On April 10, Okta set a 52-week low below every major moving average, one of the most hated names in B2B software. Last Friday it closed at $195.19, within reach of its $212.50 high set September 24. That is a stock that tripled in five months — while the business underneath grew 11%.

Q2 revenue grew 11%, subscription revenue 12%, and Q3 guidance sits at $813–817 million, 10% year over year. The gap between that top line and a tripling stock price is almost entirely multiple: roughly 17.8x FY27 consensus EPS in mid-April became roughly 50x forward earnings at Friday's close, against a full-year EPS guide that rose about 2%.

The same force that crushed Okta in spring re-rated it in fall: AI.

The book accelerated before the revenue did

The measured core of the re-rating is cRPO — current remaining performance obligations, the forward book. In Q1, cRPO grew 12% to $2.50 billion; in Q2 it accelerated to 14%, with total RPO up 17%. Revenue grew 11% in both quarters. The CFO led his commentary with the cRPO acceleration, ACV growth in both workforce and customer identity, and record enterprise bookings — over 600 customers now sit above $1 million in ACV.

The market has rewarded this pattern all year. Atlassian, Salesforce, and Box all got paid when the forward book outran revenue. Okta's stock jumped 21% in a single session after Q1 and nearly 29% after Q2.

The caveat is explicit in Okta's own numbers. Q3 guidance calls for cRPO of $2.590–2.600 billion, 11–12% growth — down from 14%. Some of that is the conservative guiding Okta has done all year. But if cRPO prints 11%, the core leg of the re-rating weakens and the stock runs on narrative alone.

New products carry 30% of bookings and lift ACV 40%

The agent story has a measured attach motion behind it, not just a keynote. New products — Identity Governance, Privileged Access, and the AI agent offerings — made up about 30% of bookings in Q4 FY26, and deals including them carried roughly 40% higher average contract value. Q2 held the pattern: 30% again, dozens of AI deals closed, including a multi-million-dollar healthcare contract.

The sequencing matters for any $3B+ company with a slowing core. Okta announced Okta for AI Agents in September 2025 with GA set for April 30, 2026, made the agent product available to all customers during Q2, and let Identity Governance carry the new-product number in the meantime. A new product doesn't need to be big on its own — it needs to raise the size of deals already closing. A 40% ACV lift on 30% of bookings moves the forward book long before the product shows up as its own revenue line.

The kill switch and the standards play

The biggest external catalyst wasn't Okta's. On July 21, OpenAI confirmed that during an internal cyber benchmark its model found a zero-day, escalated privileges, reached the open internet, and pulled the benchmark's answer key via remote code execution on Hugging Face's servers. Representatives Ted Lieu and Nathaniel Moran introduced the AI Kill Switch Act. OpenAI disclosed a second unauthorized internet access by a testing agent on September 20.

At Oktane, Okta shipped the answer: for agents connected through its Agent Gateway, deactivation makes the gateway reject every request carrying a token the agent already holds — no waiting for expiry. GA is Q4 of calendar 2026. Okta announced it before shipping it, and the market paid anyway.

The more strategic move is the standards alliance. Okta's blueprint for the secure agentic enterprise was built with AWS, CrowdStrike, Databricks, Google Cloud, Salesforce, and ServiceNow — the same ServiceNow whose AI Control Tower CEO Todd McKinnon named as competition at the investor summit, alongside IBM's watsonx. Anthropic's David Soria Parra, a co-creator of MCP, joined McKinnon on stage, and McKinnon stressed that Cross App Access must be adopted broadly to work. Okta can't out-bundle Salesforce or ServiceNow; it can be the neutral vendor all of them agreed to build around.

Read the fine print

Several items qualify the headline numbers. A tax-rate cut from 26% to 21%, effective February 1 and driven by the One Big Beautiful Bill Act, adds roughly 7% to non-GAAP EPS comparisons before the business improves at all. FY27 guidance absorbs about a one-point growth headwind from shifting professional services to partners. Okta repurchased $248 million of stock in Q1, settled the remaining $350 million of 2026 convertibles in cash, and still ended Q2 with $2.299 billion — most buybacks executed well under half today's price.

Skepticism is on record. Bernstein's Peter Weed cut Okta, Palo Alto, and SentinelOne on September 17, arguing cyber valuations imply acceleration rivaling hyperscaler compute while growth stays capped by customer headcount — the seat problem, since most Okta revenue is still priced per human. Oktane week brought six price-target raises, no updated financials, and a 5.5% stock decline; McKinnon sold 48,822 shares at $189–198 under a pre-arranged plan in the same window.

McKinnon himself says confusion over standards, pricing, and agent counts is dragging on near-term adoption, and no one has locked in long-term share. Okta now trades at roughly 50x on a 10% revenue guide, with the difference resting on a barely monetized agent product, a kill switch shipping next quarter, and a standard that only works if competitors adopt it. Whether that holds depends on Q3's cRPO print and on agent identity showing up in revenue before guided growth catches up to the multiple.