BofA Securities maintains Underperform rating on Okta stock amid growth concerns

Okta reported stronger-than-expected Q3 FY2026 results with EPS of $0.82 versus $0.75 expected and revenue of $742m versus $730.3m, while CRPO rose to $2,328m (up 12.9% YoY) beating estimates. BofA reiterated an Underperform rating and a $75 price target—below the $81.87 trading price—citing slightly light fourth-quarter cRPO guidance of $2,447.5m and implied FY2027 revenue of ~$3,159m (8.7% growth vs. Street 9.4%), and kept a 4.5x forward EV/Sales valuation anchored to calendar-2027 estimates. Other shops adjusted targets lower (BTIG cut its target to $116 from $142 but kept Buy; BMO trimmed its target to $90 from $112 and kept Market Perform), reflecting mixed analyst views despite strong margins and favorable growth metrics.

Analysis

Market structure: Okta’s guidance shave (FY27 implied growth 8.7% vs Street 9.4% and LTM growth 12.1%) favors incumbent cloud IAM leaders with sticky CRPO streams but penalizes high-multiple growth peers. Winners are identity platforms with >70% gross margins (OKTA’s 77.1% supports cash conversion); losers are legacy on‑prem vendors and loss-making SaaS with weaker renewals. Valuation compression (BofA using 4.5x EV/Sales) signals lower demand for high-growth premium multiples and will lift implied vol in options markets and widen tech credit spreads if guidance downgrades persist.

Risk assessment: Tail risks include a large customer breach (~>1% revenue hit per $30–50m enterprise), enterprise spending pullback in a shallow US recession (20–30% slower new logo growth), or adverse privacy regulation increasing integration costs. Immediate (days) risk: earnings/guidance repricing and vol spikes; short-term (3–9 months): analyst PT convergence and multiple compression; long-term (1–3 years): secular identity demand remains but growth must re-accelerate above ~12% to justify 6x+ EV/Sales. Hidden dependencies: CRPO mix (renewal vs new), top-10 customer concentration, and partner integrations are second-order drivers of churn.

Trade implications: For tactical exposure, size positions small (1–3% portfolio) and prefer defined‑risk structures. Bearish: establish a 2–3% short bias or buy a 3‑6 month 85/70 put spread (max loss known) targeting $75 over 3–9 months, stop if OKTA closes >$90 for two sessions. Bullish/speculative: on a pullback to $70–75, establish a 2% long or buy a Jan‑2027 60/100 call spread (limited cost) to capture upside if growth re-accelerates; hedge with a 0.5–1% short SPY position to offset beta.

Contrarian angles: Consensus may underweight CRPO quality (management raised FY26 guidance and CRPO beat), so a disciplined dip-buy can pay off if churn remains low; PEG 0.43 implies the market already prices slower growth. Reaction may be overdone if FY27 guidance is conservative — historical SaaS repricings show 6–12 month recoveries when renewals hold. Unintended consequence: aggressive selling could make OKTA an M&A target; that creates asymmetric upside if a strategic buyer values identity tech more highly than public multiples.

Key Decisions for Investors

• Establish a conservative bearish position: initiate a 2–3% notional short of OKTA or buy a 3–6 month 85/70 put spread (max loss = premium) with target exit at $75 and stop-loss if OKTA closes > $90 on two consecutive sessions.
• If OKTA drops to $70–75, pivot to a 2% long position or buy a Jan‑2027 60/100 call spread (defined risk) aiming for 30–60%+ upside if growth re-accelerates; use a 12–18 month horizon and trim at $120.
• Implement a relative-value hedge: long OKTA (1–2%) paired with a 0.5–1% short SPY (or short XLK) to isolate idiosyncratic upside while reducing market beta over the next 3–9 months.
• Watch three high-conviction catalysts in the next 90 days before scaling: (1) next quarterly CRPO and renewal rates (growth <8% should trigger adding bearish exposure), (2) any large-customer churn disclosure (>1 customer >$20m ARR), and (3) changes in guidance or margin cadence that move EV/Sales multiple outside 4–6x band.