Okta, Inc.

Core Business & Products

Okta is a cloud-native identity and access management (IAM) company focused on securing how users—human and machine—authenticate into applications, APIs, and infrastructure. It monetizes primarily via subscription SaaS (≈98% of revenue) with smaller contributions from professional services.

Key Product Families

Okta sells these as multi-tier SaaS subscriptions, typically 1–3-year terms, priced per identity, with upsell via additional modules and higher tiers.

Industry, Sector & Position in the Value Chain

• Sector: Technology
• Industry: Software – Infrastructure (Security / Identity)
• Security stack role: Identity "control plane" in Zero Trust architectures – sits between users/devices and applications, orchestrating authentication, authorization, and policy enforcement.

Okta is effectively a horizontal platform touching:

• SaaS apps (Office 365, Salesforce, ServiceNow, etc.)
• Cloud infrastructure (AWS, Azure, GCP)
• On-prem apps and directories (AD/LDAP)
• Increasingly, AI agents and non-human identities (bots, workloads, APIs)

Target Markets & Geographic Mix

Customer Segments

• Enterprise and upper-mid-market (core focus)
• Public sector (U.S. Fed/DoD and global governments) – a growing share of wins
• Developers building CIAM into consumer apps (Auth0 heritage)

Geography

North America still dominates revenue, but international ≈20% of revenue, growing high single digits.

Key Operational Metrics

From FY25 and Q2 FY26 disclosures:

Revenue

• FY25: $2.61B (+15% YoY)
• Q2 FY26: $728M (+13% YoY)
• FY26 guidance: $2.85–2.86B (+9–10% YoY)

Revenue Mix

• Subscription: $2.556B (≈98% of FY25 revenue, +16% YoY)
• Professional services: ≈$54M (declining, <2%)

RPO / cRPO (Future Contracted Revenue)

• FY25 RPO: $4.215B (+25% YoY)
• FY25 cRPO: $2.248B (+15% YoY)
• Q2 FY26 RPO: $4.152B (+18% YoY), cRPO: $2.265B (+13% YoY)

Net Retention

• FY25: ~107% (down from ~111–120% prior years)
• Q2 FY26: 106%, pressured by macro and optimization on large customers

Customer Base

~19,650 customers at FY25 year-end; 470+ customers with >$1M ACV, up 22% YoY.

Market Position & Moat

• Independent leader in identity: Okta is the leading pure-play IAM vendor and a Leader in the 2025 Gartner Magic Quadrant for Access Management.
• Platform breadth: Okta Identity Cloud + Auth0 + newly expanded identity governance and privileged access create a broad identity security fabric, positioning Okta as a one-stop identity layer (vs point products).
• Ecosystem & integrations: Thousands of pre-built connectors to SaaS apps, infrastructure, VPNs and security tools → strong ecosystem effects and integration "lock-in".
• Switching costs: Identity is deeply embedded into authentication flows, policies and workflows; migrations are painful and risky, which supports stickiness even when Microsoft/others bundle competing solutions.

Financial Strength

Using latest TTM metrics (FullRatio + FY25 filings):

Margins (TTM)

• Gross margin: ~76.9%
• Operating margin (GAAP): 2–3% (FY25: -3%; inflection to positive TTM)
• EBITDA margin: ~10.5%
• Net margin: ~6.1%
• Non-GAAP operating margin FY25: 22%, Q4 FY25 25%; FY26 guide ~25%

Returns

ROIC ≈ 11% (TTM, non-GAAP basis), ROE low-single-digits – still sub-scale on GAAP but trending up as SBC and legacy costs normalize.

Cash Flow & FCF Conversion

• FY25 FCF: $730M, ~28% FCF margin
• TTM FCF ≈ $838M; FCF/share ≈ $4.78 → ~6% FCF yield at $80
• FCF is structurally strong because identity has low incremental COGS and moderate capex

Balance Sheet Quality

• Cash, cash equivalents & ST investments ≈ $2.5–2.9B
• Debt ≈ $0.94B (largely convertibles)
• Net cash ≈ $1.6–2.0B
• Debt/Equity ≈ 0.14, Net debt/EBITDA ≈ 0.2x
• Current ratio ~1.3x; ample liquidity, no near-term solvency risk

Operational Excellence & Technology Edge

Go-to-market Execution

• Revenue still growing high-single to low-double digits despite macro headwinds
• Non-GAAP operating margin increased from 14% (FY24) to 22% (FY25), and Q2 FY26 non-GAAP op margin reached 28%, indicating strong expense discipline and scale-benefits

Identity-first Security Architecture

• Okta's architecture is cloud-native, multi-tenant and designed around Zero Trust
• The acquisition of Axiom Security expands into privileged access and non-human identity security, crucial as AI agents and microservices proliferate

Product Innovation & R&D Culture

• Persistent roll-out of new capabilities: Cross-App Access (for AI agents), identity governance, secure identity assessments, and deeper partner ecosystem
• Okta is leaning into AI-driven risk scoring and anomaly detection, aligning with industry's push toward continuous, context-aware identity security

Management Quality & Governance

• Leadership: CEO Todd McKinnon (ex-Salesforce) and co-founder Frederic Kerrest (Board) have navigated Okta from hypergrowth losses to a more balanced growth-plus-profit model
• Capital allocation: Focused on organic R&D & selective M&A (Auth0, Axiom) to broaden platform. No dividend; buybacks minimal but could become more meaningful as FCF compounding continues
• Governance: Standard U.S. tech governance; key issue is operational security and risk management, where the board has come under pressure after multiple breaches (see risk section)

Operational Challenges

Financial Concerns

Growth Deceleration

• FY25 revenue growth 15% → FY26 guide 9–10%
• Q1 & Q2 FY26 calls stressed macro uncertainty; management refused to raise full-year guide after strong Q1, triggering a ~13% one-day drop

Low GAAP Profitability & High SBC

• GAAP net margin low-single digits; large gap vs non-GAAP due to stock-based comp and amortization
• Long-term investors must assume continued dilution (management guides ~184–186M diluted shares vs ~176M basic)

Market Position Vulnerabilities

Microsoft Entra ID (formerly Azure AD)

Bundled with Microsoft 365, Entra has massive distribution; many enterprises already use it as de facto IAM, forcing Okta to justify itself as "best-of-breed" vs "good-enough and free".

Price Competition

As customers rationalize SaaS spend, platform bundling and vendor consolidation can pressure standalone providers like Okta to discount or risk churn.

Strategic Missteps

• Post-Auth0 integration friction: Reports of sales execution issues and channel confusion followed the Auth0 acquisition, contributing to guidance cuts and volatile stock performance in 2022–23
• Communication around breaches: Slow or incomplete disclosure in past incidents (e.g., 2023 support breach) damaged credibility; management is still in "rebuild trust" mode with security-sensitive customers

Summary: Okta's key risks are execution/security, competitive, and macroeconomic; financial risk is relatively modest given net cash and strong FCF.

Primary Competitors

1. Microsoft Entra ID – bundled enterprise IAM (not separately traded, inside MSFT)
2. CyberArk (CYBR) – identity security & privileged access leader; strong in high-security regulated sectors
3. Zscaler (ZS) – Zero Trust secure access; strong in cloud security; overlapping customers and budgets
4. CrowdStrike (CRWD) – endpoint + identity threat protection (via Falcon Identity); increasingly converging into unified security platforms
5. Ping Identity/ForgeRock & others – private after PE acquisitions; strong in legacy/enterprise CIAM and federation

Comparative Positioning (Qualitative)

Market Share & Growth

• Okta: IAM focused, ~8% identity market share per some estimates; revenue growth slowing to high single/low double digits
• CyberArk / Zscaler / CrowdStrike: higher growth (mid-teens to >20% YoY), but at much richer valuation multiples

Margins

• Okta: EBIT margin low but improving; FCF margin high-20s
• CyberArk: still GAAP-loss-making with lower margins, trades at elevated P/S
• Zscaler & CrowdStrike: premium margins and growth; market pays 20–30x sales in some cases

Valuation Multiples

Competitive Differentiation: Where Okta Wins / Lags

Industry Dynamics

• IAM & IDaaS TAM expected to grow ~20%+ CAGR through 2030, driven by cloud migration, SaaS adoption and Zero Trust mandates
• Consolidation & platformization: customers prefer fewer vendors → advantages to comprehensive platforms
• Strong secular tailwinds from AI agents, machine identities and API security (Okta is leaning into these)

Historical Performance (3–5 Year View)

• Revenue grew from ~$1.3B (FY21) to $2.61B in FY25 (CAGR ~18–20%)
• Transition from deep GAAP losses to small GAAP net income and robust non-GAAP profitability and FCF
• Net retention trend: high-teens/120%+ → ~106–107% as of FY25–Q2 FY26, indicating maturation and optimization

Future Growth Drivers

1. Core IAM & Zero Trust adoption – growth in cloud, SaaS, hybrid work and multi-cloud continues to drive new logos and upsell
2. Public sector & regulated industries – Q2/FY25 beat showed strong contribution from U.S. government and DoD contracts, which can be long-tenured and high-ACV
3. Customer Identity & developer adoption (Auth0) – CIAM remains under-penetrated; Okta is well positioned here
4. Non-human identity / AI agents – Axiom acquisition and "Cross App Access" initiatives target a potential $20–50B+ emerging TAM for machine/agent identity security
5. Identity Governance & Privileged Access – adding governance and PAM expands wallet share within existing customers

TAM and Penetration

Analysts estimate IAM/IDaaS markets in the tens of billions by late decade, growing >20% CAGR; Okta's forecast revenue of ~$2.85–2.9B by FY26 suggests mid-single-digit percentage penetration, leaving large headroom.

Strategic Initiatives & Execution

• Go-to-market specialization by segment and product to improve sales focus (core enterprise, public sector, CIAM, etc.)
• "Okta Secure Identity Commitment" – broad initiative to re-establish trust and harden security post-breaches
• Increased focus on platform consolidation messaging to capture spend from customers consolidating multiple identity tools onto a single vendor

M&A Target Potential

Okta's mid-teens billion market cap, net cash, and strategic position could make it attractive to large cloud or security platforms wanting a first-class identity layer.

Constraints

• Regulatory scrutiny if acquired by hyperscalers (antitrust/security)
• Cultural and technical integration risk for any buyer

Coverage & Ratings

Major covering firms include Jefferies, Barclays, Mizuho, Cantor Fitzgerald, BTIG, Baird, William Blair, Stifel, among others.

Consensus Price Targets

• Average 12-month target: ~$121/share (~50–51% upside vs ~$80 price)
• Range: Low ~$75, High ~$142

Recent Analyst Actions

EPS / FCF Estimates & Guidance

• Okta raised FY26 non-GAAP EPS guidance to ~$3.33–$3.38 in the latest quarter, ahead of prior consensus around $3.29
• Street expectations generally align with management's revenue and margin guidance, assuming low-teens revenue growth and mid-20s operating margin

Sentiment: Overall constructive but less euphoric than earlier this year—analysts like the FCF story but are tempering top-line expectations.

9A. Relative Valuation

Current Metrics (Approx)

Versus Security Peers (Approx)

• CyberArk, CrowdStrike, Zscaler forward P/S: ~14–24x
• Forward P/E often 60–100x+ (or N/A) as they reinvest heavily
• Many peers trade at much higher EV/FCF (often 50–100x+)

Sector context: IAM and security vendors often command premium multiples (mid-teens P/S) in private markets; public markets for mature names are more conservative, but Okta's current EV/Sales ~4x puts it closer to "value software" than high-growth cybersecurity.

9B. Absolute Valuation (DCF-Style Scenario)

Using a simplified DCF / FCF framework (all ballpark, not a full model):

• TTM revenue: ~$2.76B; FCF margin currently ~20–25% (blending Q1–Q2 FY26 and guidance)
• Assume base-case FCF of $0.6B (after SBC) as a starting point
• Growth: 10–12% FCF growth for 5 years, then 4–5% terminal
• WACC: ~10%

Under these assumptions, indicative enterprise value ranges roughly:

Adding net cash around $1.8–2.0B yields equity value ~ $14–22B. With ~175M diluted shares, this translates to a per-share intrinsic value range roughly $80–$125, with a base cluster around $95–$110.

Profitability Quality

• Rapid improvement from loss-making to positive GAAP income. FY25 saw a small GAAP profit with expanding gross and operating margins
• Non-GAAP margins are robust and better aligned with cash, but high SBC still depresses GAAP metrics—this is improving but remains a watch item

Balance Sheet Strength

• Net cash balance sheet with >$2.8B cash & investments vs ~0.9B of convertibles; current ratio ~1.3; D/E ~0.14
• Plenty of capacity to invest in R&D, tuck-in M&A, or buy back debt; share repurchases have not been a focus yet but could emerge as FCF expands

Cash Flow Quality

• Operating cash flow and FCF have consistently improved, driven by higher margin and disciplined spending, not one-off factors
• Working capital dynamics (deferred revenue, commissions) are typical for subscription SaaS and supportive of cash generation

Capital Allocation

• Historically aggressive on SBC and M&A (Auth0), now in harvest phase: focusing on integration, margin expansion, and organic innovation
• No dividend; modest debt buybacks; no major buyback program
• The bias is toward reinvesting in R&D and sales while keeping leverage low

11A. Investment Recommendation

11B. Investment Thesis – Key Points

1. Identity at the Core of Zero Trust and AI – Identity is a foundational control plane for cloud, SaaS, and AI agents, and Okta remains one of the few scaled, neutral, multi-cloud identity platforms.
2. Transition to Profitable Growth – Okta has moved decisively into mid-20s non-GAAP operating margins and >20% FCF margins, with guidance implying sustainable profitability and continued growth.
3. Attractive Risk-Reward vs Peers – Trading at ~4–5x EV/Sales and ~16–17x P/FCF, Okta is significantly cheaper than leading cyber peers despite similar TAM relevance and substantially improved fundamentals.
4. Healthy Balance Sheet & Optionality – A net cash position and strong FCF provide resilience and optionality for R&D, selective M&A, or shareholder returns; Okta is also a non-crazy M&A candidate itself.
5. Risks are Real but Manageable – Competitive and security-incident risks are material, but management's transparency, remediation, and improved execution reduce the probability of a structural impairment.

11C. Comprehensive Strategy

For Long-Term Investors (3–5+ years)

Entry Strategy

• Current zone (~$75–$85) looks attractive for initial or incremental buys
• Consider heavier accumulation on pullbacks towards strong support levels around $72–$75, which technical analyses highlight as deeper support

Position Sizing & Allocation

• For a diversified growth portfolio: Core allocation: 2–4% of total equity portfolio
• For a cyber-tilted portfolio: 4–6% with offsetting lower-beta holdings

Time Horizon & Price Targets

Rebalancing Triggers

For Active Traders

Technical Considerations (Near-term)

• Short-term support: ~$79 (volume support), deeper support ~$75–72
• Near-term resistance: ~$83–86 (pivot/moving-average cluster); further resistance around ~$90–95

Trading Plan

• Swing long entries:
  • Buy partial at $78–80 on successful tests of support
  • Add if price reclaims $86–90 on strong volume (break above short-term downtrend)
• Profit targets:
  • First target: $92–95 (prior resistance band)
  • Second target: $105–110 if positive catalysts (earnings beat, stronger guidance, major customer wins)
• Stop-loss guidelines:
  • Tight: close below $72–73 on high volume
  • Looser, position-trading: mental stop below $68

Risk Management

• For swing trades, keep position size modest (e.g., 0.5–1.5% of portfolio per trade)
• Expected max drawdown per trade: 15–20% from entry; avoid over-concentration in single cyber name given sector correlations

Catalysts and Ongoing Monitoring

Key Metrics to Track Quarterly

• Revenue growth & guidance vs IAM market growth
• RPO & cRPO growth; DBNRR
• Non-GAAP operating & FCF margins vs FY26 targets
• Large-customer counts (> $100K and > $1M ACV)
• Security incident disclosures & customer churn commentary

Reassessment Triggers

• Structural shift in competitive landscape (e.g., Microsoft or a major peer launches a significantly superior or cheaper solution)
• Sustained inability to grow above high-single-digit rates despite strong market demand
• Evidence that AI-driven identity initiatives fail to resonate with customers