Verified6 deals on this page · sourced from SEC filings
+ 4 earnings transcripts
All cross-references covered.
Timeline
6 deals, $5.7B deployed.
Plotted by close date where disclosed, otherwise announcement. Click any marker to jump to the deal entry.
The playbook
The rationale that repeats.
Three patterns show up across Okta's deal book — what the team buys, how it pays, and how it integrates. The patterns are the throughline; the individual deals below are the evidence.
01
Acquisition criteria
One platform-defining deal, five tuck-ins around it.
Auth0 is the only material acquisition in Okta's history — every other deal (Stormpath, ScaleFT, Azuqua, atSpoke, Spera) was under $100M and most were under $50M. Okta treats M&A as targeted product fill-in, not as a growth engine: pick a specific gap (developer identity, server access, workflow, governance UX, threat detection), buy the strongest small team in that niche, and absorb the engineering. Auth0 is the exception because Okta could not out-build the developer-identity category in any reasonable timeframe.
StormpathScaleFTAzuquaAuth0atSpoke (Townsend Street Labs, Inc.)
02
Capital deployment
Buy the engineering team, sometimes wind the standalone product down.
Stormpath's API and SDKs shut down five months after the deal — Okta wanted the engineers and the IP license, not the customer base. ScaleFT was rebranded as Okta Advanced Server Access. Azuqua became Okta Workflows. atSpoke was wound down by 2023 and its team folded into Okta Identity Governance. Only Auth0 still operates as a parallel product line — both the Okta Platform and Auth0 Platform are described as co-equal in the FY26 10-K product taxonomy.
StormpathScaleFTAzuquaAuth0atSpoke (Townsend Street Labs, Inc.)
03
Integration approach
Each deal patches a hole the prior year's strategy exposed.
Stormpath (2017) was a response to losing developer mindshare; ScaleFT (2018) plugged the zero-trust server-access gap; Azuqua (2019) gave Lifecycle Management a no-code front end; Auth0 (2021) eliminated Okta's most credible customer-identity competitor; atSpoke (2021) supplied the access-request UX for the forthcoming Identity Governance product; and Spera (2024) added the identity threat detection capability that the 2022–2023 vendor breaches had exposed Okta as lacking. Each acquisition reads as a defensive product-roadmap move rather than an offensive bet on a new market.
StormpathScaleFTAzuquaAuth0atSpoke (Townsend Street Labs, Inc.)
Deal book · 6 acquisitions
The full deal book.
6 acquisitions. Click any row to see the deal value, financing structure, target revenue, executive commentary, and the original SEC filing — the evidence behind the patterns above.
Stormpath built a user management and authentication service for software development teams, with a focus on identity APIs for app developers. Okta acquired the rights to hire certain employees (35 of 45) plus a non-exclusive intellectual property license; Stormpath wound down its standalone API and SDKs on August 17, 2017. Headquartered in San Mateo, California. approximately $3.7 million in equity consideration (200,000 shares + replacement awards) plus an incremental 800,000 restricted shares ($8.6M) recognized as post-combination compensation.
Why it was attractive
01Stormpath's API-first design and developer mindshare were the missing piece in Okta's customer-identity stack — the same developer audience Auth0 would build into a $6.5B exit four years later
Capabilities acquired
developer identity APIsauthenticationuser managementSDKs for mobile and web apps
Our vision for the Okta Identity Cloud is to become the authentication layer for every app, service, device and person. The Stormpath team brings great technical talent and a deep understanding of developer needs, both of which are necessary to provide a world-class developer experience.
Todd McKinnonChief Executive Officer and co-founder, Okta
Our team is excited to join Okta and accelerate efforts to help companies better manage identity across a wide spectrum of applications and services.
Alex Salazarco-founder, Stormpath
Post-close · earnings-call commentary
Todd McKinnon, Q1 FY18 earnings call (June 7, 2017): 'As we look to further build on our capabilities for external users, we added the team from Stormpath in March. Stormpath focused on identity for the developer. The integration of Stormpath into Okta accelerates the growth of our identity platform for developers.'
ScaleFT was a Zero Trust security company providing access solutions for the modern workforce — continuous authentication for server access across cloud and on-premises infrastructure including AWS, SSH and RDP. Okta recorded $4.6M in developed-technology intangibles and $11.8M of goodwill, primarily attributable to the assembled workforce and technology integration. approximately $15.6 million cash (net of $0.6 million cash acquired).
Why it was attractive
01ScaleFT extended Okta beyond SaaS sign-on into infrastructure access — a category (zero-trust server access) where Okta otherwise had no native product against incumbents like CyberArk and BeyondTrust
To help our customers increase security while also meeting the demands of the modern workforce, we're acquiring ScaleFT to further our contextual access management vision — and ensure the right people get access to the right resources for the shortest amount of time.
Frederic KerrestCo-Founder and Chief Operating Officer, Okta
Post-close · earnings-call commentary
Todd McKinnon, Q2 FY19 earnings call (September 6, 2018): 'I wanted to briefly comment on our acquisition of ScaleFT. We were excited to announce the acquisition in the quarter, which will help our capabilities. Zero trust and contextual access are the next essential features in a secure IT environment, and we will be better equipped to deliver these capabilities with the technology from ScaleFT.'
Azuqua was a no-code, cloud-based integration platform that automates workflows between applications and services. Founded in 2013 by ex-Microsoft engineers including Nikhil Hasija, the company had raised roughly $16 million at a $72M post-money valuation. Okta paid $44.2M cash at close and recorded $15.7M of developed-technology intangibles (5-year useful life) plus $29.9M of goodwill. $52.5 million announced ($44.2 million cash at close, net of $1.1 million cash acquired).
Why it was attractive
01Azuqua filled a gap in Okta's Lifecycle Management product — provisioning was rules-based
02Azuqua brought visual
03no-code workflow logic that customers could extend without engineering effort
Capabilities acquired
no-code workflow automationpre-built application connectorsidentity-driven business process integrationLifecycle Management orchestration
With Okta and Azuqua, IT teams will be able to use pre-built connectors and logic to create streamlined identity processes and increase operational speed.
Frederic KerrestCo-Founder and Chief Operating Officer, Okta
Post-close · earnings-call commentary
Todd McKinnon, Q1 FY20 earnings call (May 30, 2019): 'There's a lot of things that happen with our existing LCM product and it's pretty deep ... but Azuqua is going to allow us — which is now Okta Workflows — to do more and more there. And Workflows is going to not only strengthen that offering, but also allow us and our customers to essentially manage more and more workflow.'
Auth0 was an Identity-as-a-Service company built developer-first — an API-driven customer identity platform that became the de facto choice for application teams. Okta acquired all outstanding shares; Auth0 operates as an independent business unit inside Okta, led by Auth0 CEO and co-founder Eugenio Pace reporting directly to Todd McKinnon. The acquisition recorded $5,290.1M of goodwill primarily attributable to expected synergies across complementary products, customers and geographies. Intangibles: $172M developed technology, $140.9M customer relationships, $21.4M trade name. approximately $6.5 billion announced (all stock); final acquisition-date fair value of $5,671.0 million — $5,175.6M common stock issued (~19.2M shares), $257.0M cash, $238.4M assumed employee equity awards.
Why it was attractive
01Auth0 owned the developer mindshare and customer-identity API category that Okta had been trying to crack since the Stormpath acquihire four years earlier. Buying it eliminated Okta's most credible CIAM competitor in a single transaction
02even at a price equivalent to roughly 50x trailing revenue
Capabilities acquired
developer-first customer identity (CIAM)authentication APIssocial loginMFAbreached-password detectionfine-grained authorizationextensibility via Actions
Combining Auth0's developer-centric identity solution with the Okta Identity Cloud will drive tremendous value for both current and future customers. In an increasingly digital world, identity is the unifying means by which we use technology — both at work and in our personal lives. With so much at stake for businesses today, it's critical that we deliver trusted customer-facing identity solutions. Okta's and Auth0's shared vision for the identity market, rooted in customer success, will accelerate our innovation, opening up new ways for our customers to leverage identity to meet their business needs.
Todd McKinnonChief Executive Officer and co-founder, Okta
Okta and Auth0 have an incredible opportunity to build the identity platform of the future. We founded Auth0 to enable product builders to innovate with a secure, easy-to-use, and extensible customer identity platform. Together, we can offer our customers workforce and customer identity solutions with exceptional speed, simplicity, security, reliability and scalability.
Eugenio PaceChief Executive Officer and co-founder, Auth0
Post-close · earnings-call commentary
Todd McKinnon, Q4 FY21 earnings call (March 3, 2021, announcement day): introduced the deal alongside incoming CFO Mike Corey and Eugenio Pace, framing it as 'our plan to join forces' rather than an integration play — language that has held through five fiscal years and is reiterated in the FY26 10-K's dual-platform product description.
Townsend Street Labs (operating as atSpoke) was a modern workplace operations platform — a ticketing and knowledge tool used by IT, HR and operations teams to handle internal requests. Okta announced it would incorporate atSpoke's platform with Okta's Identity Governance and Administration (IGA) offering, with co-founders Jay Srinivasan and Pratyus Patnaik taking leadership positions in Okta's product and engineering teams. approximately $79.3 million cash consideration ($13.4M held back as partial security for 18 months); reported by MarketScreener at $89M total when including stock component.
Why it was attractive
01Identity Governance and Administration was the next big workforce-identity adjacency Okta wanted to enter
02and the access-request workflow — the user-facing front end of IGA — was the part Okta was furthest from having. atSpoke had already built that experience for a different problem (general workplace tickets)
Spera Security (legal name Spera Cybersecurity, Inc.) was an Israeli identity security platform provider focused on identity threat detection and security posture management — visibility across identity providers, SaaS applications, and cloud infrastructure (AWS, Salesforce, GCP, GitHub) with compliance monitoring against SOX and NIST. Okta announced the deal would broaden the company's identity threat detection and security posture management capabilities. approximately $80 million announced (cash + Class A common stock); final acquisition-date cash consideration of $58 million ($12M in 18-month escrow) per FY25 10-K.
Why it was attractive
01Identity threat detection and response was the gap Okta's 2022 vendor breach and 2023 support-system incident exposed — Spera was a focused
02Israeli-team-led ITDR product that could be productized into Okta faster than building from scratch
Capabilities acquired
identity threat detection and response (ITDR)identity security posture management (ISPM)unmanaged-account discoverymisconfiguration detectionattack-surface visibility across IdPs and SaaS
The acquisition of Spera, an identity security platform provider, is expected to broaden the Company's identity threat detection and security posture management capabilities.
Okta FY24 10-KSubsequent Events note (Note 16)
Continues our investment in secure Identity product offering.
Arnab BoseChief Product Officer, Okta (close-of-acquisition blog, February 2024)
Built with VectorShift
Research like this. In three minutes.
Every figure on this page was synthesized by VectorShift from SEC EDGAR filings — before an analyst would finish their first coffee. Point the same pipeline at private deal documents and the output is the same.
VectorShift reads the documents your team actually works on — CIMs, management decks, filings, expert calls, portfolio reports — and returns structured, sourced analysis in minutes, not weeks.