Okta (OKTA) Q2 2027 Earnings Call Transcript

Okta reported Q2 total revenue of $805M (+11% y/y) and subscription revenue of $793M (+12% y/y), with non-GAAP operating income of $226M (28% margin) and free cash flow of $227M (28% margin). The company grew RPO to $4.9B (+17%) and cRPO to $2.6B (+14%), while retiring 1.5M shares for $125M and settling $350M of convertible notes to remove convertible debt from the balance sheet. Guidance calls for Q3 revenue of $813M–$817M (+~10%), full-year revenue of $3.216B–$3.226B (+10%–11%), and sustaining FY non-GAAP operating margin of 26% with FCF margin of 28%–29%; management also noted that AI agent security is catalyzing demand (dozens of AI-agent deals), though it remains immaterial to FY’27 revenue.

Analysis

This reads less like an AI monetization story and more like a platform-consolidation story with AI as the forcing function. The near-term winner is OKTA because agent risk is pushing customers toward a broader identity standard, which lifts attach rates across governance, privileged access, and customer identity before the AI SKU itself matters. That is structurally negative for point solutions and for vendors trying to wedge in with one narrow use case; once procurement teams decide they need a single control plane, wallet share tends to shift quickly.

The second-order effect is on ecosystem power, not just product revenue. OKTA’s neutrality makes it a good toll collector if agent protocols become standard, because it can sit between workloads and clouds without being tied to one stack; that is the right setup to pull demand away from more vertically integrated players like PANW and to make Microsoft/Azure-style bundling less decisive in heterogeneous enterprises. The flip side is that the moat is execution, not the narrative: if incumbents simply absorb the feature set into broader security suites, OKTA’s AI premium can compress even while core bookings stay healthy.

Risk is mainly timing. Management is effectively telling us AI is still too small to move FY27, so the market could be overpricing 2027-2028 upside if conversion from pipeline to revenue lags. The key falsifier is any sustained deceleration in cRPO or bookings after the current conference/partner cycle, or evidence that AI attach does not broaden into core identity migrations. If that happens, OKTA reverts to a good but not great identity compounder rather than a re-accelerating AI beneficiary.

Key Decisions for Investors

• Long OKTA on a 1-3 month horizon into Oktane and the next quarter-end conversion window; use any post-earnings pullback to add. Risk/reward favors upside revisions if partner-led pipeline converts, but trim if cRPO growth rolls over.
• Pair trade: long OKTA / short PANW for 3-6 months. Thesis is that identity-specific agent governance is a cleaner monetization path for OKTA, while PANW is more exposed to narrative-driven AI security bundling. Falsify if PANW’s platform bundle starts winning more identity share in enterprise checks.
• Hold OKTA as a structural long, but do not pay for an aggressive AI multiple expansion yet. The AI SKU is still optionality, not earnings power; wait for evidence in billings mix and renewal uplift before adding size.
• Set a watch item on FY27 cRPO and new-product ACV attach rates. If AI attach lifts average deal size but not total bookings by the next two quarters, the market should de-rate the AI premium and the stock becomes a core-FCF story only.