Industry Insight

The past decade has seen dramatic changes in the business landscape, including more sophisticated cyber threats, the rise of distributed work, and smartphone saturation. Along the way, our Businesses at Work report has tracked how workforces have adapted and the new tools they’ve adopted. Amid all this change, two constants emerge: the importance…

Okta Ventures invests in founders building across a range of IT, security, consumer, and enterprise domains. In our discussions with portfolio founders, shared customers, and industry experts, we’re in a privileged position to hear first-hand about new trends, challenges, regulations, and technology shifts as they unfold and affect security…

Four days before the second inauguration of President Donald Trump, his predecessor President Joe Biden issued an executive order that aimed to create a national cybersecurity strategy across federal agencies, private businesses, and critical infrastructure sectors. While President Trump has been quick to roll back other executive orders in his…

Non-human identities (NHI), including machine identities, service accounts, API keys, and automation tools, play a critical role in modern cloud environments and enterprise applications. Yet, the proliferation of secrets—like hardcoded credentials, tokens, and certificates—introduces security risks that can be exploited if not properly managed. As…

Research by Okta Security found that organizations targeted by prolific threat actors almost always enroll their users in phishing-resistant methods of sign-in. Given the low cost and complexity of moving users to stronger authenticators, why wait to be targeted? Okta research has found that while the rate of growth in MFA adoption is slowing, the…

In a year of transition, it's crucial that the government and its partners are focused on what’s next and what’s mission-critical to ensure the right outcomes for their stakeholders, both inside and outside the government. The Okta Gov Identity Summit, hosted on March 5, 2025, will continue the important conversation around “Identity is security.”…

Today, the White House released its Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity. In an era defined by rapid technological advancements, the executive order aims to strengthen and promote innovation in cybersecurity while promoting the safety and resilience of the digital tools agencies rely on. We are…

A new year is here, and with it come new resolutions, possibilities, and — regrettably — threats.  No, threat actors won’t just change their ways with the flip of the calendar. Instead, they’ll double down on what’s been working and experiment with new ways of evading detection and exploiting vulnerabilities.  While we can’t anticipate every…

An open door for attacks Identity-based attacks are a rising threat, and every organization is responsible for protecting itself. What do we mean? Just as you have a door and a lock at home, Identity security protects your cloud and SaaS assets: It’s the external perimeter of your organization’s assets. Identity security means controlling who…

Last updated on February 12, 2025 Here’s the third blog in our series detailing how focusing on Identity can help your organization improve end-user experiences and meet consumer expectations. On its third anniversary, we look back at the Executive Order on Transforming Federal Customer Experience (CX) and Service Delivery to Rebuild Trust in…