Okta Raises Revenue Guidance to $3.2B on AI Agent Identity Demand

Okta ties growth to AI agent identity security

Okta reported Q2 FY2027 revenue of $805 million, an 11% year-over-year increase, and raised full-year guidance to $3.216–$3.226 billion. The company explicitly cited demand for AI agent identity and access management as a driver behind the upward revision. The financial performance coincides with product announcements across Okta Identity Governance (OIG) and Okta Privileged Access (OPA), with all OIG capabilities planned for early access in Q4 2026 and all OPA capabilities set for general availability in Q1 2027.

The timeline matters for compliance planning. Organizations with FY 2027 audit milestones can synchronize adoption with general availability dates, reducing the risk of deploying pre-production features into regulated environments. For buyers already on Okta for SSO and MFA, the governance and privileged access expansion creates a consolidation path that eliminates integration overhead but increases dependency on a single vendor.

Okta's integration with Permiso Security targets non-human identities

Okta's expanded identity threat detection and response capabilities integrate with Permiso Security, a vendor focused on non-human identity risk. The integration positions Okta against SailPoint and One Identity in governance, and CyberArk and BeyondTrust in privileged access. The emphasis on AI agents and non-human identities directly addresses the gap where service accounts, API keys, and autonomous agents operate under credentials that traditional IAM systems treat as second-class citizens.

The raised revenue guidance tied to AI agent IAM signals that enterprises are already carving out incremental budget for this category. Security leaders who previously treated IAM as a solved problem now need line items for agent identity controls, privileged access for agents, and identity threat detection feeds. This is not a hypothetical future spend—it is showing up in Okta's Q2 numbers and guiding their FY outlook.

Quest Software adds five identity-security capabilities for AI agent defense

On September 16, 2026, Quest Software announced five identity-security capabilities for its Security Management Platform: Quest Identity Insights, Agentic AI Defense, Secure Replay, Quest Guardian Managed Recovery Services, and Quest Secure Migration. The expansion explicitly targets environments where AI agents gain broader access and autonomy, addressing the risk that compromised agents can act under user or service identities without traditional authentication friction.

Quest's existing footprint in Active Directory management and Windows auditing gives it adjacency to identity-centric incident response. The new capabilities overlap with Semperis in AD recovery, SailPoint in identity-risk analytics, and Okta in identity threat detection. For organizations already deploying Quest for AD management, the expansion adds an identity security and recovery layer without introducing a new vendor, which matters for buyers constrained by integration overhead or vendor count limits.

Quest Guardian Managed Recovery Services introduces identity-centric recovery as a discrete managed service, likely sold under separate contract value. Security leaders must budget for this alongside detection and prevention, creating a third spend category in identity security beyond access control and monitoring.

GuidePoint Security expands non-human identity services

GuidePoint Security launched expanded services for non-human identity risk, targeting service accounts, API keys, and machine identities that proliferate as AI agents and automation scale. The move aligns with Okta's Permiso integration and Quest's Agentic AI Defense, reflecting a common recognition across vendors that non-human identities now outnumber human users in most enterprise environments.

The convergence of these announcements—Okta's governance and PAM expansion, Quest's identity-security platform, and GuidePoint's NHI services—indicates that AI agent identity is shifting from a niche concern to a core IAM category. Buyers who treat agents as edge cases risk missing budget cycles and compliance windows as vendors productize around this use case.

What to watch

Track Okta's Q4 2026 and Q1 2027 release schedules for OIG and OPA. Early access features often slip, and buyers planning governance or PAM consolidation should validate production readiness before committing to cutover timelines. Monitor whether Okta's raised guidance translates into sustained revenue growth in subsequent quarters, which would confirm that AI agent identity spend is durable rather than one-time project budget.

For Quest and GuidePoint, watch customer case studies and integration partnerships. Quest's platform expansion is only valuable if it integrates cleanly with existing SIEM, SOAR, and endpoint tooling. GuidePoint's NHI services need published detection logic and response playbooks to differentiate from generic identity consulting.

Budget for agent identity controls separately from traditional IAM. The revenue signals from Okta and the product launches from Quest indicate this is a distinct spend category, not an add-on to existing access management contracts.