Okta Inc. (NASDAQ:OKTA) announced a new security framework designed to help enterprises manage risks associated with AI agents, alongside the launch of Okta for AI Agents, a platform expected to become generally available on April 30, 2026.
The framework is built around three key questions organizations need to address: where AI agents operate, which systems and resources they can access, and what actions they are authorized to perform. The platform is designed to help companies identify both approved and unauthorized AI agents, manage their permissions, and revoke access when necessary.
Research referenced by Okta indicates that 88% of organizations have experienced suspected or confirmed security incidents involving AI agents, yet only 22% currently treat them as independent entities requiring identity management.
Okta for AI Agents includes several features aimed at improving oversight and control. Agent integrations within the Okta Integration Network will support platforms such as Boomi, DataRobot and Google Vertex AI. The system can also detect so-called “shadow agents” created without formal approval and register all AI agents as managed digital identities.
The platform also introduces an Agent Gateway that functions as a centralized control layer for AI agents accessing enterprise resources. Additional capabilities include credential management tools and controls over API access. A feature called “Universal Logout” allows organizations to immediately revoke all active access tokens if an agent behaves outside of its intended parameters.
“AI agents are evolving faster than any software before them, making traditional security models obsolete,” said Ric Smith, President of Products & Technology at Okta.
The announcement comes as AI agents become increasingly capable, with some able to run terminal commands, access file systems and independently carry out complex tasks. To address this shift, Okta is expanding its Universal Directory to treat AI agents as distinct non-human identities that require full lifecycle management.