Okta is a cloud software company that manages digital identities, acting as the secure "front door" for employees and customers to access applications. It generated $2.92 billion in revenue in its most recent fiscal year, growing 13% while turning GAAP profitable for the first time. The company is now shifting from a period of hypergrowth to one focused on generating significant cash flow while fending off competition from much larger tech giants.
The investment thesis on Okta is that identity has become the primary control point for modern security, and Okta is the only major player that remains independent of the big cloud providers. While rivals like Microsoft bundle identity tools for free, many enterprises prefer a neutral third party that works equally well across every different cloud and app.
Okta is a fundamentally strong business that has reached the difficult stage of maturity where it must balance slower growth with rising profitability. We think the business is executing well on its shift to cash generation, but the current valuation leaves little room for the competitive risks it still faces.
Okta stock dropped sharply years ago, but it has staged a strong recovery lately. The company spent a long time chasing fast growth while losing money, but it recently turned a profit for the first time. Investors now see it as the go-to security gatekeeper that remains independent from the giant tech companies.
What does it do?
Okta is a maturing business that earns money through subscription fees for its identity management platform. The platform works by creating a single, secure way for people to log into all their work apps (Workforce Identity) or for companies to build login features into their own apps (Customer Identity). Customers pay an annual fee based on the number of users or the number of people logging into their apps each month. Most contracts are signed for one to three years, creating a very steady stream of recurring revenue.
Where does revenue come from?
Almost all of Okta's revenue comes from subscription fees, which accounted for over 95% of total sales last year. The business is split between Workforce Identity, which helps employees log into work, and Customer Identity, which helps businesses manage their own users. Subscription revenue reached $750 million in the most recent quarter, while professional services make up the small remaining sliver of the business. Geographically, about 70% of revenue comes from the United States.
Revenue Breakdown
Revenue by Geography
Who are its customers?
Okta serves more than 19,300 total customers, ranging from small startups to the world's largest global corporations. The company focuses heavily on large enterprise clients, reporting 4,550 customers with more than $100,000 in annual contract value. These larger customers are the engine of the business, as they are less likely to leave and more likely to buy additional security products. Okta also serves millions of end users who interact with the platform daily through the apps and websites of its customer base.
What gives it staying power?
High switching costs provide Okta with significant durability, as identity is the most sensitive and difficult piece of a company's tech stack to replace. Once a business connects all its apps and employee data to Okta, ripping it out creates massive security risks and operational headaches.
Where is it headed?
Okta is betting its future on becoming a unified identity platform that handles more than just simple logins. Management is pushing into "Identity Governance" and "Privileged Access," which are more advanced security layers that control exactly what an employee can do once they are inside a system. If successful, this moves Okta from a simple utility to a central, high value security hub.
The single most important trend is that Okta is successfully trading high growth for high profitability. While revenue growth has slowed from 40% a few years ago to 11% in the most recent quarter, the company has successfully moved from deep losses to consistent GAAP profitability.
Cash quality is exceptional, with free cash flow consistently outpacing reported net income. In fiscal 2026, the company generated $911 million in free cash flow on $2.92 billion in revenue, representing a very healthy 31% margin. This gap exists because Okta collects cash from customers upfront for multi-year contracts before recognizing it as revenue.
Okta maintains a very clean balance sheet with a large net cash position and minimal debt. With $2.59 billion in cash and short term investments against just $0.06x debt to equity, the company has plenty of firepower to buy back its own shares or acquire smaller technology partners.
Okta is now a high margin, cash generating business that has successfully prioritized financial stability over raw growth.
Free cash flow generation is at record levels, reaching a 35% margin in the most recent quarter. This cash flow provides a massive safety net and allows the company to fund its own growth and share repurchases without needing to tap expensive debt markets.
Subscription growth and "current remaining performance obligations" are slowing toward the 10% mark. If this trend continues, it suggests the market for new identity customers is saturating, leaving the company entirely dependent on selling more to its existing base.
The identity and access management market is roughly $30 billion today, growing at 15% annually, and is on track to reach $60 billion by 2029. It is a highly attractive industry because identity has replaced the network perimeter as the most important security layer for businesses. Pricing power is generally high because the cost of an identity failure is far greater than the cost of the software itself. Okta is the clear independent leader in this market, giving it a massive growth runway as companies move more apps to the cloud.
The competitive dynamic is rational among independent players but brutal when facing the big cloud platforms. Barriers to entry are high because building a reliable and secure identity cloud requires years of trust and thousands of integrations with other software.
Microsoft is the most dangerous threat because it effectively gives away its identity tool, Entra, as part of the Office 365 suite. Ping Identity and ForgeRock compete for the most complex, older businesses that still have many systems running in their own data centers. CyberArk is the leader in securing the most sensitive "admin" accounts, a space Okta is just starting to contest.
Okta is currently holding its ground in the enterprise market but faces constant pricing pressure in smaller businesses where Microsoft's free bundle is most attractive.
The primary source of protection is high switching costs that make Okta very difficult for a customer to abandon once it is installed. Okta sits at the center of a company's operations, connecting thousands of apps and thousands of employees. Ripping out an identity provider is a months-long project that risks locking everyone out of their work.
The 77% gross margins and 31% free cash flow margins prove that Okta has real pricing power despite the competition. These numbers are consistent with a durable, narrow moat business that can maintain high profitability even if it is not the fastest grower in the room.
The forward-looking verdict is that Okta's moat is stable but under constant siege from Microsoft's bundling strategy.
Delivered five consecutive quarters of expanding operating margins while turning GAAP profitable.
Using robust free cash flow to settle debt and buy back shares.
CEO Todd McKinnon is a co-founder with a significant personal stake.
Capital Allocation Track Record
Todd McKinnon has proven to be a disciplined leader who successfully navigated the company through a difficult transition from growth at all costs to high profitability. Under his leadership, Okta has maintained its independent identity while integrating a major acquisition in Auth0 and fixing sales productivity issues. Management has been transparent about security incidents and has consistently met or exceeded their own financial guidance for over a year.
The thesis is significantly tied to Todd McKinnon's vision, as he is the primary architect of the "neutral identity" strategy. While there is a deep bench of experienced executives, the loss of a founder-CEO who still holds a major stake would be a notable risk for long-term strategy. The company does not have dual-class share control, which provides standard shareholder governance protections.
We expect revenue to grow from $2.9B in FY2026 to $4.4B in FY2031 (~9% CAGR), with EPS growing from $3.44 to $5.62 (~10% CAGR). The Okta Identity Cloud is gaining traction as the standard for secure employee and customer access in a cloud-first world. Sales and marketing expenses as a percentage of revenue decline as the company relies more on its existing customer base for growth. EPS grows faster than revenue because profit margins are expanding as the business reaches a larger scale. Operating margin expected to reach ~25% by FY2031.
Identity Governance and PAM become core revenue drivers. If Okta successfully captures the governance and privileged access markets, it could double its average revenue per enterprise customer.
AI agents require new forms of identity security. As businesses deploy AI agents, Okta has a new market in securing these digital identities alongside human ones.
Consolidation of the identity market around a few winners. Small competitors may struggle to keep up with security requirements, allowing Okta to win share by default.
Microsoft's "good enough" bundling erodes Okta's pricing power. If businesses decide Microsoft's free identity tools are sufficient, Okta's growth and margins will both compress significantly.
A major security breach destroys customer trust in the platform. As a security company, Okta's entire value rests on trust, and a catastrophic hack could trigger a mass exodus.
Growth stalls before the new product portfolio reaches scale. If the core identity market matures faster than new products can grow, Okta's multiple will likely contract further.
Below is our estimate of current and future fair value, with detailed reasoning and assumptions. Fair value is a judgment, not a fact, and other analysts will likely land on different numbers. Use it as one data point in your research, and apply your own discretion in any investing decision.
We use a Forward P/E approach (price-to-earnings applied to next year's earnings) as the primary valuation framework. This fits Okta because the company has successfully transitioned to consistent GAAP profitability, making earnings a more reliable and mature signal of value than the revenue multiples used during its earlier high-growth phase.
Applying a 35x multiple to the FY2027 EPS estimate of $3.85 results in a fair value of approximately $135 per share. A 35x multiple sits at the midpoint of the infrastructure security peer range, which includes Palo Alto Networks at 38x and Microsoft at 32x; Okta's position is justified by its higher specialized identity exposure compared to Microsoft, balanced by a slower revenue growth rate than Palo Alto. We use the $3.85 EPS figure provided in the deterministic projections, which accurately reflects the company's recent profitability inflection and updated tax structure.
A 5-year Discounted Cash Flow (DCF) cross-check produces a fair value of $111, which is within 18% of our Forward P/E result and confirms the valuation. The DCF assumes the market-implied 8.3% annual free cash flow growth and a 10% discount rate as specified in the intelligence brief. The slight discrepancy between the $135 P/E target and the $111 DCF suggests that the market is currently undervaluing Okta's specific earnings growth potential relative to its steady-state cash flows.
We're assuming Okta maintains a non-GAAP free cash flow margin of 28% through FY2028. This matches recent management guidance and is supported by the company’s structural shift toward higher-margin subscription revenue, which now accounts for nearly 98% of the total mix.
We're assuming the company successfully navigates the transition to its 21% non-GAAP tax rate without impacting net income growth. This new rate, effective as of Q1 FY2027, is a material improvement from the previous 26% and provides a tailwind for earnings-per-share expansion as the business scales.
We're assuming mid-market customer acquisition remains steady even as Okta focuses on $100,000+ large accounts. While large customers now represent over 80% of total contract value, the "long tail" of smaller subscriptions provides the base layer of high-visibility recurring revenue that supports the current valuation multiple.
The biggest risk is the intensifying competition from Microsoft Entra and specialized agentic AI security startups that could force Okta to trade profit margins for growth. A sustained loss of market share in the enterprise segment would likely compress the forward multiple from 35x to 22x, knocking roughly $50 off the per-share fair value. Watch for any consecutive quarters where the net new customer count fails to reach at least 150.
Bear case ($110): Subscription revenue growth decelerates below 8% as Microsoft Entra captures more "good enough" enterprise identity spend; or Free cash flow margins contract below 22% due to increased pricing pressure from private competitors like Lumos or SailPoint.
Bull case ($165): Adoption of the new "Identity Governance" and "Privileged Access" modules drives net retention rates back above 115%; or "Auth0 for AI Agents" becomes the industry standard, adding a high-margin revenue layer that offsets the maturing core business.
Clearthesis wrote this report from 40 sources, including SEC filings, industry research, and recent news.
How did you like this thesis?
Your feedback helps us make reports better for you
© 2026 Clearthesis.ai · Report generated on June 23, 2026
This is an AI-generated analysis for informational purposes only and does not constitute financial advice. Data and analysis may not reflect recent developments if viewed significantly after the generation date. Always conduct your own due diligence before making any investment decisions.
The market is bullish because Okta remains the only independent leader in identity management, making it an essential, neutral partner for companies managing diverse digital environments. Okta is hitting a turning point where it finally transitioned to profitability while growing revenue to nearly three billion dollars. Investors see this shift as proof that it can scale without sacrificing core security functions.
Skeptics think that Okta faces a losing battle against giant technology companies that offer identity management as a free, bundled addition to their existing cloud platforms. Large providers like Microsoft can easily lure away customers by integrating identity services directly into the tools they already use, which forces Okta to defend its market share against massive, entrenched competitors.