Okta’s Q3 Impresses on Profit but Disappoints on Growth

A stronger bottom line meets a slower top line as Okta navigates cautious enterprise spending and a shifting identity-security market shaped by AI adoption.

Key Takeaways

• Okta delivered $742 million in Q3 FY2026 revenue, a 12% year-over-year increase, with subscription revenue comprising 98% of the total and rising 11% to $724 million, underscoring steady demand amid enterprise caution.
• The company achieved GAAP profitability with $23 million in operating income and $43 million in net income, while non-GAAP operating margins expanded to 24%, supported by robust cash flows and a 106% net retention rate.
• Strategic innovations, including Auth0 for AI Agents and an identity security fabric, position Okta at the forefront of securing AI-driven workflows, with RPO growth of 17% signaling a strong pipeline.

Introduction

Okta delivered third-quarter fiscal 2026 results on December 2 that signal a business in transition. Revenue reached $742 million, advancing 12% year over year, while subscription revenue climbed 11% to $724 million and now represents 98% of the total. These figures reflect neither spectacular growth nor stagnation, but rather the measured progression of a company navigating a transformed security landscape where artificial intelligence has fundamentally altered the identity management imperative.

The numbers tell only part of the story. What distinguishes this quarter is the strategic pivot toward securing non-human identities, particularly AI agents that operate autonomously across enterprise systems. As organizations deploy these intelligent entities to execute tasks previously performed by humans, the attack surface expands in ways traditional identity frameworks were never designed to address. Okta’s response has been deliberate: the October 2025 launch of Auth0 for AI Agents introduced token management and fine-grained authorization controls specifically engineered for agentic workflows, while the September announcement of an identity security fabric unified governance across human, machine, and AI identities under a single architecture.

Financial Discipline Meets Market Caution

The profitability trajectory deserves attention. GAAP operating income turned positive at $23 million, reversing a $16 million loss from the prior year period, while non-GAAP operating income rose 29% to $178 million, representing 24% of revenue compared to 21% previously. Net income under GAAP tripled to $43 million, or $0.24 per diluted share. These margins reflect operational maturity rather than aggressive cost-cutting. Gross margins improved to 77% through economies in subscription delivery, while research and development spending held steady at $160 million, suggesting focused investment rather than indiscriminate expansion.

The balance sheet reinforces this discipline. Cash and short-term investments totaled $2.463 billion as of October 31, providing substantial liquidity for both operations and strategic opportunities. Operating cash flow surged 37% to $218 million, equating to 29% of revenue, while free cash flow reached $211 million. This liquidity enabled full settlement of $510 million in convertible senior notes during the nine-month period, streamlining the capital structure and reducing future obligations.

Yet the revenue dynamics reveal tension between growth ambitions and market realities. Management noted in the 10-Q filing that elongated sales cycles persist in a high-interest environment, tempering what would otherwise be stronger expansion. The dollar-based net retention rate of 106% indicates modest upselling within existing accounts, while customers with annual contract values exceeding $100,000 grew 7% to reach a scale that anchors recurring revenue. Remaining performance obligations expanded 17% to $4.292 billion, with current RPO up 13% to $2.328 billion, pointing to healthy future conversion despite near-term headwinds.

Strategic Investments

Okta’s acquisition strategy has sharpened its competitive edge. The September closure of the Axiom Security deal for $54 million brought advanced privileged access controls into the platform, extending protections to databases and Kubernetes environments where AI workloads increasingly reside. This follows the earlier Spera Security acquisition, which enhanced threat detection capabilities. Together, these moves address the reality that identity threats have evolved beyond credential theft to encompass sophisticated attacks on privileged systems where AI agents operate with elevated permissions.

The competitive context matters. Gartner’s recognition of Okta as a Leader in its 2025 Magic Quadrant for Access Management, now for nine consecutive years, validates the company’s execution across authentication, authorization, and adaptive access. Yet this leadership faces continuous challenge from both established rivals and nimble entrants targeting specific segments. Okta’s neutral platform approach, which integrates with diverse cloud providers and enterprise applications, remains a differentiator but requires constant reinforcement through partnership and innovation.

The Cross App Access protocol, developed in collaboration with Salesforce and Google Cloud, exemplifies this strategy. By extending OAuth for secure AI agent interactions, Okta positions itself as infrastructure for the emerging agentic economy. Early access to AI agent governance features planned for fiscal 2027 suggests a phased rollout calibrated to market readiness rather than rushed deployment.

Market Reception and Forward Outlook

Investor response has been measured. Shares closed at $81.87 on the earnings date, up 1.5% with trading volume spiking to 9.19 million shares, more than double the norm. By the following day, the stock retreated to $79.00 in early trading, part of a broader November decline from $91.08 to around $80. This volatility reflects not weakness specific to Okta but rather sector-wide uncertainty as investors reassess cybersecurity valuations against normalized growth rates.

Management’s guidance tempers enthusiasm with realism. Fourth-quarter revenue is projected at $748 million to $750 million, implying 10% growth, with non-GAAP operating income of $189 million to $191 million yielding a 25% margin. Full fiscal 2026 revenue guidance was refined to $2.906 billion to $2.908 billion, up 11%, with non-GAAP earnings per share of $3.43 to $3.44. CEO Todd McKinnon emphasized strength in large-customer adoption and new product traction, particularly Okta Identity Governance, while framing AI agents as a multi-year opportunity rather than an immediate revenue driver.

Convergence and Resilience

The risks outlined in the 10-Q filing warrant attention: macroeconomic uncertainties, evolving cybersecurity threats, integration challenges from acquisitions, and dependencies on cloud infrastructure providers all constrain operational flexibility. The One Big Beautiful Bill Act, enacted July 4, 2025, provided some relief through preserved R&D expensing and modified foreign profit taxation through 2027, though the durability of these provisions remains subject to political dynamics.

What emerges from this quarter is a portrait of calculated adaptation. Identity management has migrated from peripheral IT function to strategic imperative as AI reshapes enterprise operations. Okta’s platform, designed for neutrality and integration, offers coherence in an increasingly fragmented digital ecosystem. The financial results confirm neither dominance nor vulnerability, but rather the steady execution required to maintain leadership in a market where the pace of technological change accelerates while customer decision-making slows. Whether this balance proves sufficient depends less on quarterly fluctuations than on Okta’s ability to anticipate the next inflection point in identity security before competitors do.