What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2026-03-05 compared with 2025-03-05 · 143 added, 139 removed, 217 unchanged (57% of the section changed)

is the leading independent identity partner.

We are the leading independent identity partner.

Our vision is to free everyone to safely use any technology, and we believe identity is the key to making that happen.

1 unchanged sentence

Our Okta Platform and Auth0 Platform enable our customers to securely connect the right people to the right technologies and services at the right time.

The acceleration of digital transformation, cloud adoption and the evolving security threat landscape are driving a shift in how organizations securely manage the identity of their employees, contractors and partners.

At the same time, consumer expectations favoring simple, secure digital experiences are driving the adoption of new consumer identity technologies.

Our platforms help organizations effectively harness the power of cloud, mobile and web technologies by securing users and connecting them with the applications and technology they use.

Identity is becoming the most critical layer of an organization’s security.

The acceleration of digital transformation, cloud adoption and the evolving security threat landscape continue to drive a shift in how organizations securely manage the identity of their employees, contractors and partners.

As organizations shift from network-based security models to a Zero Trust security model focused on adaptive and context-aware controls, identity has become the most reliable way to manage user access and protect digital assets.

In addition to these established drivers, the emergence of artificial intelligence (“AI”) and the deployment of AI agents may, over time, create new opportunities for identity management.

We see a potential long-term opportunity for our platforms to serve as a unified, independent control plane for non-human identities (“NHIs”) and AI agents, a distinct class of identity that requires authenticated, secure access to sensitive resources at a scale and speed exceeding traditional security models designed for human users.

While adoption is in its early stages, we believe the inherent challenges of governing NHIs and agentic identities may drive increased demand for our solutions as these technologies and customer adoption continue to mature.

Our platforms help organizations effectively harness the power of cloud, mobile, web, and AI technologies by securing and governing users and connecting them with the applications and technology they need.

Every day, thousands of organizations and millions of people use our platforms to securely access a wide range of cloud, mobile, web and Software-as-a-Service (“SaaS”) applications, on-premises servers, application programming interfaces (“APIs”), IT infrastructure providers, and services from a multitude of devices.

Employees and contractors sign into the Okta Platform to seamlessly and securely access the applications they need to do their most important work with more modern and secure experiences in the cloud and via mobile devices.

Developers leverage our Okta Platform and Auth0 Platform to securely and efficiently embed identity into the software they build, allowing them to innovate and focus on their core mission.

Our approach to customer identity provides organizations with the scale, interoperability, extensibility and security they need to build applications with seamless and private experiences that serve a wide variety of users, from customers to citizens.

For IT and security leaders, the Okta Platform governs the seamless and secure access by human users and NHIs to the applications they need to do their most important work.

We are expanding these capabilities to include AI agents with the introduction of new product offerings currently in development and early access.

Developers leverage our Okta Platform and Auth0 Platform to securely and efficiently embed identity for both human users and, increasingly, AI agents into the software they build, allowing them to innovate and focus on their core mission.

Our approach to customer identity provides organizations with the scale, interoperability, extensibility and security they need to secure and scale agentic and traditional applications from pilot to production with seamless and private experiences that serve a wide variety of users, from customers to citizens.

As we add new customers, users, developers and integrations to our platforms, our business, customers, partners and users benefit from powerful network effects that increase the value and security of our solutions.

Given the growth trends in cloud adoption and the number of applications customers use and the movement to remote and hybrid workforces, identity is becoming the most critical layer of an organization’s security.

As organizations shift from network-based security models to a Zero Trust security model focusing on adaptive and context-aware controls, identity has become the most reliable way to manage user access and protect digital assets.

Our approach to identity allows our customers to simplify and efficiently scale their security infrastructures across internal IT systems and external customer-facing applications.

As of January 31, 2026, more than 20,000 customers across nearly every industry used our solutions to secure and manage identities around the world.

Our customers consist of leading global organizations ranging from the largest enterprises to small- and medium-sized businesses, universities, nonprofits and government agencies.

We partner with leading application, infrastructure and security vendors, such as Amazon Web Services ("AWS"), CrowdStrike, Google, LexisNexis Risk Solutions, Microsoft, Netskope, Palo Alto Networks, Plaid, Proofpoint, Salesforce, ServiceNow, VMware, Workday, Yubico and Zscaler.

We had over 7,000 integrations with cloud, mobile and web applications and IT infrastructure providers as of January 31, 2025, which, while not directly correlated to revenue, shows the breadth and acceptance of our platforms.

These customers consist of leading global organizations ranging from the largest enterprises to small- and medium-sized businesses, universities, nonprofits and government agencies.

We partner with a broad range of application, IT infrastructure and security vendors through our Okta Integration Network.

As of January 31, 2026, we had over 7,000 integrations with these cloud, mobile and web applications, and IT infrastructure and security vendors.

We employ a SaaS business model and generate revenue primarily by selling multi-year subscriptions to our cloud-based offerings.

We focus on attracting and retaining our customers and increasing the value we provide to them over time.

By retaining customers and increasing value, we increase their spending with us through expanding the number of users who access our Okta Platform and Auth0 Platform, and by selling additional product offerings.

We sell our product offerings directly through our field and inside sales teams, as well as indirectly through our network of channel partners, including resellers, system integrators, and other distribution partners.

We focus on attracting and retaining our customers by building on and increasing the value we provide to them over time.

This commitment to our customers’ success helps drive increased customer investment in the number of users of our Okta Platform and Auth0 Platform and adoption of our additional product offerings.

We sell our product offerings directly through our field and inside sales teams, as well as indirectly through our network of channel partners, including cloud marketplaces, resellers, system integrators, and other distribution partners.

Our Platforms

We offer independent and neutral cloud-based identity solutions that allow our customers to integrate with nearly any application, service or cloud that they choose through our secure, reliable, and scalable platforms.

Our technological neutrality allows our customers to adopt the best technologies easily, and our two platforms are designed to securely connect users to the technology that they choose.

Okta AI, a suite of AI-powered capabilities using our unique threat intelligence identity data to power real-time identity actions, is infused into several products available on our two platforms.

Our technological neutrality allows our customers to adopt the best technologies easily, and our two platforms are

designed to securely connect users to the technology that they choose.

We prioritize the compatibility of our platforms with public clouds, on-premises infrastructures and hybrid clouds.

Our platforms are used by organizations in two distinct and powerful ways.

Customers manage and secure their employees, contractors and partners using what we call “workforce identity,” as supported by our Okta Platform.

Customers can enable, manage and secure their customers’ identities using what we call “customer identity,” as supported by both our Okta Platform and Auth0 Platform.

Our platforms are traditionally used by organizations in two distinct ways:

“workforce identity”, supported by our Okta Platform, to manage and secure employees, contractors and partners;

and “customer identity”, supported by both our Okta Platform and Auth0 Platform, to secure customers.

We are extending our platforms to address the unique identity security challenges posed by AI agents.

Okta for AI Agents, currently available in early access, provides governance and visibility for AI agents through the Okta Platform.

Auth0 for AI Agents enables developers to leverage the Auth0 Platform to secure and scale agentic applications from pilot to production.

Cross App Access, currently available in early access, is the interoperability standard that allows these AI agents to securely interact across third-party ecosystems, including through an extension to the emerging Model Context Protocol (“MCP”) standard.

Okta Platform

The Okta Platform simplifies the way an organization’s employees, contractors and partners connect to its applications and data from any device, while increasing efficiency and keeping IT environments secure.

The Okta Platform can be used as the central system for an organization’s connectivity, access, authentication and identity lifecycle management needs spanning all of its users, technology and applications.

Our customers use the Okta Platform to secure their workforces, to create solutions that make their partner networks more collaborative, and to provide more seamless and secure experiences for their end users.

The Okta Platform governs and simplifies the way an organization’s employees, contractors, partners and NHIs connect to applications and data from any device.

It serves as the central system for an organization’s governance, access management, authentication, connectivity and identity lifecycle management needs.

We are expanding these capabilities to include AI agents with the introduction of new product offerings currently in development and early access.

We enable our customers to easily deploy and secure their environments with a simple, intuitive, consumer-like user experience.

For IT and security leaders, the Okta Platform acts as a single control plane, enabling the enforcement of contextual access management decisions based on user identity, device health and real-time threat signals.

These features, combined with our technological neutrality, help our customers future-proof their environments.

We enable our customers to easily deploy, manage and secure applications and devices, and to provision and support users across their IT environments, with a simple, intuitive, consumer-like user experience.

Once deployed, we enable administrators to enforce contextual access management decisions based on conditions such as user identity, device, location, application identity, IP reputation and time of day, and maintain secure access throughout the duration of users’ sessions.

We enable organizations to provide their workforces with immediate and secure access to every application they need from any device they use, without requiring multiple credentials, which significantly enhances user productivity and IT efficiency.

We offer our customers an additional security layer through our Adaptive Multi-Factor Authentication (“Adaptive MFA”), Device Access, and Identity Threat Protection with Okta AI product offerings.

Our Universal Directory product offering also serves as a system of record to help our customers organize and manage their users.

Our Lifecycle Management product offering enables customers to manage users’ access privileges through their entire lifecycle with a no-code approach that improves administrative efficiency and productivity.

Our Workflows product offering enables the building of identity-related business processes with minimal or no-code.

Okta Identity Governance, our unified identity access management and identity governance product offering, helps our customers improve their security and compliance posture while mitigating modern security risks and increasing efficiency.

Our Privileged Access Management product offering provides unified access and governance for privileged resources and increases visibility, compliance and security without compromising user experience.

Our Access Gateway product offering enables our customers to extend the Okta Platform to their existing on-premises applications.

Our Identity Security Posture Management product offering proactively identifies vulnerabilities and security gaps before they can be exploited by providing consolidated visibility into identity posture across the Okta Platform and third-party solutions.

The Okta Platform enables our customers to automate and secure access across their ecosystem of employees, contractors and partners, increasing collaboration across their workforces.

We deliver the capabilities of the Okta Platform by providing:

• Adaptive Access and Authentication :

Enables simple, secure access using continuous risk and policy evaluations to automate the identification and remediation of threats.

• Automated Governance and Lifecycle Management :

Automates identity lifecycle management processes while providing the visibility required to govern users.

• Unified Security Posture :

Proactively identifies vulnerabilities and security gaps by providing consolidated visibility into identity posture.

For a detailed description of our specific product offerings within the Okta Platform, see “Our Product Offerings—Okta Platform Product Offerings” below.

Auth0 Platform

The Auth0 Platform enables companies, nonprofits and governmental agencies to transform their own customers’ or citizens’ experiences by empowering development teams to rapidly and securely build customer- and citizen-facing cloud, mobile or web applications.

The Auth0 Platform primarily supports consumer and SaaS applications.

It empowers application builders to innovate faster by removing the complexity from identity and making it simple, extensible and customizable.

We enable organizations to integrate our powerful identity platform into their cloud, web and mobile applications.

This makes it easier for them to authenticate, manage, scale and secure their applications through comprehensive APIs, software development kits and extensive developer tools, enabling rapid time to market for the business.

Organizations are able to streamline user experience and improve security across all their applications, leading to increased customer acquisition, retention and loyalty.

The Auth0 Platform provides multiple enhanced security capabilities including bot detection, Adaptive MFA, fraud prevention, and account takeover attack protection while delivering a high level of security.

In addition to security and authentication, Auth0 also supports authorization, including fine grained authorization.

Our Auth for GenAI product offering enable developers to build chatbots and AI agents into their applications easily and securely.

The Auth0 Platform is developer-centric and enables companies, nonprofits and governmental agencies to rapidly embed secure, extensible identity management into customer- and citizen-facing cloud, mobile, and web applications.

It primarily supports consumer and SaaS applications.

The Auth0 Platform empowers application builders to innovate faster by removing the complexity from identity and making it simple, extensible and customizable.

We deliver these capabilities through a flexible architecture that provides:

• Developer Empowerment and Innovation :

We provide software development kits, comprehensive APIs, and extensive developer tools that empower teams to easily authenticate, manage, and secure their applications.

These tools enable organizations to streamline user experiences and improve security, leading to increased customer acquisition, retention and loyalty.

• Agentic Application Development :

Through Auth0 for AI Agents, we provide tools that enable developers to integrate generative AI and AI agents into their applications while mitigating risks such as static credential sprawl, including hardcoded API keys and machine-to-machine secrets, and unauthorized data access.

• Advanced Identity Security :

We support sophisticated identity security capabilities, including bot detection, fraud prevention, Adaptive Multi-Factor Authentication (“MFA”), and account takeover protection.

The Auth0 Platform also supports sophisticated authorization models, such as Fine Grained Authorization

(“FGA”), which helps developers build the secure, relationship-based access required for AI agents to interact safely with enterprise data and third-party ecosystems.

For a detailed description of our specific product offerings within the Auth0 Platform, see “Our Product Offerings—Auth0 Platform Product Offerings” below.

Growth Strategy

4 unchanged sentences

We also believe we can expand our footprint by focusing on current customers that have deployed our Okta Platform and expanding those customers’ use of our Auth0 Platform, or vice versa.

In addition, we believe there is a potential opportunity to offer existing customers our solutions to manage and secure NHIs and AI agents.

• Drive Growth with Large Customers .

4 unchanged sentences

• Expand Our International Footprint .

With 21% of our revenue generated outside of the United States in fiscal 2025, and our international revenue growing 14% from fiscal 2024 to fiscal 2025, we believe there is a significant opportunity to continue to grow our international business.

We believe global demand for our product offerings will continue to be a long-term opportunity as organizations outside the United States fully embrace the transition to cloud computing, and larger international organizations take advantage of technology consolidation within their global locations.

With 20% of our revenue generated outside of the United States in fiscal 2026, we believe there is a significant opportunity to continue to grow our international business.

We believe global demand for our product offerings will continue to be a long-term opportunity as organizations outside the United States embrace the transition to cloud computing and develop and adopt AI agents, and larger international organizations take advantage of technology consolidation within their global locations.

Increase Our Opportunities

2 unchanged sentences

By continuing to innovate, introduce new product offerings and extend our platforms, we believe that we can offer increasing value to our existing and potential customers.

For example, investments in Okta AI led to newly launched products like Identity Threat Protection for the Okta Platform, Guide for the Auth0 Platform and the industry’s first real Universal Logout solution.

For example, recent investments have led to the development of Okta for AI Agents, Auth0 for AI Agents and the Cross App Access extension to MCP.

• Extend Our Accessible Market with New Use Cases .

As technology and our customers’ needs evolve, we plan to use our platforms to help our customers address new challenges, regulatory requirements and use cases.

• Increasing Go-To-Market Specialization .

We intend to further specialize the go-to-market organization to better meet the needs of the distinct buying centers.

Okta sellers will focus engagement on IT and security buyer needs, including all workforce identity products, as well as Okta customer identity.

Auth0 sellers will focus on meeting the unique needs of developers, which include highly technical customer identity customizations and flexible development models.

• Go-To-Market Specialization .

At the start of fiscal 2026, we further specialized our go-to-market organization to better meet the needs of the distinct buying centers.

Okta sellers focus engagement on IT and security buyer needs, including all workforce identity products and Okta Customer Identity.

Auth0 sellers focus on meeting the unique needs of developers, which include highly technical customer identity customizations and flexible development models.

• Leverage Our Integrations .

The Okta Integration Network is an extensive ecosystem, which includes over 7,000 integrations with cloud, mobile and web applications as well integrated solutions with IT infrastructure providers and security vendors.

We continue to add new integrations as we expand the surface area of our identity platform.

We view our investment in these partnerships as a force multiplier that enables us to build and promote complementary capabilities that benefit our customers.

The Okta Integration Network is an extensive ecosystem, which includes over 7,000 integrations with cloud, mobile and web applications as well as integrated solutions with IT infrastructure providers and security vendors.

We continue to add new integrations as we expand the surface area of the Okta Platform.

Investing in these partnerships allows us to broaden and deepen our existing integrations while adding new ones, helping us build and promote complementary capabilities that benefit our customers.

• Expand Our Developer Ecosystem .

We want to empower every application developer to use our platforms to securely integrate identity into any application.

We believe that our platforms enable developers to focus their time and attention on innovating within their core application capabilities while relying on our platforms for their identity-related requirements, leading to more secure and convenient experiences for their own customers.

We believe that our platforms enable developers to focus their time and attention on innovating within their core application capabilities while relying on our

platforms for their identity-related requirements, leading to more secure and convenient experiences for their own customers.

• Leverage Our Unique Data Assets with Powerful Analytics .

Our position at the intersection of people, devices, applications and infrastructure gives us unique access to powerful threat intelligence identity data, and the opportunity to provide differentiated insights based on that data, as well as predictive capabilities

based on that data to help keep customers more secure.

Our position at the intersection of people, devices, applications and infrastructure gives us unique access to powerful identity threat intelligence data, and the opportunity to provide differentiated insights based on that data, as well as predictive capabilities based on that data to help keep customers more secure.

We expect the value of our analytics to our customer base will increase as customers continue to connect more devices, applications and users to their networks and as we add more customers.

We also expect that our analytics ability will enable our customers to use our data and third-party data from our partners, allowing customers to make more informed and secure access decisions.

We also expect that our analytics ability will enable our customers to use their data and third-party data from our partners, allowing customers to make more informed and secure access decisions.

We do not currently derive direct revenue from our unique data assets, but we may explore opportunities for monetization in the future.

3 unchanged sentences

Our Product Offerings

Our portfolio of product offerings and services is used to manage and secure identities.

Most of our product offerings can be used for both customer identity and workforce identity use cases, and we are continuously enhancing our product offerings and services.

Our workforce identity product offerings are consumed through web and mobile interfaces and provide simple ways for IT organizations to manage identities for their employees, contractors and business partners.

For customer identity, our APIs are also used by developers to embed our identity functionality into their own customer-facing mobile or web applications.

We continuously improve our Okta Platform and Auth0 Platform by releasing and developing additional product offerings, features and services.

Our portfolio of product offerings and services is designed to manage and secure identity for people, NHIs and, increasingly, AI agents.

Our product offerings are designed to be versatile, with most offerings applicable to both customer and workforce identity use cases.

Workforce identity solutions are primarily consumed through web and mobile interfaces, providing IT organizations with simple ways to manage access for employees, contractors, partners, NHIs and, through product offerings in early access and development, AI agents.

For customer identity, developers leverage our APIs and software development kits to embed identity functionality into their own traditional and agentic applications.

We continuously enhance our Okta Platform and Auth0 Platform through the regular release of new product offerings, features, and services.

Okta Platform Product Offerings

1 unchanged sentence

• Single Sign-on .

When used to manage and secure identities for a customer’s workforce, Single Sign-On enables users to access all of their applications, whether in the cloud or on-premises, from any device, with a single entry of their user credentials.

We combine secure access, modern protocols, flexible policies and a consumer-like user experience to permit organizations to easily allow customers or partners to sign in to their applications with their existing identity information.

With Okta FastPass, we enable our customers to provide their users with a passwordless experience across any device and every major operating system.

Single Sign-On also enables built-in reporting and analytics that provide real-time search functionalities across users, devices, applications and the associated access and usage activity.

Enables secure access to cloud and on-premises applications from any device with a single entry of their user credentials.

We use modern protocols and a consumer-like user experience, including Okta FastPass for a passwordless login across all major operating systems.

• Adaptive MFA .

Adaptive MFA is a comprehensive, but simple-to-use, product that provides an additional layer of security for an organization’s cloud, mobile and web applications and data.

We offer an intelligent approach to security, built on contextual data.

Adaptive MFA includes a policy framework that is integrated with a broad set of cloud and on-premises applications and network infrastructures.

It offers adaptive, risk-based authentication that leverages data intelligence from across the Okta Platform network of thousands of organizations as well as from our partner ecosystem.

Provides an intelligent, risk-based layer of security for an organization’s cloud, mobile and web applications built on contextual data.

It leverages data intelligence from across the Okta Platform network of thousands of organizations, as well as from our partner ecosystem, to automate threat identification and prompt for additional verification only when risk signals exceed defined thresholds.

• API Access Management .

API Access Management enables organizations to secure APIs as systems connect to each other.

Access to these APIs is managed based on the user, which enables organizations to centrally maintain one set of permissions for any employee, partner or customer across every point of access.

API Access Management reduces development time, boosts security, helps in achieving compliance and enables seamless end-user experiences by providing a unified portable service for authorizing secure and always available access to any API.

Enables organizations to secure APIs as systems connect to each other.

By managing access at the user level, it allows organizations to centrally maintain one set of permissions for any employee, partner or customer across every point of access.

API Access Management reduces development time, boosts security, helps achieve compliance, and enables seamless end-user experiences by providing a unified portable service for authorizing secure and always available access to any API.

• Access Gateway .

Access Gateway enables organizations to extend Okta Platform, which is a cloud-native platform, from the cloud to their existing on-premises applications so that they can harness the benefits of the platform to manage all of their critical systems, whether in the cloud, on-premises or hybrid.

Extends the Okta Platform from the cloud to organizations’ existing on-premises applications so that organizations can harness the benefits of the platform to manage all of their critical systems, whether in the cloud, on-premises or hybrid.

Extending the benefits of the Okta Platform to hybrid IT environments delivers a single point of management for our customers’ administrators and a single location from which end users can access their critical applications.

• Okta Device Access .

Okta Device Access extends the Okta Platform's secure access management to the device login experience.

Extends the Okta Platform’s secure access management to the device login experience.

Okta Device Access enables end users to securely log in to their devices with their Okta Platform credentials and meet MFA challenges from a set of strong factors, helping organizations to harden their security posture by protecting a user’s device with the same experience that the Okta Platform provides for applications and resources.

• Universal Directory .

Universal Directory provides a centralized, cloud-based system of record to store and secure user, application and device profiles for an organization.

Users and profiles stored in the directory can be used with our Single Sign-On product to manage passwords and authentication, or can be used by developers to store and authenticate the users of their applications.

When used for workforce identity, Universal Directory becomes a customer’s system of record for all of its employees, contractors and partners.

• Identity Threat Protection with Okta AI .

Identity Threat Protection helps safeguard organizations with native identity intelligence from the Okta Platform and signals from third-party tools integrated into an organization’s security stack.

Provides a centralized, cloud-based system of record to store and secure user, application and device profiles for an organization.

It serves as the foundational directory for organizations’ authentication and lifecycle management by storing and securing user profiles.

• Identity Threat Protection .

Delivers native identity intelligence from the Okta Platform and signals from third-party tools integrated into an organization’s security stack.

The Okta Platform’s AI-driven continuous risk and policy evaluations deliver real-time identity threat assessment and automated remediation.

• Identity Security Posture Management .

Identity Security Posture Management (“ISPM”) helps organizations fortify their security measures and safeguard their digital assets with greater efficiency.

• Identity Security Posture Management (“ISPM”) .

Helps organizations fortify their security measures and safeguard their digital assets with greater efficiency.

ISPM highlights critical identity security issues like admin sprawl, MFA bypass, and local accounts, and prioritizes them based on risk severity for effective remediation.

• Okta for AI Agents .

Gives customers the ability to discover, register, authenticate, govern and manage their AI Agents through a unified identity control plane within the Okta Platform.

Currently available in early access.

Identity Governance and Administration (“IGA”)

• Lifecycle Management .

Lifecycle Management enables IT organizations or developers to manage a user's identity throughout its lifecycle, from onboarding to offboarding.

Enables IT organizations to manage a user’s identity throughout its lifecycle, from onboarding to offboarding.

It automates IT processes and ensures user accounts are created and deactivated at the appropriate times, including the workflow and policies needed to power those processes, and helps ensure compliance requirements are met as user roles evolve and access levels change.

• Okta Workflows .

Designed to enable IT and security teams to move faster, more accurately and more cost effectively as they scale, Okta Workflows enables the building of identity-related business processes with minimal or no code, such as automating user onboarding and provisioning, creating just-in-time authorization for software development and IT processes, automating identity-centric security responses, and orchestrating customer data across backend systems.

Helps IT teams build identity-related business processes with minimal or no code tools, such as automating user onboarding and provisioning, creating just-in-time authorization for software development and IT processes, automating identity-centric security responses and orchestrating customer data across backend systems.

• Okta Identity Governance .

Okta Identity Governance provides a unified identity access management and identity governance solution focused on improving an organization’s security and compliance posture, helping customers to mitigate everyday security risks, and improve IT efficiency.

Okta Identity Governance includes governance capabilities relating to access requests, access certifications and access reporting.

Through these capabilities, Okta Identity Governance simplifies and automates the process of requesting and approving access to applications and resources.

Provides a unified identity access management and identity governance solution focused on improving an organization’s security and compliance posture, helping customers to mitigate everyday security risks and improving IT efficiency.

Includes governance capabilities relating to access requests, access certifications and access reporting.

It simplifies and automates the process of requesting and approving access to applications and resources.

• Cross App Access (“XAA”) .

A standards-based protocol designed to centralize the governance of AI agents and app-to-app connections.

By shifting authorization decisions from individual applications to the Okta Platform, XAA allows IT teams to manage delegated access at scale while preserving the user’s identity and authorization context even as AI agents access multiple applications across different trust domains.

XAA capabilities and configuration features are currently available in early access.

Privileged Access Management

• Advanced Server Access .

Advanced Server Access offers continuous, contextual access management to secure cloud infrastructure.

Offers continuous, contextual access management to secure cloud infrastructure.

Organizations can continuously manage and secure access to on-premises Windows and Linux servers and across leading Infrastructure-as-a-Service vendors, including AWS, Google Cloud Platform and Microsoft Azure.

Advanced Server Access enables our customers to centralize access controls in a seamless manner to better mitigate the risk of credential theft, reuse, sprawl and abandoned administrative accounts.

Enables centralize access controls in a seamless manner to better mitigate the risk of credential theft, reuse, sprawl and abandoned administrative accounts.

• Okta Privileged Access .

Okta Privileged Access enables organizations to reduce risk with unified access and governance management for on-premises and cloud privileged resources, for better visibility, compliance, and security for critical applications, resources and infrastructure requiring privileged access.

Helps organizations reduce risk with unified access and governance management for on-premises and cloud privileged resources and NHIs, providing better visibility, compliance and security for critical applications, resources and infrastructure requiring privileged access.

Auth0 Platform Product Offerings

• Universal Login .

Universal Login is a standards-based login infrastructure with centralized feature management and configuration for websites and applications that can be integrated with a wide range of social media login credential providers, enterprise login services and customer-provided databases.

Universal Login enables our customers to provide a consistent login experience across many different applications and devices.

• Attack Protection .

Attack Protection is a suite of security capabilities that protect our customers from different types of malicious traffic, including bots, breached passwords, suspicious IP addresses and brute force attacks.

Attack Protection enables our customers to minimize risks associated with the ever-growing volume of identity-targeted attacks.

A standards-based login infrastructure that provides a centralized, consistent login experience across many different applications and devices.

It supports extensive customization and can be integrated with social media login credential providers, enterprise login services and customer-provided databases.

• Attack Protection Suite .

A set of security capabilities designed to protect our customers from different types of malicious traffic, including bots, breached passwords, suspicious IP addresses and brute force attacks.

It works to minimize risks associated with the ever-growing volume of identity-targeted attacks.

• Adaptive MFA .

2 unchanged sentences

• Passwordless .

Passwordless authentication enables users to login without a password and supports a variety of different login methods, including advanced device biometrics such as passkeys.

• Machine to Machine .

Machine to Machine provides standards-based authentication and authorization with non-interactive devices and applications.

Enables users to login without a password and supports a variety of different login methods, including advanced device biometrics such as passkeys.

• Machine-to-Machine Tokens .

Provides standards-based authentication and authorization with NHIs, such as non-interactive devices and applications.

• Private Cloud .

Private Cloud is a deployment option that allows our customers to run a dedicated cloud instance of the Auth0 Platform.

Private Cloud capability supports multiple cloud providers.

A deployment option that allows our customers to run a dedicated cloud instance of the Auth0 Platform.

Our Private Cloud capability supports multiple cloud providers.

• Organizations .

Organizations enable our customers to support a large number of partners or customers of their own with independent configurations, login experiences and security options.

• Actions and Extensibility .

Actions and Extensibility allow our customers to create customized identity flows that address their unique requirements through a drag-and-drop interface to add pre-built partner integrations and their own custom logic across an authentication flow.

Enables our customers to support a large number of partners or customers of their own with independent configurations, login experiences and security options.

• Extensibility .

A suite of products—including Actions, Forms, Event Streams and the Auth0 Marketplace—that enables customers to build customized identity flows using no-code to pro-code tools, extending beyond the out-of-the-box experience.

• Enterprise Connections .

Enterprise Connections enable Enterprise Federation using pre-built integrations with commonly used enterprise identity systems.

Enables Enterprise Federation using pre-built integrations with commonly used enterprise identity systems.

• Fine Grained Authorization .

Fine Grained Authorization helps customers manage complex authorization scenarios efficiently, and reduces latency and downtime as their systems and user bases grow.

• Auth for GenAI .

A suite of features that enable developers to build chatbots and AI agents into their applications easily and securely.

Allows developers to manage complex authorization scenarios efficiently, and reduces latency and downtime as their systems and user bases grow.

• Auth0 for AI Agents .

Enables developers to leverage the Auth0 Platform to secure and scale agentic applications from pilot to production.

Through our broad and deep product offerings that support a wide range of workforce and customer identity use cases, we deliver multiple critical business outcomes for our customers.

7 unchanged sentences

Our technology integrates with industry-leading browsers and mobile applications to provide seamless access to nearly any web or native mobile application.

We also heavily leverage operating system management and security technologies across desktops, laptops and mobile devices to provide a transparent, but secure experience for users across a range of devices.

We also heavily leverage operating system management and security technologies across desktops, laptops and mobile devices to provide a transparent, yet secure experience for users across a range of devices.

These integrations allow us to seamlessly deliver identity, access, security and management use cases that previously required significant custom development to achieve.

3 unchanged sentences

The Okta Platform and its features are updated regularly, and along with continuous security testing, there are periodic security reviews that provide audited and verifiable security checkpoints to ensure the quality of our source code.

A number of our Okta Platform product offerings have attained multiple

certifications, including SOC 2 Type II Attestations, CSA Star Level 2 Certification, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019 and comply with many other international security frameworks.

A number of our Okta Platform product offerings have attained multiple certifications, including SOC 2 Type II Attestations, CSA Star Level 2 Certification, ISO/IEC 27001:2022, ISO/IEC

27017:2015, ISO/IEC 27018:2019 and comply with many other international security frameworks.

Certain Okta Platform offerings maintain multiple agency Federal Risk and Authorization Management Program (“FedRAMP”) Authorities to Operate and are compliant to operate at Department of Defense Impact Level 4.

13 unchanged sentences

Okta Integration Network and Auth0 Marketplace

The Okta Integration Network contains over 7,000 integrations with cloud, mobile and web applications, IoT devices and IT infrastructure providers, including AWS, Atlassian, DocuSign, Google, Microsoft Office 365, NetSuite, Oracle, Palo Alto Networks, Proofpoint, Salesforce, SAP, ServiceNow, Slack, Splunk, VMware, Workday, Zendesk and Zoom.

The Okta Integration Network contains over 7,000 integrations with cloud, mobile and web applications, IoT devices and IT infrastructure providers, including AWS, Atlassian, DocuSign, Google, Microsoft 365, NetSuite, Oracle, Palo Alto Networks, Proofpoint, Salesforce, SAP, ServiceNow, Slack, Splunk, VMware, Workday, Zendesk and Zoom.

Our patented technology allows our customers to seamlessly connect to any application or type of device that is already integrated into our network.

2 unchanged sentences

The Auth0 Marketplace connects customers with service providers and builders who solve integration use cases and implement integrations with the Auth0 Platform.

Commitment to Open Standards

We lead and contribute to several standards initiatives, including the Interoperability Profile for Secure Identity in the Enterprise (“IPSIE”) standard, which standardizes identity security functions like risk signal sharing and session termination across the SaaS ecosystem;

XAA, which shifts authorization decisions from individual applications to an organization’s identity provider;

and MCP, which we have extended with XAA capabilities.

We believe these efforts support an open ecosystem that enables customer choice, interoperability and an improved security posture for the industry.

Our Customers

As of January 31, 2025, we had more than 19,650 customers, including more than 4,800 customers with an annual contract value greater than $100,000.

As of January 31, 2026, we had more than 20,000 customers, including 5,100 customers with an annual contract value greater than $100,000.

Our customers span nearly all industry verticals and range from small organizations with fewer than 100 employees to companies in the Fortune 50, with up to hundreds of thousands of employees, some of which use our platforms to manage millions of their customers’ identities.

1 unchanged sentence

We sell directly to customers through our direct inside and field sales force and also indirectly through our extensive ecosystem of channel partners.

We also offer a self-service approach for developers to sign up for free trials of our Auth0 Platform, which may transition to paid offerings.

We also offer a self-service approach for developers to sign up for free trials, free plans, paid developer plans of our Auth0 Platform, which may transition to paid enterprise plans that include more fulsome offerings.

We often leverage our expansion sales model to generate incremental revenue, often within the term of the initial agreement, through the addition of new users and the sale of additional product offerings.

In many instances, we find that initial customer success with our platforms results in key internal decision-makers expanding their deployments, for example, from initial use for workforce identity to expanded use for their customer identity needs.

In many instances, we find that initial customer success with our platforms results in key internal decision-makers expanding their deployments, for example, from workforce identity to customer identity needs, or vice-versa.

Furthermore, as our customers are successful in their businesses and increase headcount, the number of their customers or their monthly active users, we have the opportunity to share in their growth as the number of identities that we manage increases.

Conversely, if our customers reduce the size of their workforce, then the number of identities that we manage, and therefore our revenue may potentially decrease.

Our sales organization is structured to address the specific needs of our target markets, and is divided by geography and customer size, and in some cases by industry vertical.

We also employ specialization in our sales team when appropriate, such as our “hunter-farmer” sales model for the Americas small- and medium-sized business market, and our newly announced global go-to-market specialization strategy, which is intended to better align our sales team with the distinct needs of IT security buyers and application developers.

Our sales organization operates under a unified leadership team and is structured to address the specific needs of our target markets.

It is divided by geography and customer size, and in some cases by industry vertical.

Our global go-to-market specialization strategy is intended to better align our sales team with the distinct needs of IT security buyers and application developers.

We also employ other forms of specialization in our sales team when appropriate, such as our “hunter-farmer” sales model for certain regions and segments.

Our direct sales force is supported by our sales engineers, security team, cloud architects, professional services team and other technical resources.

4 unchanged sentences

Our most valuable marketing features our customers and their successes and is informed by a deeply data-driven approach, giving us insights into the efficacy of our efforts.

Our marketing efforts focus on promoting our industry-leading product lines, establishing our brand, generating awareness, creating sales leads and cultivating the Okta Communities.

Our marketing efforts focus on promoting our industry-leading product lines, establishing our brand, generating awareness, creating sales leads and cultivating the Okta Community.

A centerpiece of our marketing strategy is our annual customer conference, Oktane, which features customers sharing their success stories, new product and feature announcements and hands-on product labs.

3 unchanged sentences

The research and development organization also works closely with our technical operations team to ensure the successful deployment and monitoring of our platforms.

We use test automation and application monitoring to ensure our services are always on.

We use test automation and application monitoring to support high availability and minimize service disruptions.

Customer Support and Professional Services

43 unchanged sentences

We expect this to be particularly true as we are a cloud-based offering, and our competitors may also seek to acquire new offerings or repurpose their existing offerings to provide identity management solutions with subscription models.

With the continuing merger and acquisition activity in the technology industry, particularly transactions involving security or identity and access management technologies, there is a greater likelihood that we will compete with other large technology companies in the future in both the workforce identity and customer identity markets.

The ongoing trend of merger and acquisition activity in the technology industry, particularly transactions involving security or identity and access management technologies, may result in an environment where we increasingly compete with other large technology companies in the future in both the workforce identity and customer identity markets.

Additional information regarding our competition is included in “ Risk Factors ” under Part I, Item 1A of this Annual Report on Form 10-K.

23 unchanged sentences

We conduct regular equal pay assessments to attempt to promote pay equity among all of our employees.

Flexible Work

We help our employees succeed by providing flexibility in where and how they work.

We embrace a hybrid working approach that permits employees to work remotely or from one of our offices.

We believe a hybrid approach can increase employee empowerment, satisfaction and productivity, drive efficiency and enable us to hire from a broader pool of talent.

Community and Social Impact

6 unchanged sentences

We also engage in philanthropic grantmaking via the Okta for Good Fund, a donor-advised fund held at Tides Foundation.

Grantmaking focus areas include:

• Tech for Good;

• Digital Equity;

• Climate Action.

Prior to our initial public offering ("IPO") in April 2017, we reserved 300,000 shares of our common stock to fund and support the operations of Okta for Good, all of which have been issued as of January 31, 2025.

Ongoing philanthropic activities will be funded via cash contributions from Okta, Inc.

We fund and support the operations of Okta for Good.

Okta for Good is a part of our company and not a separate legal entity.

Additional information can be found on the “Okta for Good” page of our website at www.okta.com.

Sustainability

We have an established sustainability program that aligns with our interest to have a positive impact on society and the environment.

We believe we have a long-term responsibility to meaningfully participate in our society for the benefit of the environment and all of our stakeholders, including our stockholders, customers, employees, partners and communities.

Our executive leadership team oversees the strategic direction of our sustainability strategy, while the nominating and corporate governance committee of our board of directors reviews the status of our sustainability programs and public disclosures.

We have set public commitments related to certain environmental matters and implemented a renewable energy program to track our energy consumption and reduction efforts.

Additional information on these and other sustainability initiatives, as well our public targets and goals, can be found on the “Responsibility” page of our website at www.okta.com.

Financial Information

10 unchanged sentences

We webcast our earnings calls and certain events we participate in or host with members of the investment community on our investor relations website.

Supplemental financial and other information can be accessed through the Company’s investor relations website.

We also use our investor.okta.com website and okta.com/blog websites (including the Security Blog, Okta Developer Blog and Auth0 Developer Blog) as a means of disclosing material non-public information, announcing upcoming investor conferences and for complying with our disclosure obligations under Regulation FD.

Supplemental financial and other information can be accessed through our investor relations website.

We also use our investor.okta.com website and okta.com/blog websites (including the Security Blog, Okta Developer Blog and Auth0 Developer Blog) as a means of disclosing material non-public information, announcing upcoming investor conferences and complying with our disclosure obligations under Regulation FD.

Accordingly, you should monitor our investor relations and okta.com/blog websites in addition to following our press releases, SEC filings and public conference calls and webcasts.

1 unchanged sentence

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business