--- title: "Okta's agent gateway still hasn't shipped; rivals enforce its own protocol" description: "Okta's AI-agent identity premium rests on a product that has not shipped: the Runtime Agent Gateway sits pre-GA while rivals Aembit and TrueFoundry already enforce Okta's own XAA protocol, and the stock has given back a fifth of its October high on no company news." publisher: "The Inference" section: "Platforms" published: 2026-10-21T15:24:50.635Z modified: 2026-10-21T15:24:50.635Z canonical: https://theinference.org/article/okta-s-agent-gateway-still-hasn-t-shipped-aembit-and-truefoundry-enforce-its-own-protocol language: en keywords: "Okta, AI Agents, Identity Security, Enterprise Software, Stocks" --- # Okta's agent gateway still hasn't shipped; rivals enforce its own protocol > Okta's AI-agent identity premium rests on a product that has not shipped: the Runtime Agent Gateway sits pre-GA while rivals Aembit and TrueFoundry already enforce Okta's own XAA protocol, and the stock has given back a fifth of its October high on no company news. At Oktane on September 22, [Okta](https://theinference.org/markets/companies/okta) declared three agent-identity products generally available: Agent SSO, Agent-to-Agent Connections and Resource Access Certifications [2]. The piece that actually stands between an AI agent and the tools it calls, the Runtime Agent Gateway, [stayed on the roadmap](https://siliconangle.com/2026/09/22/okta-adds-ai-agent-runtime-gateway-forms-blueprint-alliance-with-aws-and-crowdstrike/) [2]. The underlying APIs went to beta on September 16, and a third-party identity tracker found [no general availability release through October 7](https://forkast.news/okta-advances-agent-identity-framework-as-market-builds-around-pre-ga-standards/) [1]. The market, meanwhile, is not waiting. That same week, Aembit [launched enforcement of Okta's own Cross App Access (XAA) protocol](https://finance.yahoo.com/technology/ai/articles/aembit-launches-support-okta-cross-130100534.html) through its agentic-AI identity product, with CEO David Goldschlag pitching "a way to adopt XAA now without waiting for every system in their environment to support it natively," and TrueFoundry folded the protocol into its gateway on October 1 [4][1]. The market is building around Okta's rulebook without waiting for Okta's product. *Chart: **Okta's revenue growth has slid from 19% to under 11% across nine quarters** Line chart showing Okta's year-over-year quarterly revenue growth decelerating from 19.1% in the quarter ended April 2024 to 10.6% in the quarter ended July 2026.* *Okta's year-over-year quarterly revenue growth, percent, fiscal quarters ended April 2024 through July 2026, from its SEC filings. Source: SEC filings, retrieved October 21, 2026. [8]* ## The premium is the product that has not shipped That nuance became a money problem on October 16, when OKTA [fell 10.23% to $187.18 with no new filing](https://www.kavout.com/financial-agents/okta-s-11-selloff-exposes-a-multiple-problem-not-a-company-breakdown), no downgrade and no earnings release, leaving the stock about 19% below its October 9 closing high of $232.13 [5][3]. The move was sector-wide, but Okta's exposure is its multiple: roughly 47.5 times the midpoint of fiscal-2027 non-GAAP earnings guidance of $3.90 to $3.94, against revenue guidance of $3.216 billion to $3.226 billion, growth of 10% to 11% [3]. Six firms had [raised targets to $215-$240](https://247wallst.com/investing/2026/09/25/half-a-dozen-analysts-have-a-buy-signal-on-okta/) on the Oktane story days earlier, even as management repeated that agent revenue remains very small relative to the roughly $3 billion base and immaterial to fiscal 2027 [6][4]. The growth that carries the price is core identity: cRPO, contracted revenue due within twelve months, accelerated 200 basis points to 14%, and free cash flow ran $227 million at a 28% margin [4]. Insiders sold about $27.1 million of stock in the last 45 days with zero purchases, including CFO [Brett Tighe](https://theinference.org/markets/people/brett-tighe)'s 80,000 shares for roughly $12.9 million and CEO [Todd McKinnon](https://theinference.org/markets/people/todd-mckinnon)'s 48,822 shares for about $9.4 million [5]. Sales can be routine; 45 days of them with no buying is a position, whatever the reason [5]. ## Two outcomes, one quarter If Agent Gateway ships general availability and [the Q4 kill switch](https://theinference.org/article/wall-street-paid-205-a-share-for-okta-s-agent-kill-switch-it-ships-in-q4), revoking every active token a compromised agent holds through the Shared Signals Framework, the runtime layer stays inside Okta's walls [1][2]. The cRPO acceleration then defends 47.5 times into the Q3 print, expected in late November or early December, with [revenue guided to $813 million to $817 million](https://kalkine.com/news/technology/okta-nasdaqokta-stock-contracted-revenue-growth-accelerates-in-fiscal-2027) [5][7]. If Aembit and TrueFoundry capture runtime enforcement on Okta's protocol first, Okta owns the standard while rivals own the toll booth [1][4]. Either way, the gateway, not the guidance, is the product investors are paying for. ## Takeaway Okta's 47.5x premium leans on an agent story whose central product, the Runtime Agent Gateway, remains pre-GA while Aembit and TrueFoundry already enforce Okta's XAA protocol; cRPO acceleration and insider selling frame the Q3 print. ## Sources 1. [Forkast, Okta Advances Agent Identity Framework as Market Builds Around Pre-GA Standards, October 20, 2026](https://forkast.news/okta-advances-agent-identity-framework-as-market-builds-around-pre-ga-standards/) 2. [SiliconANGLE, Okta adds AI agent runtime gateway, forms Blueprint Alliance with AWS and CrowdStrike, September 22, 2026](https://siliconangle.com/2026/09/22/okta-adds-ai-agent-runtime-gateway-forms-blueprint-alliance-with-aws-and-crowdstrike/) 3. [Kavout, Okta's 11% Selloff Exposes a Multiple Problem, Not a Company Breakdown, October 18, 2026](https://www.kavout.com/financial-agents/okta-s-11-selloff-exposes-a-multiple-problem-not-a-company-breakdown) 4. [Aembit via Yahoo Finance/GlobeNewswire, Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents, September 22, 2026](https://finance.yahoo.com/technology/ai/articles/aembit-launches-support-okta-cross-130100534.html) 5. [Kavout, Okta's 11% Selloff Exposes a Multiple Problem, Not a Company Breakdown, October 18, 2026 (insider sales, reversal and valuation detail)](https://www.kavout.com/financial-agents/okta-s-11-selloff-exposes-a-multiple-problem-not-a-company-breakdown) 6. [24/7 Wall St., Half a Dozen Analysts Have a Buy Signal on Okta, September 25, 2026](https://247wallst.com/investing/2026/09/25/half-a-dozen-analysts-have-a-buy-signal-on-okta/) 7. [Kalkine, Okta (NASDAQ:OKTA) Stock: Contracted Revenue Growth Accelerates in Fiscal 2027, October 19, 2026](https://kalkine.com/news/technology/okta-nasdaqokta-stock-contracted-revenue-growth-accelerates-in-fiscal-2027) 8. [Okta quarterly figures from SEC filings, retrieved October 21, 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001660134) --- Okta's agent gateway still hasn't shipped; rivals enforce its own protocol — The Inference. Canonical: https://theinference.org/article/okta-s-agent-gateway-still-hasn-t-shipped-aembit-and-truefoundry-enforce-its-own-protocol