Okta, Inc.OKTA

Okta’s core identity business generated $765 million in revenue over the nine months to 30 April 2026, enough cash to fund the entire R&D division for four quarters and still leave change for a few AI governance whitepapers and conference badges. Net income clocked in at $74 million, a figure that would look healthier had the company not spent $163 million on R&D-more than twice the profit line and roughly the operating scale of a small Pacific atoll. Operating income landed at $56 million, which is the sort of margin that keeps the lights on in San Francisco but doesn’t buy many AI agents a three-martini lunch. The balance sheet, however, remains a fortress: $762 million in cash, $1.83 billion in short-term investments, and total assets of $9.35 billion against liabilities of $2.45 billion, giving the company a tangible equity cushion of $6.90 billion. Operating cash flow was a robust $277 million, proving that, for now, someone out there is still willing to pay six-figure SaaS fees to keep their workforce from accidentally inviting the entire internet to the Zoom call.

What Okta actually sells is identity: a boring, foundational layer that decides who and what can touch corporate data. The product pitch has lately pivoted toward ‘AI agents,’ a concept the marketing team has crystallised into a reference architecture called the ‘secure agentic enterprise,’ a blueprint designed to answer three questions that should probably live in a compliance slide deck rather than a glossy award acceptance speech. The company’s latest release bundles Agent Gateway and Agent-to-Agent Connections, which promise to secure AI agents at runtime and govern their permissions over time, which is exactly the sort of promise that keeps CISOs’ pagers quiet until the first rogue agent starts emailing spreadsheets to 4chan. Training courses meanwhile still litter the website like confetti, offering certification paths that feel less like cutting-edge security and more like a multiple-choice exam on configuring the very platform everyone keeps misconfiguring.

Filings show the numbers behind the noise. Revenue of $765.0 million for the nine months ending 30 April 2026 is the headline. Net income of $74.0 million and operating income of $56.0 million sit beneath it, while diluted EPS of $0.42 on 177.7 million shares tells a story of modest profitability with a share count that has quietly drifted higher. The company spent $163.0 million on R&D over the same period and just $1.0 million on capital expenditure, which is one way to say the balance sheet is being fed by licence revenue rather than heavy infrastructure bets. Assets of $9.35 billion and stockholders’ equity of $6.90 billion give the company ample dry powder, while operating cash flow of $277.0 million confirms the core identity flywheel is still spinning. Short-term investments of $1.83 billion sit parked in low-risk instruments, suggesting the finance team is not about to bet the company on a moonshot AI governance feature.

For investors who like their identity stories served with a side of hype, Okta now markets a ‘secure agentic enterprise’ complete with a blueprint, an award, and a pipeline of features that promise to govern AI agents ‘at runtime.’ The evidence shows the company is still collecting licence cheques from its core identity product, while the AI narrative is mostly a wrapper around governance, runtime security, and a training catalogue that feels like the digital equivalent of a binders-and-badges certification programme. The gap between the polished platform story and the filed numbers is wide enough to park a small data centre in and still have room for the next round of AI hype. (source: 10-Q, period ending 2026-04-30, https://www.sec.gov/Archives/edgar/data/1660134/000196812526000011/xslF345X06/F345X01.htm)

If you want the raw product evidence, Okta’s press pages now read like a greatest hits of AI governance rhetoric: Agent Gateway, Agent-to-Agent Connections, Resource Access Certifications, and a ‘blueprint for the secure agentic enterprise’ that purports to answer three critical questions while the rest of the industry wonders why the fourth question-‘how do we bill for this?’-is still the one nobody dares to ask in public. The product images show futuristic neural net diagrams and glowing hexagons, which is fine for keynotes but less helpful when the CFO needs to explain why $163 million of R&D hasn’t yet translated into a material uptick in AI-specific revenue. The company’s own training catalogue still lists two dozen certifications, which, taken together, suggests the real product is the certification path rather than any tangible AI security moat. (source: press release and product page, https://www.okta.com/newsroom/press-releases/okta-wins-2026-ai-breakthrough-award-for-ai-security-innovation/)

The filing trail is unusually rich this quarter, with a cluster of Form 4 insider sales and Rule 144 filings that collectively tell a story of option holders treating their paper like a lottery ticket rather than long-term equity. The share count has crept upward while the stock dances between ‘strategic pivot’ and ‘oops we left an API key in GitHub,’ a pattern that leaves outsiders wondering whether the board’s buyback optics are more theatre than capital return. Filings also show the company’s 8-K disclosures are now a mini-series of governance notes, insider trades, and product releases, which is what happens when a SaaS company’s narrative outruns its actual revenue mix. The cash remains real-$277 million of operating cash flow in the quarter-and the balance sheet still looks like a rainy-day bunker for a business that sells identity as a service. (source: SEC EDGAR filings index, https://www.sec.gov/edgar/browse/?CIK=1660134)

What would deepen this file next? A segment split showing how much of the $765 million revenue now comes from AI-specific features versus legacy identity licences; a clear disclosure of AI-related ARR or bookings; and a filing that quantifies the revenue contribution of the new Agent Gateway and Governance features. Until then, the story is still ‘identity cash cow with an AI sash’: the filings are solid, the optics are polished, and the gap between the two is where the next chapter will be written.