Okta's CEO says investors are getting two big things wrong about AI and software

Okta reported fiscal Q3 revenue of $742 million, up 12% year-over-year and beating the FactSet consensus of $731 million, and delivered adjusted EPS of $0.82 versus $0.67 a year ago and a $0.76 consensus. Management guided fiscal Q4 adjusted EPS of $0.84–$0.85 versus an $0.84 consensus, and CEO Todd McKinnon emphasized that AI will increase demand for software and identity-security controls, noting strong inbound interest in a newly launched product. Shares traded down ~4% in after-hours despite the beats, while the broader software ETF IGV is lagging the S&P 500 YTD, underlining mixed investor sentiment toward the sector.

Analysis

Market structure: Identity and security vendors (OKTA, CrowdStrike peers) are direct beneficiaries as enterprises will likely reallocate incremental AI spend to governance and access controls; Okta's 12% revenue growth and EPS beat show demand resiliency even while software indexes lag (IGV +5% vs S&P +16 YTD). Legacy point solutions and narrowly integrated app vendors risk share loss as customers favor multi-model, multi-cloud identity layers that avoid platform lock-in. Cross-asset: stronger security demand should tighten IG/high-grade tech credit spreads and compress implied vol on large-cap software names while keeping rates sensitive to tech capex cycles.

Risk assessment: Tail risks include a major identity breach or BigCloud (AWS/GCP/Azure) bundling identity that commoditizes third-party vendors, plus regulatory shocks (EU AI Act enforcement) that could force costly product changes; probability medium but impact high. Immediate (days) — earnings-driven volatility; short-term (1–6 months) — product adoption KPIs and partner wins will move multiples; long-term (1–3 years) — identity becomes a de facto tax on AI consuming >5–10% incremental IT budgets. Hidden dependencies: okta’s GTM depends on cloud integrations and LLM partnership breadth; customer stickiness is measured by MAUs and revenue per enterprise.

Trade implications: Direct: establish a 1–2% long position in OKTA (ticker OKTA) funded by cutting 1% exposure to mega-cap platform beta (GOOGL/AMZN) within 2 weeks. Options: buy a 6‑month OKTA call spread (buy 30% OTM, sell 60% OTM) sized to 0.5–1% portfolio risk to capture re‑rating while capping premium. Pair: go long OKTA vs short CRM (equal notional 1:1) to express identity/security premium over app-layer exposure; target relative return +20% in 6–12 months. Exit rules: trim on +30–40% absolute gain or if quarterly new‑logo ARR growth misses consensus by >150 bps.

Contrarian angles: The market is missing multi-model neutrality as a commercial moat—vendors that integrate with many LLMs can command higher ASPs; Okta’s post-earnings -4% move looks like an overreaction to conservative guidance, creating a buying window if shares retrace another 8–12%. Historical parallels: security vendors re-rated after systemic breaches when security spend jumped 1–2% of IT budgets; unintended consequence — hyperscalers could attempt to bundle identity, so monitor partner contract language and concentration (top-10 customers >25% rev) as an early warning.

Key Decisions for Investors

• Establish a 1–2% long equity position in OKTA within 2 weeks, funded by reducing 1% combined exposure to GOOGL and AMZN (split equally); target a 30–40% upside over 6–12 months and stop‑loss at -18%.
• Buy a 6‑month OKTA call spread sized to 0.5–1% portfolio risk: buy calls ~30% OTM and sell calls ~60% OTM to capture re‑rating while limiting premium; unwind on 40% premium gain or after next quarterly beat with confirmed product adoption metrics.
• Implement a pair trade: long OKTA vs short CRM equal notional (1:1) representing 1% net exposure each to express identity/security outperformance; hold 6–12 months, take profits if OKTA outperforms CRM by +20% or cut if underperformance exceeds -15%.
• Reduce broad software growth beta (IGV) weight by 2–3% and reallocate into cyber/security names (OKTA, CRWD) over the next 30 days; reverse if software index outperforms S&P by >5% in a rolling 60‑day window.
• Monitor within 30–60 days: (a) Okta announced customer trial conversions (>=50 enterprise trials converting >20% within 90 days), (b) any major hyperscaler identity bundling announcement, and (c) EU/US AI regulation texts—use these as binary catalysts to add or liquidate positions.