纵横研报
Industry

AI 身份安全

02Reports
OKTA.US logo
·AI 身份安全 ·In-house Research

Okta: Identity Infrastructure in Transition

Okta is the largest independent identity-security vendor, selling workforce and customer identity (SSO, MFA, governance, privileged access, and emerging AI-agent controls) as recurring subscriptions; FY2026 subscription revenue was $2.855 billion of $2.919 billion total. Growth has cooled to about 11% with FY2027 guidance of just 9–10%, but free cash flow is now substantial, with $884 million of operating cash flow in FY2026, so the real debate is whether Okta is a sturdier compounder or a maturing core squeezed by Microsoft's bundle and a still-healing trust scar. Rating Hold: a credible business at fair-to-moderate value with limited margin of safety, with a genuine moat and real cash but slower growth and bundling pressure that cap the rerating upside.

Hold
·AI 身份安全 ·内部研究

AI Agent 时代的身份安全控制平面

AI Agent 普及后,身份安全升级为统一控制人类、workload、service account、API key、OAuth app、证书、token、CI/CD、机器人和 Agent 的"身份控制平面"。Non-Human Identity(NHI)成为新预算入口——MCP 规范已强制 resource 参数、token audience validation,并禁止 token passthrough。最先落地的预算池是 PAM / machine identity / secrets / IGA-CIEM 扩展,因为这些 already exist 且合规驱动强。直接受益者:SailPoint(FY26 ARR $11.25 亿、SaaS ARR +38%)、CyberArk、Okta(FY26Q4 RPO +15%)、Microsoft Entra、IBM/HashiCorp Vault、JFrog(Security Core 已占 ARR 10%);CrowdStrike 收 SGNL、Cisco 拟收 Astrix 印证 NHI 控制面是下一代入口。云厂商内建 IAM 会持续商品化基础 secrets/CIEM,跨云跨 SaaS 的 ownership/least-privilege/runtime enforcement 才是利润池。

跟踪