Okta

Okta is the category-defining independent identity platform, and after a rough stretch it has turned decisively toward disciplined, profitable growth: fiscal 2026 delivered record GAAP and non-GAAP operating profitability, roughly $218M in operating cash flow and $211M in free cash flow, on a revenue base near $2.6B. The franchise spans both halves of the identity market — Workforce Identity Cloud secures the employees, contractors, and partners of tens of thousands of enterprises with SSO, adaptive MFA, and governance, while Customer Identity Cloud, built on the $6.5B Auth0 acquisition, owns the developer-facing consumer login market few competitors serve at scale. Neutrality is Okta's structural moat: because it is not Microsoft, it is the identity layer enterprises trust precisely when they want to avoid deepening dependence on a single hyperscaler, and its catalog of thousands of pre-integrated applications makes it the switching-cost-laden connective tissue of enterprise access. The tailwinds ahead are enormous — identity is now the primary attack surface, machine and AI-agent identities are exploding in number, and every organization needs a governance layer for non-human access. Okta's profitability turn gives it the earnings power to invest into that expansion, and a proven, sticky, cash-generative platform at the center of the security stack is a defensible long-term position.

Okta's growth has slowed to a pace that no longer justifies a premium security multiple — fiscal 2026 subscription revenue grew roughly 11-12%, a stark deceleration from the 20%-plus era, and its fiscal 2027 outlook implies more of the same, leaving it in the uncomfortable middle: too slow to be a growth stock, not yet cheap enough to be a value one. The trust deficit is self-inflicted and lingering: the October 2023 support-system breach, in which attackers accessed customer case files, followed earlier Lapsus$ and credential-stuffing incidents, and for an identity-security vendor a breach of its own systems is uniquely corrosive — it hands every sales cycle to competitors as an objection. Chief among them is Microsoft, whose Entra ID is bundled into the E5 licenses most enterprises already own, an existential bundling threat to workforce identity that no amount of neutrality messaging fully neutralizes. The Auth0 integration has underdelivered against the $6.5B price, and CIAM competition from AWS Cognito and others compresses that side. Meanwhile the identity market is heating up around Okta — SailPoint and Saviynt press on governance, CyberArk (now inside Palo Alto) on privileged access — so the platform faces well-capitalized specialists on every flank while its own growth rate quietly converges toward the low double digits.