Okta moves inline to police what AI agents actually do

Okta Inc. launched an AI agent runtime gateway that sits inline in the path of attempted agent actions to enforce authorization decisions at runtime, president of products and technology Ric Smith said at Okta's Oktane event. The gateway, combined with Okta's acquisition of Permiso Security, lets Okta capture both the prompt entering a model and the actions the model proposes to take, and Okta plans to add intent-based authorization to the gateway in 2027. Smith said scoping agent permissions narrowly enough to avoid blocking legitimate work remains an open research problem.

Okta moves inline to police what AI agents actually do An agent gateway moves identity security beyond deciding who gets through the front door to governing what autonomous AI agents do once inside. By sitting in the path of attempted actions, the gateway can enforce authorization decisions at runtime. Okta Inc. recently launched an AI agent runtime gateway https://siliconangle.com/2026/09/22/okta-adds-ai-agent-runtime-gateway-forms-blueprint-alliance-with-aws-and-crowdstrike/?utm source=chatgpt.com as part of its broader approach to securing autonomous systems. The architecture marks a new role for the identity provider, according to Ric Smith https://www.linkedin.com/in/ricsmith/ pictured , president of products and technology at Okta. “That is a very different transition for Okta,” he said. “Dominantly, we had not been inline, so with us moving in that direction, it means that we can do a lot more decision-making in terms of what we authorize.” Smith spoke with theCUBE Research’s Krista Case https://www.linkedin.com/in/krista-case/ and co-host Rebecca Knight https://www.linkedin.com/in/rebecca-m-knight-3667a94/ at Okta’s Oktane event https://www.thecube.net/events/okta/okta-oktane-2026 , during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed runtime threat detection, intent-based authorization and how Okta is expanding further into cybersecurity. Disclosure below. Why an agent gateway puts Okta in the runtime path Being inline also lets Okta watch for threats rather than simply grant permissions. That logic drove the company’s acquisition of Permiso Security https://www.okta.com/newsroom/press-releases/okta-signs-definitive-agreement-to-acquire-permiso-security/ , which adds detection capabilities as Okta expands further into cybersecurity, according to Smith. Full visibility into an agent’s behavior, however, requires observing both the prompt entering the model and the actions it proposes. “You really have to sit in two positions around these models,” he said. “One is on the front end of it so that you can capture the conversation being presented. Then, based on the Gateway that we’ve already announced, we already sit on the back end of the model where we can capture all of the actions that the model ultimately wants to take and then also make decisions around that.” Combining those vantage points could allow Okta to judge whether a proposed action should proceed, Smith explained. In 2027, the company plans to add intent-based authorization to its agent gateway, using an agent’s context and permitted tools to inform access decisions. Determining how narrowly to scope those permissions without blocking legitimate work remains an open research question. “It’s a hard problem for us to solve, and so that’s why we’re hard at work doing all the research around it,” Smith said. “But we think that is pay dirt in terms of what actually has to happen with the agent workforce.” Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of Okta’s Oktane event https://www.thecube.net/events/okta/okta-oktane-2026 : Disclosure: TheCUBE is a paid media partner for Okta’s Oktane event. Neither Okta Inc., the sponsor of theCUBE’s event coverage, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE. Photo: SiliconANGLE A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network , where technology leaders connect, share intelligence and create opportunities. - 15M+ viewers of theCUBE videos , powering conversations across AI, cloud, cybersecurity and more - 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/ https://siliconangle.com/aws-marketplace/ About SiliconANGLE Media SiliconANGLE https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552 , theCUBE Network https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da , theCUBE Research https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f , CUBE365 https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6 , theCUBE AI https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683 and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.