What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2025-03-05 compared with 2024-03-01 · 144 added, 140 removed, 212 unchanged (57% of the section changed)

Okta is the leading independent identity partner.

is the leading independent identity partner.

Our vision is to free everyone to safely use any technology, and we believe identity is the key to making that happen.

Our purpose is to bring simple and secure digital access to people and organizations everywhere.

Our Workforce Identity Cloud and Customer Identity Cloud, powered by Auth0, enable our customers to securely connect the right people to the right technologies and services at the right time.

The acceleration of digital transformation, cloud adoption and the evolving security threat landscape are driving a shift in how organizations securely manage the identity of their employees, contractors and partners on the internet.

At the same time, changing consumer expectations favoring simple, secure digital experiences are driving the adoption of new consumer identity technologies.

Our Workforce Identity Cloud and Customer Identity Cloud help organizations effectively harness the power of cloud, mobile and web technologies by securing users and connecting them with the applications and technology they use.

Every day, thousands of organizations and millions of people use Okta to securely access a wide range of cloud, mobile, web and Software-as-a-Service ("SaaS") applications, on-premises servers, application programming interfaces ("APIs"), IT infrastructure providers, and services from a multitude of devices.

Employees and contractors sign into Workforce Identity Cloud to seamlessly and securely access the applications they need to do their most important work.

Organizations use our platform to collaborate with their partners and to provide their customers with more modern and secure experiences in the cloud and via mobile devices.

Developers leverage our Customer Identity Cloud and Workforce Identity Cloud to securely and efficiently embed identity into the software they build, allowing them to innovate and focus on their core mission.

Our approach to customer identity provides organizations—from companies to government agencies—with the scale, interoperability, extensibility and security they need to build applications with seamless and private experiences that serve a wide variety of users, from customers to citizens.

As we add new customers, users, developers and integrations to our platform, our business, customers, partners and users benefit from powerful network effects that increase the value and security of our Workforce Identity Cloud and Customer Identity Cloud.

Given the growth trends in the number of applications and cloud adoption and the movement to remote and hybrid workforces, identity is becoming the most critical layer of an organization’s security.

Our Okta Platform and Auth0 Platform enable our customers to securely connect the right people to the right technologies and services at the right time.

At the same time, consumer expectations favoring simple, secure digital experiences are driving the adoption of new consumer identity technologies.

Our platforms help organizations effectively harness the power of cloud, mobile and web technologies by securing users and connecting them with the applications and technology they use.

Every day, thousands of organizations and millions of people use our platforms to securely access a wide range of cloud, mobile, web and Software-as-a-Service ("SaaS") applications, on-premises servers, application programming interfaces ("APIs"), IT infrastructure providers, and services from a multitude of devices.

Employees and contractors sign into the Okta Platform to seamlessly and securely access the applications they need to do their most important work with more modern and secure experiences in the cloud and via mobile devices.

Developers leverage our Okta Platform and Auth0 Platform to securely and efficiently embed identity into the software they build, allowing them to innovate and focus on their core mission.

Our approach to customer identity provides organizations with the scale, interoperability, extensibility and security they need to build applications with seamless and private experiences that serve a wide variety of users, from customers to citizens.

As we add new customers, users, developers and integrations to our platforms, our business, customers, partners and users benefit from powerful network effects that increase the value and security of our solutions.

Given the growth trends in cloud adoption and the number of applications customers use and the movement to remote and hybrid workforces, identity is becoming the most critical layer of an organization’s security.

As organizations shift from network-based security models to a Zero Trust security model focusing on adaptive and context-aware controls, identity has become the most reliable way to manage user access and protect digital assets.

Our approach to identity allows our customers to simplify and efficiently scale their security infrastructures across internal IT systems and external customer-facing applications.

As of January 31, 2024, more than 18,950 customers across nearly every industry used Okta to secure and manage identities around the world.

As of January 31, 2025, more than 19,650 customers across nearly every industry used our solutions to secure and manage identities around the world.

Our customers consist of leading global organizations ranging from the largest enterprises to small- and medium-sized businesses, universities, nonprofits and government agencies.

We partner with leading application, infrastructure and security vendors, such as Amazon Web Services ("AWS"), CrowdStrike, Google, LexisNexis Risk Solutions, Microsoft, Netskope, Palo Alto Networks, Plaid, Proofpoint, Salesforce, ServiceNow, VMware, Workday, Yubico and Zscaler.

We had over 7,000 integrations with cloud, mobile and web applications and IT infrastructure providers as of January 31, 2024, which, while not directly correlated to revenue, shows the breadth and acceptance of our platform.

We had over 7,000 integrations with cloud, mobile and web applications and IT infrastructure providers as of January 31, 2025, which, while not directly correlated to revenue, shows the breadth and acceptance of our platforms.

We employ a SaaS business model and generate revenue primarily by selling multi-year subscriptions to our cloud-based offerings.

We focus on acquiring and retaining our customers and increasing the value we provide to our customers over time and thus their spending with us through expanding the number of users who access our Workforce Identity Cloud and Customer Identity Cloud and up-selling additional product offerings.

We focus on attracting and retaining our customers and increasing the value we provide to them over time.

By retaining customers and increasing value, we increase their spending with us through expanding the number of users who access our Okta Platform and Auth0 Platform, and by selling additional product offerings.

We sell our product offerings directly through our field and inside sales teams, as well as indirectly through our network of channel partners, including resellers, system integrators, and other distribution partners.

Okta is an independent and neutral cloud-based identity solution that allows our customers to integrate with nearly any application, service or cloud that they choose through our secure, reliable and scalable platform and cloud infrastructure.

Our technological neutrality allows our customers to easily adopt the best technologies, and our two clouds are designed to securely connect users to the technology that they choose.

We prioritize the compatibility of our platform with public clouds, on-premises infrastructures and hybrid clouds.

Our platform is used by organizations in two distinct and powerful ways.

Our customers use it to manage and secure their employees, contractors and partners, which we refer to as workforce identity as supported by our Workforce Identity Cloud.

Our customers also use it to enable, manage and secure the identities of their customers, which we refer to as customer identity as supported by our Customer Identity Cloud.

Workforce Identity Cloud

Workforce Identity Cloud simplifies the way an organization’s employees, contractors and partners connect to its applications and data from any device while increasing efficiency and keeping IT environments secure.

Workforce Identity Cloud can be used as the central system for an organization’s connectivity, access, authentication and identity lifecycle management needs spanning all of its users, technology and applications.

Our customers use Workforce Identity Cloud to secure their workforces, to create solutions that make their partner networks more collaborative, and to provide more seamless and secure experiences for their end users, which, combined with our open approach, enables our customers to future-proof their environments.

Our Platforms

We offer independent and neutral cloud-based identity solutions that allow our customers to integrate with nearly any application, service or cloud that they choose through our secure, reliable, and scalable platforms.

Our technological neutrality allows our customers to adopt the best technologies easily, and our two platforms are designed to securely connect users to the technology that they choose.

Okta AI, a suite of AI-powered capabilities using our unique threat intelligence identity data to power real-time identity actions, is infused into several products available on our two platforms.

We prioritize the compatibility of our platforms with public clouds, on-premises infrastructures and hybrid clouds.

Our platforms are used by organizations in two distinct and powerful ways.

Customers manage and secure their employees, contractors and partners using what we call “workforce identity,” as supported by our Okta Platform.

Customers can enable, manage and secure their customers’ identities using what we call “customer identity,” as supported by both our Okta Platform and Auth0 Platform.

Okta Platform

The Okta Platform simplifies the way an organization’s employees, contractors and partners connect to its applications and data from any device, while increasing efficiency and keeping IT environments secure.

The Okta Platform can be used as the central system for an organization’s connectivity, access, authentication and identity lifecycle management needs spanning all of its users, technology and applications.

Our customers use the Okta Platform to secure their workforces, to create solutions that make their partner networks more collaborative, and to provide more seamless and secure experiences for their end users.

These features, combined with our technological neutrality, help our customers future-proof their environments.

We enable our customers to easily deploy, manage and secure applications and devices, and to provision and support users across their IT environments, with a simple, intuitive, consumer-like user experience.

Once deployed, we enable administrators to enforce contextual access management decisions based on conditions such as user identity, device, location, application identity, IP reputation and time of day.

We enable organizations to provide their workforces with immediate and secure access to every application they need from any device they use, without requiring multiple credentials, which significantly enhances user connectivity and productivity.

We offer our customers an additional security layer through our Adaptive Multi-Factor Authentication (“Adaptive MFA”) product offering.

Our Universal Directory product offering also serves as a system of record to help our customers organize, customize and manage their users.

We offer our customers an additional security layer through our Adaptive Multi-Factor Authentication (“Adaptive MFA”), Device Access, and Identity Threat Protection with Okta AI product offerings.

Our Universal Directory product offering also serves as a system of record to help our customers organize and manage their users.

Our Lifecycle Management product offering enables customers to manage users’ access privileges through their entire lifecycle with a no-code approach that improves administrative efficiency and productivity.

Our Workflows product offering enables the building of identity-related business processes with minimal or no-code.

Okta Identity Governance, our unified identity access management and identity governance product offering, helps our customers improve their security and compliance posture while mitigating modern security risks and increasing efficiency.

Our Privileged Access Management product offering provides unified access and governance for privileged resources and increases visibility, compliance and security without compromising user experience.

Our Access Gateway product offering enables our customers to extend Workforce Identity Cloud to their existing on-premises applications.

Workforce Identity Cloud enables our customers to automate access across their growing ecosystem of employees, contractors and partners, increasing collaboration across their workforces.

Customer Identity Cloud

Customer Identity Cloud, powered by Auth0, enables companies, nonprofits and governmental agencies to transform their own customers’ or citizens’ experiences by empowering development teams to rapidly and securely build customer- and citizen-facing cloud, mobile or web applications.

Our Customer Identity Cloud primarily supports consumer and SaaS applications.

Our Access Gateway product offering enables our customers to extend the Okta Platform to their existing on-premises applications.

Our Identity Security Posture Management product offering proactively identifies vulnerabilities and security gaps before they can be exploited by providing consolidated visibility into identity posture across the Okta Platform and third-party solutions.

The Okta Platform enables our customers to automate and secure access across their ecosystem of employees, contractors and partners, increasing collaboration across their workforces.

Auth0 Platform

The Auth0 Platform enables companies, nonprofits and governmental agencies to transform their own customers’ or citizens’ experiences by empowering development teams to rapidly and securely build customer- and citizen-facing cloud, mobile or web applications.

The Auth0 Platform primarily supports consumer and SaaS applications.

It empowers application builders to innovate faster by removing the complexity from identity and making it simple, extensible and customizable.

2 unchanged sentences

Organizations are able to streamline user experience and improve security across all their applications, leading to increased customer acquisition, retention and loyalty.

Customer Identity Cloud provides multiple enhanced security capabilities including bot detection, Adaptive MFA, fraud prevention, and account takeover attack protection while delivering a high level of security.

In addition to security and authentication, Customer Identity Cloud also supports authorization.

The Auth0 Platform provides multiple enhanced security capabilities including bot detection, Adaptive MFA, fraud prevention, and account takeover attack protection while delivering a high level of security.

In addition to security and authentication, Auth0 also supports authorization, including fine grained authorization.

Our Auth for GenAI product offering enable developers to build chatbots and AI agents into their applications easily and securely.

Growth Strategy

Key elements of our growth strategy are to:

Execute with Our Platform

• Drive New Customer Growth .

To increase our market share, we intend to continue to grow our customer base using a land-and-expand sales model, with a focus on key markets by size of customers, as well as key verticals, including highly regulated sectors.

Execute with Our Platforms

• Deepen Relationships Within Our Existing Customer Base .

We strive to further increase revenue from our existing customers by cross-selling and up-selling additional and new product offerings.

We also believe we can expand our footprint by focusing on current customers that have deployed our Workforce Identity Cloud and expanding those customers’ use of our Customer Identity Cloud, or vice versa.

We also believe we can expand our footprint by focusing on current customers that have deployed our Okta Platform and expanding those customers’ use of our Auth0 Platform, or vice versa.

• Drive Growth with Large Customers.

To increase our market share, we intend to focus on growing our base of large customers using a land-and-expand sales model, with a focus on key markets by size of customers, as well as key verticals, including highly regulated sectors.

• Leverage Partner Ecosystem .

We plan to further leverage the sales efforts of resellers, system integrators, managed service providers, and other distribution partners, for growth, scale and specialized expertise.

For example, in fiscal 2024, we launched the Okta Elevate Partner Program designed to incentivize partners to deliver and manage Okta solutions.

We plan to further leverage the sales efforts of global system integrators, managed service providers, technology partners and other distribution partners for growth, scale and specialized expertise.

Our Okta Elevate Partner Program is designed to incentivize partners to deliver and manage our solutions.

• Expand Our International Footprint .

2 unchanged sentences

Increase Our Opportunities

• Innovate and Extend Our Platform with New Products .

• Innovate and Extend Our Platforms with New Products .

We intend to continue making significant investments in research and development, hiring top technical talent and maintaining an agile organization.

By continuing to innovate, introduce new product offerings and extend our platform, we believe that we can offer increasing value to our existing and potential customers.

By continuing to innovate, introduce new product offerings and extend our platforms, we believe that we can offer increasing value to our existing and potential customers.

For example, investments in Okta AI led to newly launched products like Identity Threat Protection for the Okta Platform, Guide for the Auth0 Platform and the industry’s first real Universal Logout solution.

• Extend Our Accessible Market with New Use Cases .

As technology and our customers’ needs evolve, we plan to use our platform to help our customers address new challenges, regulatory requirements and use cases.

As technology and our customers’ needs evolve, we plan to use our platforms to help our customers address new challenges, regulatory requirements and use cases.

• Increasing Go-To-Market Specialization .

We intend to further specialize the go-to-market organization to better meet the needs of the distinct buying centers.

Okta sellers will focus engagement on IT and security buyer needs, including all workforce identity products, as well as Okta customer identity.

Auth0 sellers will focus on meeting the unique needs of developers, which include highly technical customer identity customizations and flexible development models.

• Leverage Our Integrations .

The Okta Integration Network is an extensive ecosystem, which includes over 7,000 integrations with cloud, mobile and web applications as well integrated solutions with IT infrastructure providers.

These integrations include both Okta-maintained and vendor-maintained solutions.

The Okta Integration Network is an extensive ecosystem, which includes over 7,000 integrations with cloud, mobile and web applications as well integrated solutions with IT infrastructure providers and security vendors.

We continue to add new integrations as we expand the surface area of our identity platform.

1 unchanged sentence

• Expand our Developer Ecosystem .

We want to empower every application developer to use our platform to securely integrate identity into any application.

We believe that our platform enables developers to focus their time and attention on innovating within their core application capabilities while relying on our platform for their identity-related requirements, leading to more secure and convenient experiences for their own customers.

We want to empower every application developer to use our platforms to securely integrate identity into any application.

We believe that our platforms enable developers to focus their time and attention on innovating within their core application capabilities while relying on our platforms for their identity-related requirements, leading to more secure and convenient experiences for their own customers.

• Leverage Our Unique Data Assets with Powerful Analytics .

Our position at the intersection of people, devices, applications and infrastructure gives us unique access to powerful data, and the opportunity to provide differentiated insights based on that data, as well as predictive capabilities based on that data to help keep customers more secure.

Our position at the intersection of people, devices, applications and infrastructure gives us unique access to powerful threat intelligence identity data, and the opportunity to provide differentiated insights based on that data, as well as predictive capabilities

based on that data to help keep customers more secure.

We expect the value of our analytics to our customer base will increase as customers continue to connect more devices, applications and users to their networks and as we add more customers.

We also expect that our analytics ability will enable our customers to use our data and third-party data from our partners, to help customers make more informed and secure access decisions.

We also expect that our analytics ability will enable our customers to use our data and third-party data from our partners, allowing customers to make more informed and secure access decisions.

We do not currently derive direct revenue from our unique data assets, but we may explore opportunities for monetization in the future.

For example, in fiscal 2024 we announced Okta AI, which is designed to use AI

models and Okta’s unique crowdsourced threat intelligence identity data to power real-time identity actions, such as the industry’s first real Universal Logout solution.

• Mergers and Acquisitions and Investments .

2 unchanged sentences

Our Product Offerings

Okta's suite of product offerings and services is used to manage and secure identities.

Most of our product offerings can be used for both customer identity and for workforce identity use cases and we are continuously enhancing our product offerings and services.

Our portfolio of product offerings and services is used to manage and secure identities.

Most of our product offerings can be used for both customer identity and workforce identity use cases, and we are continuously enhancing our product offerings and services.

Our workforce identity product offerings are consumed through web and mobile interfaces and provide simple ways for IT organizations to manage identities for their employees, contractors and business partners.

For customer identity, our APIs are also used by developers to embed Okta identity functionality into their own customer-facing mobile or web applications.

We continuously improve our Workforce Identity Cloud and Customer Identity Cloud through the release and development of additional product offerings, features and services.

Workforce Identity Product Offerings

For customer identity, our APIs are also used by developers to embed our identity functionality into their own customer-facing mobile or web applications.

We continuously improve our Okta Platform and Auth0 Platform by releasing and developing additional product offerings, features and services.

Okta Platform Product Offerings

Access Management

4 unchanged sentences

Single Sign-On also enables built-in reporting and analytics that provide real-time search functionalities across users, devices, applications and the associated access and usage activity.

• Adaptive Multi-Factor Authentication .

• Adaptive MFA .

Adaptive MFA is a comprehensive, but simple-to-use, product that provides an additional layer of security for an organization’s cloud, mobile and web applications and data.

1 unchanged sentence

Adaptive MFA includes a policy framework that is integrated with a broad set of cloud and on-premises applications and network infrastructures.

It offers adaptive, risk-based authentication that leverages data intelligence from across the Okta network of thousands of organizations as well as from our partner ecosystem.

It offers adaptive, risk-based authentication that leverages data intelligence from across the Okta Platform network of thousands of organizations as well as from our partner ecosystem.

• API Access Management .

3 unchanged sentences

• Access Gateway .

Access Gateway enables organizations to extend Workforce Identity Cloud, which is a cloud-native platform, from the cloud to their existing on-premises applications so that they can harness the benefits of Okta to manage all of their critical systems, whether in the cloud, on-premises or hybrid.

Extending the benefits of Workforce Identity Cloud to hybrid IT environments delivers a single point of management for our customers’ administrators and a single location from which end users can access their critical applications.

Access Gateway enables organizations to extend Okta Platform, which is a cloud-native platform, from the cloud to their existing on-premises applications so that they can harness the benefits of the platform to manage all of their critical systems, whether in the cloud, on-premises or hybrid.

Extending the benefits of the Okta Platform to hybrid IT environments delivers a single point of management for our customers’ administrators and a single location from which end users can access their critical applications.

• Okta Device Access .

Okta Device Access extends Okta's secure access management to the device login experience.

Okta Device Access enables end users to securely log in to their devices with their Okta credentials and meet MFA challenges from a set of strong factors, helping organizations to harden their security posture by protecting a user's device with the same experience Okta provides for applications and resources.

Identity Governance and Administration (“IGA”)

Okta Device Access extends the Okta Platform's secure access management to the device login experience.

Okta Device Access enables end users to securely log in to their devices with their Okta Platform credentials and meet MFA challenges from a set of strong factors, helping organizations to harden their security posture by protecting a user's device with the same experience that the Okta Platform provides for applications and resources.

• Universal Directory .

2 unchanged sentences

When used for workforce identity, Universal Directory becomes a customer’s system of record for all of its employees, contractors and partners.

• Identity Threat Protection with Okta AI .

Identity Threat Protection helps safeguard organizations with native identity intelligence from the Okta Platform and signals from third-party tools integrated into an organization’s security stack.

The Okta Platform’s AI-driven continuous risk and policy evaluations deliver real-time identity threat assessment and automated remediation.

• Identity Security Posture Management .

Identity Security Posture Management (“ISPM”) helps organizations fortify their security measures and safeguard their digital assets with greater efficiency.

ISPM highlights critical identity security issues like admin sprawl, MFA bypass, and local accounts and prioritizes them based on risk severity for effective remediation.

Identity Governance and Administration (“IGA”)

• Lifecycle Management .

1 unchanged sentence

It automates IT processes and ensures user accounts are created and deactivated at the appropriate times, including the workflow and policies needed to power those processes, and helps ensure compliance requirements are met as user roles evolve and access levels change.

• Okta Workflows .

Designed to enable IT and security teams to move faster, more accurately and more cost effectively as they scale, Okta Workflows enables the building of identity-related business processes with minimal or no code, such as automating user onboarding and provisioning, creating just-in-time authorization for software development and IT processes, automating identity-centric security responses, and orchestrating customer data across backend systems.

• Okta Identity Governance .

9 unchanged sentences

Okta Privileged Access enables organizations to reduce risk with unified access and governance management for on-premises and cloud privileged resources, for better visibility, compliance, and security for critical applications, resources and infrastructure requiring privileged access.

Workforce Identity Cloud Platform:

Extensibility

• Okta Workforce Identity Workflows .

Customer Identity Cloud Product Offerings

Auth0 Platform Product Offerings

• Universal Login .

4 unchanged sentences

Attack Protection enables our customers to minimize risks associated with the ever-growing volume of identity-targeted attacks.

• Adaptive Multi-Factor Authentication .

• Adaptive MFA .

Simple-to-use and adaptable MFA that minimizes friction to end users.

5 unchanged sentences

• Private Cloud .

Private Cloud is a deployment option that allows our customers to run a dedicated cloud instance of Customer Identity Cloud.

Private Cloud is a deployment option that allows our customers to run a dedicated cloud instance of the Auth0 Platform.

Private Cloud capability supports multiple cloud providers.

5 unchanged sentences

Enterprise Connections enable Enterprise Federation using pre-built integrations with commonly used enterprise identity systems.

• Fine Grained Authorization .

Fine Grained Authorization helps customers manage complex authorization scenarios efficiently, and reduces latency and downtime as their systems and user bases grow.

• Auth for GenAI .

A suite of features that enable developers to build chatbots and AI agents into their applications easily and securely.

Through our broad and deep product offerings that support a wide range of workforce and customer identity use cases, we deliver multiple critical business outcomes for our customers.

5 unchanged sentences

Differentiated Administration, User and Developer Experience

Workforce Identity Cloud and Customer Identity Cloud offer administrators and users a consistent, easy-to-use, consumer-like experience across our product offerings.

The Okta Platform and Auth0 Platform offer administrators and users a consistent, easy-to-use, consumer-like experience across our product offerings.

Our technology integrates with industry-leading browsers and mobile applications to provide seamless access to nearly any web or native mobile application.

2 unchanged sentences

Robust Security

Security is essential for Okta and for our customers.

Security is essential for us and for our customers.

Our approach to security spans day-to-day operational practices from the design and development of our software to how customer data is segmented and secured within our multi-tenant platform.

The Okta platform and features are updated regularly, and along with continuous security testing, there are periodic security reviews that provide audited and verifiable security checkpoints to ensure the quality of our source code.

A number of our product offerings have attained multiple certifications, including SOC 2 Type II Attestations, CSA Star Level 2 Attestation, ISO/IEC 27001:2013, ISO/IEC 27017:2015, ISO/IEC 27018:2019, multiple agency Federal Risk and Authorization Management Program ("FedRAMP") Authorities to Operate, Department of Defense Impact Level 4, are in accordance with Health Insurance Portability and Accountability Act ("HIPAA"), and comply with many other international security frameworks.

Workforce Identity Cloud also supports FIPS 140-2 encryption requirements.

The Okta Platform and its features are updated regularly, and along with continuous security testing, there are periodic security reviews that provide audited and verifiable security checkpoints to ensure the quality of our source code.

A number of our Okta Platform product offerings have attained multiple

certifications, including SOC 2 Type II Attestations, CSA Star Level 2 Certification, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019 and comply with many other international security frameworks.

Certain Okta Platform offerings maintain multiple agency Federal Risk and Authorization Management Program ("FedRAMP") Authorities to Operate and are compliant to operate at Department of Defense Impact Level 4.

Certain Okta Platform offerings maintain minimum security requirements in alignment with the Security Rule of the Health Insurance Portability and Accountability Act ("HIPAA").

The Okta Platform also supports FIPS 140-2 encryption requirements.

Additional information regarding our cybersecurity risk management strategy and governance is included in “ Cybersecurity ” under Part I, Item 1C of this Annual Report on Form 10-K.

4 unchanged sentences

We have zero planned downtime, including during our maintenance windows.

Okta's proprietary architecture includes redundant, active-active-active availability zones with cross-continental disaster recovery regions, real-time database replication and geo-distributed storage.

Our proprietary architecture includes redundant, active-active-active availability zones with cross-continental disaster recovery regions, real-time database replication and geo-distributed storage.

If one of our systems goes down, another is quickly promoted.

Our architecture is designed to scale both vertically by increasing the size of the application tiers and horizontally by adding new geo-distributed cells.

Our Workforce Identity Cloud and Customer Identity Cloud are monitored not only at the infrastructure level, but also at the application and third-party integration level.

The Okta Platform and Auth0 Platform are monitored not only at the infrastructure level, but also at the application and third-party integration level.

Synthetic transaction monitoring allows our technical operations team to detect and resolve issues proactively.

4 unchanged sentences

Similarly, the Auth0 Marketplace is a trusted catalog of integrations that enables application teams to easily assemble complete identity solutions.

The Auth0 Marketplace connects customers with service providers and builders who solve integration use cases and implement integrations with Customer Identity Cloud.

The Auth0 Marketplace connects customers with service providers and builders who solve integration use cases and implement integrations with the Auth0 Platform.

Our Customers

As of January 31, 2025, we had more than 19,650 customers, including more than 4,800 customers with an annual contract value greater than $100,000.

Our customers span nearly all industry verticals and range from small organizations with fewer than 100 employees to companies in the Fortune 50, with up to hundreds of thousands of employees, some of which use our platform to manage millions of their customers' identities.

Our customers span nearly all industry verticals and range from small organizations with fewer than 100 employees to companies in the Fortune 50, with up to hundreds of thousands of employees, some of which use our platforms to manage millions of their customers' identities.

Sales and Marketing

We sell directly to customers through our direct inside and field sales force and also indirectly through our extensive ecosystem of channel partners.

We also use a self-service approach for developers to sign up for free trials of our Customer Identity Cloud.

which may transition to paid offerings.

We also offer a self-service approach for developers to sign up for free trials of our Auth0 Platform, which may transition to paid offerings.

We often leverage our expansion sales model to generate incremental revenue, often within the term of the initial agreement, through the addition of new users and the sale of additional product offerings.

In many instances, we find that initial customer success with our platform results in key internal decision-makers expanding their deployments, for example, from initial use for workforce identity to expanded use for their customer identity needs.

Furthermore, as our customers are successful in their businesses and increase headcount, the number of their customers or their monthly active users, we share in their growth as the number of identities that we manage increases.

Conversely, if our customers reduce the size of their workforce, then the number of identities that we manage, and therefore our revenue, decreases.

Our sales organization is structured to address the specific needs of each segment of our target market.

Our sales team is divided by geography and customer size, and in some cases by industry vertical.

In many instances, we find that initial customer success with our platforms results in key internal decision-makers expanding their deployments, for example, from initial use for workforce identity to expanded use for their customer identity needs.

Furthermore, as our customers are successful in their businesses and increase headcount, the number of their customers or their monthly active users, we have the opportunity to share in their growth as the number of identities that we manage increases.

Conversely, if our customers reduce the size of their workforce, then the number of identities that we manage, and therefore our revenue may potentially decrease.

Our sales organization is structured to address the specific needs of our target markets, and is divided by geography and customer size, and in some cases by industry vertical.

We also employ specialization in our sales team when appropriate, such as our “hunter-farmer” sales model for the Americas small- and medium-sized business market, and our newly announced global go-to-market specialization strategy, which is intended to better align our sales team with the distinct needs of IT security buyers and application developers.

Our direct sales force is supported by our sales engineers, security team, cloud architects, professional services team and other technical resources.

We benefit from an expansive partner ecosystem that helps drive additional sales.

Nearly all of the leading cloud application providers are our partners, and many of them drive further customer acquisition for us through co-selling arrangements, building our offerings directly into their products, and product demonstrations running on Okta.

We also partner with several of the large technology companies that are driving the movement to the cloud.

addition to these technology partners, we leverage our channel partners, including system integrators, traditional value-added resellers ("VARs") and Government VARs, to broaden the range of customers we reach.

In addition to these technology partners, we leverage our channel partners, including system integrators, traditional value-added resellers ("VARs") and Government VARs, to broaden the range of customers we reach.

Our most valuable marketing features our customers and their successes and is informed by a deeply data-driven approach, giving us insights into the efficacy of our efforts.

3 unchanged sentences

Research and Development

Our research and development organization is responsible for the design, architecture, creation and quality of our platform.

The research and development organization also works closely with our technical operations team to ensure the successful deployment and monitoring of our platform.

Our research and development organization is responsible for the design, architecture, creation and quality of our platforms.

The research and development organization also works closely with our technical operations team to ensure the successful deployment and monitoring of our platforms.

We use test automation and application monitoring to ensure our services are always on.

6 unchanged sentences

We provide 24/7 support for the highest support tiers as well as access to Customer Success and Technical Account Managers.

We also provide on-demand access to a robust online digital community and customer success hub, where our customers can find answers to common use cases, information about product features, and interact with Okta experts and industry peers.

We also provide on-

demand access to a robust online digital community and customer success hub, where our customers can find answers to common use cases, information about product features, and interact with our experts and industry peers.

Professional Services

Our professional services team provides assistance to customers in the deployment of our Workforce Identity Cloud and Customer Identity Cloud and includes identity and security experts, customized deployment plans, SmartStart, which provides a quick path to implementation, and Okta Expert Assist, in which we provide Workforce Identity Cloud and Customer Identity Cloud customers with recommendations and best practices designed to improve their security posture.

Our professional services team provides assistance to customers in the deployment of our Okta Platform and Auth0 Platform and includes identity and security experts, customized deployment plans, SmartStart, which provides a quick path to implementation, and Okta Expert Assist, in which we provide our customers with recommendations and best practices designed to improve their security posture.

Okta Community

2 unchanged sentences

We protect our intellectual property through a combination of trademarks, domain names, copyrights, trade secrets and patents, as well as contractual provisions and restrictions on access to our proprietary technology.

As of January 31, 2024, we had fifty-two issued patents in the United States, which expire between 2030 and 2043 and cover various aspects of our product offerings.

In addition, as of such date, we also had seventy-three issued patents granted outside of the United States, which expire between 2033 and 2043 and cover various aspects of our product offerings.

As of January 31, 2025, we had 74 issued patents in the United States and 81 issued patents granted outside of the United States that expire between 2030 and 2044 and cover various aspects of our product offerings.

We have registered “Okta” and "Auth0" as trademarks in many jurisdictions throughout the world to protect our brands.

We also have filed other trademark applications pending in various jurisdictions throughout the world.

We also have registered other trademarks in the United States including “Okta Workforce Identity Cloud,” “Okta Customer Identity Cloud,” “The World’s Identity Company,” and “Oktane".

We also have registered other trademarks in the United States including “The World’s Identity Company” and “Oktane".

We are the registered holder of a variety of domestic and international domain names that include “Okta,” "Auth0" and similar variations.

16 unchanged sentences

Our competitors vary in size and in the breadth and scope of the products and services offered.

However, certain of our competitors have substantial competitive advantages, such as significantly greater financial, technical, sales and marketing, distribution, customer support or other resources, longer operating histories, greater resources to make strategic acquisitions, and greater name recognition than we have.

However, certain of our

competitors have substantial competitive advantages, such as significantly greater financial, technical, sales and marketing, distribution, customer support or other resources, longer operating histories, greater resources to make strategic acquisitions, and greater name recognition than we have.

Our principal competitor is Microsoft.

Due to the flexibility and breadth of our platform, we can and often do co-exist alongside our competitors’ products within our customer base.

Due to the flexibility and breadth of our platforms, we can and often do co-exist alongside our competitors’ products within our customer base.

Principal competitive factors in our markets include flexibility, independence, product capabilities, total cost of ownership, time to value, scalability, user experience, number of pre-built integrations, customer satisfaction, global reach and ease of integration, management and use.

5 unchanged sentences

Human Capital Resources

Our core values—love our customers, never stop innovating, act with integrity, be transparent and empower our people—inform and guide our human capital initiatives and objectives.

In order to continue to innovate and drive customer success, it is crucial that we continue to attract, develop and retain exceptional talent and balanced teams.

To that end, we strive to make Okta a diverse and inclusive workplace, with opportunities for our employees to grow and develop in their careers, supported by fair and competitive compensation, benefits and wellness programs, and by initiatives that foster connections between and among our employees and their communities and a sense of belonging.

Our core values—love our customers, always secure and always on, build and own it, and drive what’s next—inform and guide our human capital initiatives and objectives.

In order to continue to innovate and drive customer success, it is crucial that we continue to attract, develop and retain exceptional talent.

To that end, we strive to make our workplace one in which employees feel like they have opportunities to grow and develop in their careers.

We support our employees with fair and competitive compensation, benefits and wellness programs, and initiatives that foster connections between and among our employees and their communities.

As of January 31, 2025, we had 5,914 employees, of which approximately 62% were in the United States and 38% were in our international locations.

2 unchanged sentences

In fiscal 2025, 86% of our eligible employees participated in our annual employee engagement survey.

We encourage you to review the “Diversity, Inclusion and Belonging,” “Responsibility,” “Careers” and “Okta for Good” pages of our website at www.okta.com for more detailed information regarding our human capital programs and initiatives.

Additional information on our diversity, inclusion and belonging strategy, diversity metrics and programs can be found in our most recent State of Inclusion at Okta annual report located on our website at www.okta.com/state-of-inclusion-at-okta, and additional information on our compensation, benefits and wellness programs is available on our Total Rewards website at rewards.okta.com.

Builder and Owner Culture

2 unchanged sentences

We want every employee to feel ownership of Okta.

Diversity, Inclusion and Belonging

We strive to foster a culture of inclusion and belonging and to build a diverse workforce to drive innovation and collective growth.

Our diversity, inclusion and belonging (“DIB”) initiatives—spearheaded by our DIB team and employee resource groups ("ERGs"), in partnership with various other teams—focus on DIB in our workforce, our workplace and the marketplace.

We employ inclusive recruitment and hiring practices to source talent from marginalized and underrepresented groups.

Our engagement with diversity sourcing programs and partnerships allows us to both source top talent from underrepresented groups for current open roles, and further strengthen our ability to build and nurture talent communities for future roles.

We also continue to recruit from a range of colleges and engage with organizations that support students and job seekers from marginalized and underrepresented groups through our social impact arm, Okta for Good.

Nurturing a culture of inclusion and belonging in our workplace is a key priority.

We empower our employees to be authentic and grow through open conversations and engagement resources, including facilitated workshops that focus on precise language and inclusive calibrations, personalized DIB learning tools, mentoring and workplace development programs focused on supporting talent from underrepresented communities, and sponsorship of ERGs that strengthen our DIB culture.

We currently have ERGs supporting women, people of collective cultures, veterans, the LGBTQIA+ community, neurodivergent people, and caregivers.

Growth and Development

1 unchanged sentence

We provide our employees with a wide range of learning and development opportunities, including in-person, virtual, social and self-directed learning, mentoring, coaching and external development.

We offer extensive onboarding and training programs through our internal learning initiative to prepare our employees at all levels for career progression and individual development.

Our employee onboarding program helps our employees get off to the right start, our manager development program helps to build a solid foundation for our people managers, and our technical training program brings our new technical employees up to speed on our product offerings.

Our extensive onboarding and training programs prepare our employees at all levels for career progression and individual development.

Our employee onboarding program helps our new hires get off to the right start, our manager development program helps to build a solid foundation for our people managers, and our technical training program brings our new technical employees up to speed on our product offerings.

Compensation, Benefits and Wellness

We provide robust compensation, benefits and wellness programs that help support the varying needs of our employees.

In addition to market-competitive base pay, short-term bonus incentives and long-term equity incentives, our total rewards program offers comprehensive employee benefits that may vary by country/region, including an employee stock purchase plan, a 401(k) plan in the United States with company matching contributions, comprehensive medical, dental and vision insurance, life and disability insurance, health savings accounts, charitable donation matching, flexible time off, volunteer time off, gender-neutral paid parental leave, fertility and adoption support, family care resources, mobile and internet reimbursement, mental health and lifestyle support programs and a variety of other health and wellness resources.

In addition to market-competitive base pay, short-term bonus incentives and long-term equity

incentives, our total rewards program offers comprehensive employee benefits that may vary by country or region, including an employee stock purchase plan, a 401(k) plan in the United States with company matching contributions, comprehensive medical, dental and vision insurance, life and disability insurance, health savings accounts, charitable donation matching, flexible time off, volunteer time off, gender-neutral paid parental leave, fertility and adoption support, family care resources, mobile and internet reimbursement, mental health and lifestyle support programs, and a variety of other health and wellness resources.

We are committed to fair compensation and opportunity in our workplace.

We conduct regular equal pay assessments and adjust as needed to attempt to ensure our employees are paid equitably without regard to gender or ethnicity.

Hybrid and Remote Work

We conduct regular equal pay assessments to attempt to promote pay equity among all of our employees.

Flexible Work

We help our employees succeed by providing flexibility in where and how they work.

For many years, Okta has embraced a hybrid approach to enable our employees to work remotely or from one of our offices.

We believe a hybrid approach can increase employee empowerment, satisfaction and productivity, drive efficiency and enable us to hire from a broader, more diverse pool of talent.

We embrace a hybrid working approach that permits employees to work remotely or from one of our offices.

We believe a hybrid approach can increase employee empowerment, satisfaction and productivity, drive efficiency and enable us to hire from a broader pool of talent.

Community and Social Impact

10 unchanged sentences

• Climate Action.

Prior to our initial public offering ("IPO") in April 2017, we reserved 300,000 shares of our common stock to fund and support the operations of Okta for Good, of which 56,250 shares of Class A common stock remained reserved for future issuances as of January 31, 2024.

Prior to our initial public offering ("IPO") in April 2017, we reserved 300,000 shares of our common stock to fund and support the operations of Okta for Good, all of which have been issued as of January 31, 2025.

Ongoing philanthropic activities will be funded via cash contributions from Okta, Inc.

Okta for Good is a part of our company and not a separate legal entity.

1 unchanged sentence

Sustainability

In fiscal 2021, we launched our Environmental, Social and Governance (“ESG”) program.

We established an oversight structure to provide strategic direction for our ESG program.

Our ESG efforts are overseen by our executive leadership team and are reviewed by the nominating and corporate governance committee of our board of directors.

Our ESG program covers issues relevant to our business under three categories:

Protecting Our Customers, Investing in Our People and Supporting Our Communities.

We have set public commitments to climate targets.

Our climate strategy to address emissions is currently aimed at energy consumption reduction, electrification, purchasing renewable energy and engaging with vendors to address their emissions.

We have a renewable energy program, which matches our electricity consumption from our offices, our remote workforce and cloud services with renewable electricity.

Additional information on our ESG programs and initiatives can be found in our “ESG Fact Sheet” on the “Responsibility” page of our website at www.okta.com.

We have an established sustainability program that aligns with our interest to have a positive impact on society and the environment.

We believe we have a long-term responsibility to meaningfully participate in our society for the benefit of the environment and all of our stakeholders, including our stockholders, customers, employees, partners and communities.

Our executive leadership team oversees the strategic direction of our sustainability strategy, while the nominating and corporate governance committee of our board of directors reviews the status of our sustainability programs and public disclosures.

We have set public commitments related to certain environmental matters and implemented a renewable energy program to track our energy consumption and reduction efforts.

Additional information on these and other sustainability initiatives, as well our public targets and goals, can be found on the “Responsibility” page of our website at www.okta.com.

Financial Information

2 unchanged sentences

Corporate Information

We were incorporated in 2009 as Saasure Inc., a California corporation, and were later reincorporated in 2010 under the name Okta, Inc.

as a Delaware corporation.

We incorporated in 2009 as Saasure Inc., a California corporation.

In 2010, we reincorporated as Okta, Inc., a Delaware corporation.

Our principal executive offices are located at 100 First Street, Suite 600, San Francisco, California 94105, and our telephone number is (888) 722-7871.

1 unchanged sentence

Additional Information

The following filings are available through our investor relations website after we file them with the SEC:

Annual Report on Form 10-K, Quarterly Reports on Form 10-Q and our Proxy Statement for our annual meeting of stockholders.

These filings are also available for download free of charge on our investor relations website.

Our investor relations website is located at investor.okta.com.

The SEC also maintains an internet website that contains reports, proxy statements and other information about issuers, like us, that file electronically with the SEC.

The address of that website is www.sec.gov.

Our investor relations website address is investor.okta.com.

Our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and Proxy Statements for our annual meetings of stockholders, including any exhibits and amendments to these filings, are available, free of charge, on our investor relations website after we file or furnish them with the SEC, and they are available on the SEC's website at www.sec.gov.

We webcast our earnings calls and certain events we participate in or host with members of the investment community on our investor relations website.

Supplemental financial and other information can be accessed through the Company’s investor relations website.

Okta uses its investor.okta.com website and okta.com/blog websites (including the Security Blog, Okta Developer Blog and Auth0 Developer Blog) as a means of disclosing material non-public information, announcing upcoming investor conferences and for complying with its disclosure obligations under Regulation FD.

We also use our investor.okta.com website and okta.com/blog websites (including the Security Blog, Okta Developer Blog and Auth0 Developer Blog) as a means of disclosing material non-public information, announcing upcoming investor conferences and for complying with our disclosure obligations under Regulation FD.

Accordingly, you should monitor our investor relations and okta.com/blog websites in addition to following our press releases, SEC filings and public conference calls and webcasts.

Further corporate governance information, including our corporate governance guidelines and code of conduct, is also available on our investor relations website under the heading "Corporate Governance." Information contained on, or that can be accessed through, our websites is not incorporated by reference into this Annual Report on Form 10-K or in any other report or document we file with the SEC, and any references to our websites are intended to be inactive textual references only.

Further corporate governance information, including our corporate governance guidelines and code of conduct, is also available on our investor relations website under the heading "Responsibility and Governance." Information contained on, or that can be accessed through, our websites is not incorporated by reference into this Annual Report on Form 10-K or in any other report or document we file with the SEC, and any references to our websites are intended to be inactive textual references only.

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business