The AI Security Divergence: Okta Surges as Zscaler Stumbles

In the enterprise security world of 2026, the artificial intelligence boom is rapidly reshaping who wins and who gets left behind. I'm told that chief information security officers across Silicon Valley and beyond are fundamentally rethinking their tech stacks. They are demanding richer context and deeper integration to secure AI-driven applications. This matters because it is creating a stark divergence among the long-standing giants of cloud security, separating those who can adapt to the AI era from those who are struggling to maintain their momentum.

Take Zscaler (ZS.US), for example. For years, the company built a strong reputation as a leading zero-trust security platform, effectively guarding the perimeter of the cloud by strictly verifying user identities and locations. They were the undeniable darlings of the remote-work era. But recently, the narrative has drastically shifted. Following the abrupt departure of two senior sales executives in June 2026, management issued a surprisingly conservative revenue outlook for fiscal 2027, projecting annual recurring revenue growth to slow to the 16% to 17% range—even as they hit USD 3.5 billion in ARR for the third quarter. The market's reaction was swift and brutal, with the stock plunging roughly 30% in the aftermath.

More concerning than the executive turnover is the underlying technological shift. Analysts are increasingly pointing out that AI is actively testing Zscaler's moat. AI applications require deeper visibility into data contexts and complex application interactions. This means pure-play network security vendors might be at a disadvantage compared to platforms that have broader, native visibility into the enterprise environment. Zscaler is trying to plug these gaps, recently snapping up SquareX to bolster its browser detection solutions and partnering with Schwarz Digits for European sovereign cloud security, but the structural headwinds remain.

And yet, if you look across the aisle at identity and access management, the picture is remarkably different. Okta (OKTA.US) has been riding a massive wave of renewed optimism, with its stock surging roughly 90% over recent months. The primary catalyst? A re-acceleration in broad cloud computing demand directly fueled by enterprise AI adoption. In its fiscal first quarter of 2027, Okta reported a solid 11% year-over-year revenue increase to USD 765 million, while its remaining performance obligations jumped 16% to USD 4.71 billion.

But Okta isn't just resting on its financial laurels; the company is aggressively expanding its footprint to secure the very agents driving the AI revolution. In August 2026, Okta announced a definitive agreement to acquire cloud-native identity security platform Permiso Security. This is a critical move designed to integrate real-time threat detection with identity posture management, adding over 2,500 identity risk signals to its arsenal. They are essentially building an AI-secured identity fabric for employees, developers, and autonomous agents alike.

The truth, as usual, is more complicated than simply concluding that identity security is inherently superior to network security. Both companies are scrambling to acquire next-generation capabilities, and both are deeply embedded in the daily operations of thousands of enterprises. The real battleline in 2026 is about consolidation: security teams are exhausted by alert fatigue and are actively looking for vendors who can provide precise, context-rich alerts rather than just a barrage of raw network logs.

My view is that the era of the standalone security point solution is drawing to a rapid close. As AI necessitates broader visibility across the entire enterprise environment, companies that can secure the identity layer and connect it seamlessly to broader threat intelligence appear to have the upper hand. For vendors relying primarily on securing the network pipe, the pressure to radically evolve their platforms has never been higher. Good luck with that.

This article does not constitute investment advice.