Street estimates. Okta also broadened its Okta for AI Agents tool to all customers and closed the ~$200M Permiso Security acquisition, reinforcing its push to address agentic AI-driven identity and security demand.

Analysis

The important read-through is not the quarter itself; it is that identity is starting to look like a new control point for AI spend. If non-human identities scale the way management is implying, OKTA’s revenue model can shift from seat-driven renewals to a higher-frequency, policy-heavy security budget line, which supports both expansion and better pricing power over time.

Competitive dynamics are nuanced. OKTA looks like the cleanest direct beneficiary of agentic AI security, while CRWD and PANW still win from broader cyber urgency, but their upside is more tied to endpoint/network consolidation than identity-specific demand. Second-order, the real pressure is on bundled identity offerings from platform vendors, because once customers buy identity tooling for agents, switching costs and workflow lock-in rise materially.

The near-term risk is valuation digestion after a large move; the stock is now trading on a multi-quarter narrative, so the next catalyst is not another beat, it is sustained cRPO quality and evidence that AI bookings are becoming a meaningful mix. If current RPO growth stalls into low double digits or new-product contribution fades below roughly one-quarter of bookings, the market will likely re-rate this as a standard software compounding story rather than an emerging category winner. Over 6-18 months, the thesis is falsified if agent adoption stays pilot-level or if Microsoft and other suites bundle identity cheaply enough to cap standalone monetization.

Key Decisions for Investors

• Accumulate OKTA on 5-8% post-gap pullbacks over the next 1-3 weeks; thesis is 3-6 month multiple expansion if cRPO stays >12% and AI bookings remain a growing mix.
• Pair trade: long OKTA / short PANW on a 3-6 month horizon to express relative upside in identity-specific AI spend versus already-crowded platform security names; stop if PANW shows accelerating identity attach or OKTA guidance disappoints next quarter.
• If implied volatility is elevated, consider an OKTA Jan-2027 call spread instead of stock for a defined-risk way to capture the 6-18 month identity/agent thesis; the trade works only if management proves AI is a durable revenue driver, not just narrative lift.
• Watch Microsoft Entra and broader suite bundling as the main competitive falsifier; if customers standardize on platform identity layers, reduce exposure to standalone IAM names including OKTA.