The Okta and Auth0 Platforms enable secure access, authentication, and automation, putting Identity at the heart of business security and growth.
Our summaryIdentity provider for workforce and customer identity: single sign-on, MFA and identity governance.
“Okta Workforce Identity provides easy, secure access for your workforce so you can focus on reducing costs, and doing more for your customers.”
Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.
Product page“Okta’s AI-driven continuous risk and policy evaluations deliver real-time identity threat assessment and automated responses across your environment.”
Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.
Product pageIndependent tests, peer reviews and articles about Okta. We link to them; we did not write or commission them, and nobody pays to appear here.
Stories in our coverage based on what researchers at Okta found or reported: 9 in total.
Infostealer logs are selling replayable AI tokens that bypass MFA and grant illicit account access.
Illegal AI model access services like Poison Claude are selling discounted access while exposing customer prompts.
Cybersecurity alliance drafts SAFE guidelines for sharing AI incident data.
OpenSSL silently fixes 'HollowByte' DoS vulnerability allowing memory exhaustion.
OpenSSL HollowByte flaw allows 11-byte TLS requests to exhaust server memory without CVE assignment.
Okta warns of vishing campaign using fake passkey registration to steal Microsoft 365 credentials.
Hackers use vishing and fake Entra passkey enrollment to gain Microsoft 365 access.
Stories where a Okta product had a vulnerability or was attacked, or Okta itself was: 3 in total. Useful if you run its products.
UNC6671 uses vishing to steal SaaS data by tricking employees into spoofed login portals.
FBI-flagged Kali365 phishing kit expands from Microsoft 365 to AWS, Okta, and Russian platforms
| Type | Indicator | Story |
|---|---|---|
| malware | PowerShell scripts | UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data |
| malware | Python scripts | UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data |
| malware | Kali365 | FBI-Flagged Phishing Kit Kali365 Expands Its Reach |
| nordstrom@eml.nordstrom.com | Nordstrom's email system abused to send crypto scams to customers | |
| mitre_attack | T1566.002 | Nordstrom's email system abused to send crypto scams to customers |
| mitre_attack | T1621 | Nordstrom's email system abused to send crypto scams to customers |
Get an email when a reviewed story names Okta, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
