Two meters, one speed

Okta bills enterprises for every employee who logs in, and bills developers using its Auth0 product for the monthly active users of their apps. In the quarter ended July 31, reported August 26, those two books grew 11% and 13% in annual contract value — and the split between them, 59% workforce and 41% customer identity, was identical to the prior quarter, when the same lines grew 10% and 12%. Both halves accelerated by exactly one point. The mix did not budge.

That is the fact the last six months of share price does not obviously accommodate. Okta, the largest independent identity vendor and the one company whose front door most large enterprises pass through, has been re-rated on the premise that AI agents will multiply the number of identities it charges for, breaking the link between its revenue and its customers' headcount. Chief financial officer Brett Tighe, asked on the August 26 call what agents contribute today: "Still immaterial. Still very small. We're very early innings… for FY '27, we don't think it's going to be material. But '28 and beyond, we do think that there is a real possibility for this to be material for the business in the long run."

What is actually expanding

The expansion Okta can document is module attach at its biggest accounts. Identity Governance, Privileged Access and Identity Threat Protection made up 30% of bookings in the quarter, at an average uplift of roughly 40% to deal value. Customers above $1m of annual contract value grew 22%, past 600. But customers above $100,000 grew only 6%, to 5,255. This is large-enterprise consolidation — existing whales buying more shelf — rather than a proliferation of new identities being metered.

The bookings are genuinely better than the revenue. Current remaining performance obligations rose 14% to $2.585bn and total obligations 17% to $4.858bn, against reported revenue growth of 10.6% to $805m — the third straight quarter of decelerating revenue, from 11.6% two quarters ago. Net retention held at 107%. Free cash flow was $227m, a 28% margin against 22% a year earlier. Gross margin widened almost three points to 79.6%. The seven-point jump in reported operating margin, to 13.3%, is mostly stock compensation and acquisition amortization rolling off: on a non-GAAP basis, operating margin improved about half a point, to 28.2%. And Okta's own third-quarter guidance takes that 14% bookings growth back to 11–12%.

The re-rating was three days

The six-month gain of 111% was not a grind. Three earnings sessions — May 29, June 1 and August 27 — supply roughly nine-tenths of it; the August 27 session alone ran $129.35 to $172.91, a 33.7% close-to-close move, after CNBC reported a 20% gain in extended trading the evening before. The 50-day average has sat above the 200-day since June 8.

What the shares now pay for that is roughly double what they paid in spring. Price to trailing gross profit is 11.80x, against 5.97x on May 3 and 10.29x on July 29, on gross profit that grew 14.5%; forward earnings are 43.4x against consensus revenue growth of 10.9% this year and 9.9% next. The mean analyst target, near $172, is level with the price. Okta led a broad security re-rating rather than standing alone — Palo Alto Networks rose 101.9% and Fortinet 86.8% over the same window, while CrowdStrike fell 50.3%.

SailPoint, the identity-governance specialist and the only live independent comparable since Palo Alto closed its $21.1bn purchase of CyberArk in February, grew revenue 21.6% to $280.1m last quarter — about twice Okta's rate — but at a 64.7% gross margin and a 28.5% operating loss, and at 14.96x trailing gross profit. It rose 14.8% on August 27 having disclosed nothing of its own.

The verdict

The business earns part of this. Bookings running three and a half points ahead of revenue, retention off its trough, and cash conversion at 28% are real, and the governance and privilege modules are being bought. What nothing in the disclosure yet earns is the doubling of the multiple, because the specific thing that doubling assumes — a usage-metered book pulling away from a seat-metered one — has not started. Okta's two halves are growing at the same pace, in the same proportion, and its own guidance says the bookings figure steps back next quarter.

Okta's cross-app access protocol went generally available with Anthropic, and agent single sign-on now ships inside the standard edition with a consumption cap built in but not enforced. Chief executive Todd McKinnon said on the call that agent identity "could be the biggest category of cyber" in the fullness of time. The pricing today is still a per-user uplift — the plumbing for a per-agent meter is installed, and the meter is not yet switched on.