Okta is the largest independent identity & access management (IAM) company — the software that decides who (and increasingly what) is allowed to log into a company's applications and systems. Its core products are single sign-on, multi-factor authentication and a universal user directory (the Workforce Identity Cloud), plus the developer-focused Auth0 customer-identity platform. What sets Okta apart is that it is vendor-neutral: it connects to 7,000+ applications across any cloud, unlike Microsoft's Entra, which is bundled with Microsoft 365. It runs at ~77% gross margins and ~30% free-cash-flow margins on ~$3B of subscription revenue, but growth has cooled to ~11%. Think of it as the profitable, cash-rich, neutral “front door” to enterprise software — whose main challenge is Microsoft giving that front door away for free to its own customers.
Lifecycle & sector: Growth-to-mature SaaS — identity & access management (Software-Infrastructure). Revenue growth has decelerated to ~11% YoY and is guided to ~9–10% for FY27, so Okta sits at the boundary between the Growth (15–30%) and Mature (<15%) buckets. It is scored on the SaaS/Rule-of-40 profile, but the read is a profitable, FCF-rich, single-digit-to-low-double-digit grower — margin-driven, not growth-driven.
| Sub-signal | Value | Context | Score |
|---|---|---|---|
| Revenue trajectory | +11% YoY (Q1 FY27), decel. to ~9–10% guided | Weak for SaaS — single-digit-to-low-double-digit; the core problem | 48 |
| Gross margin | ~77% (TTM) | Strong (>70% expected); durable subscription economics | 82 |
| FCF margin / cash gen | ~30% TTM FCF margin; ~$900M TTM FCF | Elite cash conversion; FCF/net-income >1 | 85 |
| Net Revenue Retention | 107% (Q1 FY27), up 1pt from 106% | Healthy (>100%) but far from elite (120%); stabilising after a multi-year slide from ~120%+ | 52 |
| Balance sheet | Net cash ~$2.2B; debt/equity ~0.06; interest cover ~42x | Fortress — net-cash, low leverage | 88 |
| RPO / backlog | cRPO $2.50B (+12%); total RPO $4.72B (+16%) | Total RPO growing faster than revenue — a modest forward-demand positive | 64 |
Moat score = average ≈ 57 — a real but contested moat, with switching-cost decay the live vector.
| Rival | Threat type | Share trajectory | Moat-erosion vector |
|---|---|---|---|
| Microsoft Entra ID (ex-Azure AD) | Dominant platform substitution via M365 E3/E5 bundling | Okta LOSING share in workforce identity | Identity becomes "free" for E5 shops → erases the cost comparison, decays switching-cost & pricing power. The central bear thesis. |
| CyberArk | Privileged access + broadening into identity security | Okta stable/pressured | Overlaps Okta's newer OIG / Privileged Access upsell layers. |
| Ping Identity + ForgeRock (Thoma Bravo) | Direct workforce/CIAM rival | Stable | Consolidated competitor; price/feature parity in enterprise deals. |
| SailPoint | Identity governance (IGA) | Stable | Competes with Okta Identity Governance (OIG). |
Net effect on the moat: the Microsoft bundling overhang is a credible, ongoing switching-cost/pricing-power erosion → Switching Costs trimmed to 58, Cost Advantage held at 50. Okta's counter is genuine (vendor-neutrality, multi-cloud, integration breadth, and the higher-growth Auth0/CIAM engine), which is why this is erosion, not collapse. Competitive threat level: elevated.
Okta is profitable on a non-GAAP/FCF basis, so the primary lens is EV/FCF (and EV/Revenue), not GAAP P/E. The headline tension: Okta is genuinely cheap versus SaaS/cyber peers on EV/Revenue, yet on an intrinsic, rate-and-growth-warranted basis it sits in the Full band after a +120% run off the April low.
| Multiple | Okta | Peer / warranted | Read |
|---|---|---|---|
| EV/Revenue (TTM) | ~7.6× | SaaS median ~6–6.5×; cyber median ~9×; CRWD ~19×, ZS ~15×, PANW ~11× | Discount to cyber peers — the relative-value case |
| EV/Revenue (fwd/NTM) | ~6.9× | Far below IT guardrail (20×) | Cheap on sales; Gate 3 clears |
| EV/FCF | ~25× | Warranted ~20.7× | Full (1.22×) — the intrinsic anchor |
| FCF yield (FCF/EV) | ~4.0% | 3–5% = Fair for quality growth | Fair, not cheap |
| Non-GAAP fwd P/E | ~36× (FY27) / ~32.5× (FY28) | IT guardrail ~33× | Just above the guardrail on FY27 — a caution |
Implied-growth read: at $138.63 the market is embedding roughly double-digit sustained FCF growth; our disciplined estimate (~7.5% near-term) says the price embeds more growth than the fundamentals comfortably support — consistent with the Full band. The genuine bull offset is the peer discount: a name growing ~11% at ~30% FCF margins arguably shouldn't trade at half the cyber-peer EV/Revenue.
Primary driver: the enterprise IT / cyber-security spending cycle. Okta is B2B SaaS — its fortunes track corporate IT budgets, seat growth, and the security-spend priority within them. Identity is a defensive, non-discretionary layer of the security stack (you don't turn off SSO/MFA in a downturn), which cushions the driver.
| Horizon | Read | Basis |
|---|---|---|
| Historical (12–24m) | Soft → stabilising | Seat-based softness and NRR slide (120%+ → 106–107%) drove the multi-year de-rate; NRR has now ticked up 1pt. |
| Current | Firm | Security remains a budget priority; Gartner cyber spend growth mid-teens; RPO +16% signals forward demand. Non-discretionary layer. |
| Forward (6–12m) | Supportive | Agentic-AI / NHI expands the identity TAM; platform upsell (OIG, PAM) drives per-customer spend. Offset by Microsoft bundling capturing budget. |
Driver score: 62 (Neutral). The cycle is supportive but not a clean tailwind — the Microsoft-Entra budget capture is a structural drag on Okta's share of a growing pie. At 62 the driver is in the 36–64 band: no amplification. It does not lift the base signal, and (since the base is HOLD) it is inert regardless.
Thesis-invalidation floor: the case breaks if NRR rolls back below ~105% and workforce net-new seats visibly migrate to Entra — that would turn the driver from Neutral to Headwind and confirm the identity-as-a-feature bear.
Okta is not on the macro Economic Watchlist, so its economic pressure is mapped from its GICS sector, Information Technology (XLK): Short Neutral, Medium Outperform, Long Outperform under the Higher-for-Longer / Stagflation-lite regime. That is a Medium/Long Tailwind — which WOULD enable a STRONG BUY amplification. But the base signal is HOLD, and HOLD never amplifies, so the tailwind is inert here: it lifts no signal and is noted as a caveat only. Okta is deliberately NOT treated as part of the armed S&P-concentration / AI-earnings-quality tail cohort — it is not AI-capex-levered and its earnings are not inflated by non-operating markups, so the systemic bear leg is not inherited.
Source: sector-map (XLK: Short N / Medium O / Long O) · Macro report 2026-07-09
The trend is powerful but the entry is poor — the two are different questions, and this pillar answers the second. Okta is +120% off its April low, at/near its 52-week high ($153.20), with weekly RSI ~72 (overbought), and it just printed a -6.9% down day off the high with intraday timeframes rolling over.
| Component | Read | Effect |
|---|---|---|
| MTF trend (M/W/D) | Strong uptrend, resistance breakout, bullish confluence | + (high trend score ~78) |
| Risk-reward / position-risk | Extended; near resistance $153; wide stop required (~ -14% to logical support) | −15 proximity-to-resistance penalty; poor entry |
| RSI / overbought | Weekly 72, daily was 78 pre-pullback | Overbought — not "improving," extended |
| Relative strength | Strongly outperforming SPY & XLK (1m/3m) | + (leader) |
| Price vs consensus | +12% above $123.47 consensus | Trading above fair — entry risk |
Timing score: 54 (Neutral). A raging-but-overbought trend printing its biggest down day off a 52-week high is a poor entry, not an improving one. This is one point under the "Improving" (≥55) threshold, held there deliberately — nudging it to manufacture a BUY would be exactly the confirmation bias the framework guards against.
| Date | Event | Impact | Forecast | Previous | Relevant? | Why |
|---|---|---|---|---|---|---|
| 2026-07-14 | CPI YoY (Jun) | High | 3.9% | 4.2% | ⚠ Minor | Tech: growth-stock discount-rate sensitivity only |
| 2026-07-29 | Fed Rate Decision | High | 3.75% (hold) | 3.75% | ⚠ Minor | Rate path affects long-duration SaaS multiples |
| 2026-08-25 | Okta Q2 FY27 earnings | High | EPS $0.96 est | — | ✅ Yes | The key stock-specific catalyst (out of window) |
| Date | Event | Actual | Forecast | Surprise | Impact |
|---|---|---|---|---|---|
| 2026-07-06 | ISM Services PMI (Jun) | 54.0 | 54.0 | In line | Neutral for enterprise-software demand |
| 2026-07-06 | ISM Non-Mfg Prices (Jun) | 67.7 | 67.5 | +0.3% above | Sticky services inflation — supports Higher-for-Longer |
Okta is a LOW macro-sensitivity name (defensive SaaS). No high-impact stock-specific event falls inside the 14-day window — CPI (Jul 14) and the FOMC (Jul 29) matter only via the growth-stock discount rate, not directly. The dominant catalyst, Q2 FY27 earnings, is 44 days out. No WAIT-for-event override applies.
| Timeframe | Trend | Direction | RSI | MACD | Key S/R | Breakout | Vol |
|---|---|---|---|---|---|---|---|
| Monthly | Uptrend | Bullish | 67 | +, rising | S:$62.7 R:$127.6 | Resistance breakout | 0.3x |
| Weekly | Uptrend | Bullish | 72 | +, rising | S:$86.3 R:$142.4 | Resistance breakout | 0.8x |
| Daily | Strong uptrend | Bullish | 62 | +, hist fading | S:$119.9 R:$153.2 | Resistance breakout | 1.0x |
| Hourly | Weakening | Bearish | 29 | −, falling | S:$138.0 R:$153.2 | Support breakdown | — |
| 15-min | Strong downtrend | Bearish | 29 | −, basing | S:$138.1 R:$140.5 | Support breakdown | — |
| Confluence: Bullish (higher timeframes) with intraday rolling over · MTF Score 66 | |||||||
Monthly, weekly and daily are all in confirmed uptrends with a resistance breakout — the primary trend is unambiguously up. But weekly RSI at 72 is overbought, price is pressed against the $153.20 52-week high, and the hourly/15-min timeframes have broken down (RSI ~29) after the -6.9% day. This is the textbook 'extended leader taking a breather at resistance' picture: bullish structurally, but the immediate entry is poor. The reachable early entry is a pullback into the $119–124 June-breakout support with a higher low, not a chase at the high.
OKTA 6-month daily. The May 28 earnings gap ($94→$123) and the run to $153 dominate; note the fresh pullback to $138.63 and the June-breakout support band ($119–124) as the entry zone.
Agentic-AI / NHI monetisation re-accelerates growth back toward the mid-teens and the multiple re-rates toward the cyber-peer group. NRR climbs back above 110%, platform upsell (OIG/PAM) compounds, Microsoft overhang fades as vendor-neutral / multi-cloud demand holds. Re-rate toward the $175 analyst high. ~+24% from $138.63.
Okta keeps executing on margins and FCF but growth stays single-digit-to-low-double-digit (~9–11%). The multiple holds near Full / drifts toward consensus as the run-up digests. NRR stabilises around 107%. Price gravitates to the ~$120–130 fair-value / consensus zone. ~−8% from here — the run-up gives some back.
Competitive + multiple-compression bear. Microsoft Entra bundling accelerates workforce-seat share loss, NRR breaks below ~105%, growth slips toward mid-single-digits, and the +120% run-up compresses back toward the 200-DMA / prior consolidation ($90–100). A de-rate from a Full multiple on a single-digit grower is a 30%+ move. NOT an AI-cohort systemic tail — company-specific + valuation. ~−29%.
Forecast: ENTRY — Fundamental (price < ~$124): FORECAST ~ requires a pullback of ~10% from $138.63; at current momentum this is catalyst-dependent (a broad tech wobble or a soft Q2 print). CONFIDENCE: Low-Moderate — the trend is up, so the fundamental entry needs a mean-reversion, not a continuation. ENTRY — Technical (pullback to $119–124 support with a higher low OR RSI cooling to 35–65): FORECAST ~2–5 weeks — weekly RSI at 72 typically needs several weeks of digestion/consolidation to reset; the fresh -6.9% day may be the start. CONFIDENCE: Moderate. ENTRY — Catalyst: depends on Q2 FY27 earnings on 2026-08-25 (out of window). EXIT — Stop-Loss ($118.50): Unlikely in 4–6 weeks — price is ~15% above it and above a rising SMA50; would need a sharp reversal. EXIT — Thesis Invalidation: monitored quarterly on the NRR print — not live today.
Forecast: Hard stop ($118.50) unlikely in 4–6 weeks — price ~15% above it and above a rising SMA50. Thesis-invalidation is monitored on the quarterly NRR print (next: Aug 25). No exit rule is live today.
What you're risking: buying at $138.63 means paying ~12% above the $123.47 analyst consensus and into a Full-band EV/FCF (1.22× warranted), at a 52-week high, on a -6.9% day with intraday timeframes rolling over. No entry group is met — you would be chasing an overbought leader. The bear (Microsoft erosion + multiple compression) is a live ~30% path.
What you're gaining: immediate exposure to a net-cash, ~30%-FCF-margin identity leader with real agentic/NHI optionality you own for free, and a ~4% FCF yield compounding while you wait. But with the base case below the current price, the risk-reward of acting today is unattractive: waiting for the $119–124 support zone (or an RSI reset) materially improves the deal.
What you're giving up: if you already hold, selling forgoes the bull path to ~$172 and the NHI optionality, and would crystallise gains on a quality compounder.
What you're protecting: no exit rule is live today — the hard stop ($118.50) is intact, no thesis-invalidation condition has fired, and RSI hasn't paired with the bull target for a profit-trim. So there is no mechanical reason to sell. For a holder this is a HOLD/trim-into-strength zone, not an exit; for a non-holder it is a WAIT-for-entry zone.
Position sizing is not computed — no risk budget or portfolio role was specified for this run. Volatility context: daily ATR ~$7.24 = ~5.2% of price (a wide daily range); beta 0.77 (lower systematic risk than the market, but high idiosyncratic/event risk around quarterly prints). The +120% run off the April low and the ~$62–$153 52-week range show how violently this name re-rates on sentiment. Any entry is best staggered into the $119–124 support zone rather than chased at the high.
{
"ticker": "OKTA",
"company": "Okta, Inc.",
"currency": "USD",
"date": "2026-07-12",
"version": "v6",
"exchange": "NASDAQ",
"exchange_ticker": "NASDAQ:OKTA",
"isin": "US6792951054",
"api_ticker": "OKTA",
"analysis_status": "donatien-pick",
"finder_ticker": null,
"finder_exchange": null,
"user_horizon": null,
"user_allocation_pct": null,
"portfolio_role": null,
"price_at_rating": 138.63,
"signal_short": "HOLD",
"signal_medium": "HOLD",
"signal_long": "HOLD",
"primary_signal": "HOLD",
"short_entry_confirmed": false,
"short_cap_reason": "Fundamental-only path unmet too; extended/overbought entry — buy on a pullback into $119-124 support or an RSI reset.",
"quality_score": 66,
"lifecycle_stage": "growth-to-mature",
"quality_detail": {
"industry_benchmark_name": "Rule of 40 (SaaS)",
"industry_benchmark_value": 41,
"industry_benchmark_score": 60,
"moat_score": 57,
"nrr_pct": 107,
"gross_margin_pct": 77,
"fcf_margin_pct": 30
},
"valuation_score": 46,
"valuation_detail": {
"fcf_yield": 4.0,
"ev_revenue_ttm": 7.6,
"ev_revenue_ntm": 5.3,
"ev_fcf": 25.0,
"nongaap_fwd_pe_fy27": 36.0,
"implied_growth_rate": 10.0,
"consensus_growth_rate": 10.0
},
"warranted_multiple": 20.7,
"actual_multiple": 25.0,
"val_multiple_basis": "EV/FCF",
"discount_rate_r": 9.04,
"risk_free_10y": 4.54,
"g_near": 7.5,
"g_term": 3.0,
"warranted_ratio": 1.22,
"val_band": "full",
"timing_score": 54,
"timing_detail": {
"mtf_confluence": 72,
"risk_reward_score": 42,
"relative_strength_vs_spy": "strong_outperform",
"relative_strength_vs_sector": "strong_outperform",
"catalyst_clustering_score": 70,
"dynamic_macro_weight": 0.1,
"rsi_weekly": 72,
"pct_above_consensus": 12.3
},
"driver_score": 62,
"driver_label": "Neutral",
"driver_name": "Enterprise IT / security spending cycle",
"nonop_pct_of_net_income": 40,
"clean_pe": null,
"clean_peg": null,
"nonop_note": "~40% of GAAP net income is recurring cash interest income on the ~$2.2B net-cash pile, NOT a mark-to-market markup; valuation anchored on EV/FCF & EV/Revenue.",
"sbc_pct_of_revenue": 18.3,
"sbc_usd_m": 533,
"share_count_growth_pct": 0,
"gate4_dilution_fired": false,
"competitive_share_trajectory": "losing",
"competitive_threat_level": "elevated",
"economic_alignment_stance": "Trend-Following",
"economic_alignment_conviction": 58,
"economic_alignment_pressure": "Tailwind",
"economic_alignment_source": "sector-map (XLK)",
"macro_report_date": "2026-07-09",
"amplification_note": "XLK medium/long Outperform is a Tailwind, but the base signal is HOLD and HOLD never amplifies — the tailwind is inert.",
"overall_confidence": 66,
"fair_value_est": 124.0,
"stop_loss": 118.5,
"target_price": 127.0,
"scenario_bull_target": 172,
"scenario_base_target": 127,
"scenario_bear_target": 98,
"entry_groups_met": 0,
"entry_conviction": "Wait",
"exit_groups_live": 0,
"exit_action": "Hold",
"hard_gate_state": "clear",
"gates_triggered": [],
"gates_caution": [
"Earnings Event (Aug 25, out of 14-day window)"
],
"do_not_buy_triggers": [],
"analyst_consensus_target": 123.47,
"analyst_target_high": 175,
"analyst_target_low": 60,
"analyst_target_upside_pct": -10.9,
"analyst_grades_consensus": "Buy",
"analyst_bullish_pct": 73,
"analyst_coverage_count": 51,
"fmp_rating": "B+",
"fmp_overall_score": 3,
"recent_upgrades_30d": 1,
"recent_downgrades_30d": 0,
"next_update_date": "2026-07-27",
"next_update_basis": "default +14d (earnings 2026-08-25 out of window)"
}
Signal is HOLD across all three horizons, entry conviction Wait (0/3), no gates or Do-Not-Buy triggers. The HOLD is a Decision-Matrix outcome (High Quality 66 + Full Valuation 46 + Neutral Timing 54 → 'good business, wait for a valuation entry'), not a risk cap. The XLK Medium/Long Outperform tailwind is inert because HOLD never amplifies. This is a Donatien Pick — an operator conviction hold on the watchlist — scored honestly: the pick tag does not confer a BUY bias.