Earnings Labs

Okta, Inc. (OKTA)

Q2 2026 Earnings Call· Tue, Aug 26, 2025

$76.37

+0.30%

Key Takeaways · AI generated
AI summary not yet generated for this transcript. Generation in progress for older transcripts; check back soon, or browse the full transcript below.

Same-Day

+1.61%

1 Week

-1.90%

1 Month

-0.44%

vs S&P

-3.02%

Transcript

Dave Gennarelli

Operator

Welcome to Okta's second quarter fiscal 2026 earnings webcast. I'm Dave Gennarelli, Senior Vice President of Investor Relations at Okta. Presenting in today's meeting will be Todd McKinnon, our Chief Executive Officer and Co-founder, and Brett Tighe, our Chief Financial Officer. Eric Kelleher, our President and Chief Operating Officer, will join the Q&A portion of the meeting. At around the same time that the earnings press release hit the wire, we posted supplemental commentary to the IR website. Today's meeting will include forward-looking statements pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995, including but not limited to, statements regarding our financial outlook and market positioning. Forward-looking statements involve known and unknown risks and uncertainties that may cause our actual results, performance, or achievements to be materially different from those expressed or implied by the forward-looking statements. Forward-looking statements represent our management's beliefs and assumptions only as of the date made. Information on factors that could affect our financial results is included in our filings with the SEC from time to time, including the section titled Risk Factors in our previously filed Form 10-Q. In addition, during today's meeting, we will discuss non-GAAP financial measures. Though we may not state it explicitly during the meeting, all references to profitability are non-GAAP. These non-GAAP financial measures are in addition to and not a substitute for or superior to measures of financial performance prepared in accordance with GAAP. A reconciliation between GAAP and non-GAAP financial measures and a discussion of the limitations of using non-GAAP measures versus their closest GAAP equivalents are available in our earnings release. You can also find more detailed information in our supplemental financial materials, which include trended financial statements and key metrics posted on our Investor Relations website. In today's meeting, we will quote a number of numeric or growth changes as we discuss our financial performance, and unless otherwise noted, each such reference represents year-over-year comparison. And now I'd like to turn the meeting over to Todd McKinnon. Todd?

Todd McKinnon

Analyst

Thanks, Dave, and thank you everyone for joining us this afternoon. We are pleased to report solid Q2 results with continued strength with large customers, Auth0, new products, the public sector, and cash flow. We are seeing encouraging signals from our newly specialized go-to-market teams. And we're excited to build on this progress as we enter the second half of the year. Brett will cover more of the Q2 financial highlights, and I'll cover product innovation, securing AgenTik AI, and preview some of the innovations we'll be highlighting at Oktane next month. Now let's get into our Q2 results. Consistent with the past four quarters, new products, from Okta Identity Governance, Okta Privilege Access, and Okta Device Access to identity security posture management, identity threat protection with Okta AI, and fine-grained authorization had another strong quarter of contribution. Okta's unified identity platform is differentiated value to our customers. For example, a leading healthcare billing company chose Okta to rebuild and modernize its identity security practice from the ground up. They needed a single identity platform to unify workforce identity and scale with growth. Okta delivered OIG, OPA, ISPM, and ITP, supporting thousands of apps and integrations. By consolidating identity with Okta, this first-time buyer replaced a fragmented multi-vendor approach to implement a modern scalable identity security practice in one decisive move. In a move that we believe will further accelerate Okta privilege growth, I'm delighted to announce that we've signed a definitive agreement to acquire Acxiom Security, a modern PAM vendor. The team at Acxiom built complementary technology that helps organizations eliminate standing privileges and secure critical infrastructure, including key features for securing both human and nonhuman identities. Once we close the acquisition, which we anticipate will be later this quarter, we will support Acxiom's customer base while we work…

Brett Tighe

Analyst

My commentary will provide insights into our Q2 performance, and then move into our outlook for Q3 and FY 2026. Last quarter, we introduced some conservatism in our business outlook with regard to uncertainty in the macro and our federal vertical. I'm pleased to say that neither materialized and we're removing them from our outlook for the remainder of the fiscal year. While we're only two quarters into our go-to-market realignment, we're encouraged by the signals we're seeing, including improved sales productivity and record pipeline generation. This success echoes the long-term of our already specialized teams in areas like the US SMB market and public sector. The positive signals from Q2 give us great confidence that our increased specialization will drive long-term growth for both Okta and our customers. That's a nice segue into the strong Q2 performance we saw in our public sector business. While we did experience some contract restructuring with civilian agencies and delays in procurement processes, renewals across all of federal were strong, reflecting the mission-critical nature of our solutions. Okta continues to perform well with government organizations at all levels, highlighted this quarter by multiple new business and upsell deals with DOD and state agencies. Overall, five of our top 10 deals in Q2 were with the US public sector, including our biggest deal of the quarter, which was secured with a DOD. In that particular deal, the agency needed to replace an aging legacy log-on system while ensuring compliance with federal mandates on cybersecurity and zero trust. Working closely with our partners, the agency will be modernizing with Okta customer identity as a central component of their new access system. It's worth noting that about a year ago, we made the strategic decision to reinvest in Okta customer identity, and those efforts have led…

Dave Gennarelli

Operator

Thanks, Brett. I see that there's already quite a few hands raised, and I'll take them in order until the top of the hour. And in the interest of time, please limit yourself to one question. So with that, we'll get started with Brad Zelnick. Brad?

Brad Zelnick

Analyst

Great. Thank you so much. And video on. There we are. Congrats on a strong Q2. My question for you, Brett, great to see the NRR stabilize. I know in the past you talked about down-sell pressures subsiding into the back half of this year. And I just wanted to understand, you know, what other indicators might you look at as inputs into your guidance and the macro caveat that you've now removed this quarter. And does that still hold that as we proceed from here, we feel good that NRR should effectively, you know, have bottomed. Thank you.

Todd McKinnon

Analyst

Hey. Hey, Brad. Before Brett jumps in, maybe I could just make a high-level comment. I think we're very pleased with the execution. I think it was solid execution. And then looking forward, I think we're very excited about the strategy. Our strategy is to be the one-stop shop for identity. That's what customers want. They want fewer identity vendors. Some of these I work with a large one of the largest high-tech companies in the world, and they're replacing 50 identity vendors with Okta. So customers want to consolidate on they want on a single identity partner, and then they want to do it in a way that covers all of these different use cases. And in different you'll hear different variants of this across the call. But I think that's really what makes us so excited about the future and that our strategy is really working along with solid execution.

Brett Tighe

Analyst

And, Brad, you broke up for a second in the middle of your question. So you're asking around NRR and how it's trending, but you also said something around macro. Can you just clarify what you're saying? Well, I maybe

Brad Zelnick

Analyst

Incorrectly, but I think of those concepts going hand in hand in the past, you've talked about down-sell pressure alleviating come the back half of this year. We now see NRR having stabilized. Wanted to appreciate what other inputs you look to when you remove the macro caveat in your guidance going forward and if we can have confidence that, in fact, you know, 106% is a level from which can now re-expand. Thank you.

Brett Tighe

Analyst

Yeah. Absolutely. So so you know, I've said for a couple of quarters now, actually, a few quarters now, around the NRR effects of the macro being you know, impacting that NRR. And I was saying, you know, the last few years, you know, kind of the COVID cohort. I would say not having as much of an effect after the '26, and we still believe that to be the case. In terms of what we expected to be for the balance of the fiscal year, we still think, similar to what I said before, which was plus or minus a little bit from here. Just depending on the mix of business, whether there's more new business or more upsell in the quarter. So that's how we think about the NRR side. In terms of macro effect on the rest of the guidance in the earnings remarks today, you know, we've removed that because we clearly didn't see anything that was that differentiating in Q2. It seemed a lot more of the same from what we've over the last several quarters, and so that's what we think it's gonna be for the balance of the fiscal year.

Brad Zelnick

Analyst

Thanks for taking my question, and congrats again.

Todd McKinnon

Analyst

No problem.

Dave Gennarelli

Operator

Thanks, Brad. Next up is Matt Hedberg. Great. Thanks for taking my question, guys. I'll offer my congrats as well.

Matt Hedberg

Analyst

Solid execution, including the new product success. It's great to see. Todd, I had a question for you. You know, when we look at the AI native cohort, you know, how how are you are there any interesting adoption trends that you're seeing there in terms of, you know, what products they're taking? How they're using the platform, any consolidation trends. And, you know, is there any thought of some of the early AI natives from a DIY perspective? Just sort of curious on how those folks are approaching your platform.

Todd McKinnon

Analyst

It doesn't seem dramatically different than other cohorts. In terms of the adopting workforce solutions or Auth0. It looks pretty much the same, except they're growing very fast. I guess that's the difference, especially on the actually, the you know, the revenue metrics. It's growing very fast, and we think we're well positioned in that cohort. And I think similar to every company, they're trying to figure out how they can be secure internally they're growing very fast. I know from workforce identity and identity security perspective for their internal operations, they're, you know, they're sitting on a lot of very valuable data, and definitely hackers want them like they want to attack every important company. So they're really investing in identity security and helps them with that. And then in terms of building their products and how they're connecting with their customers, they want to obviously connect on the web and mobile channels, but also they want to all building AI agents themselves. So that's one of the customer every enterprise is being really they're to make these choices about how many AI agents they buy, who they buy them from, and all of these AI native companies are working hard to fill that void along Salesforce and Workday and more of the established companies and what it means for customers that are on the enterprises that are trying to adopt these great new coding tools or these great new business automation processes or even the agent building platforms. Is they have to figure it all out in a way that's has really high security implications. Like, everyone's heard this story of how big companies are doing simple AI chatbots, and then all of a sudden, confidential information is leaked because the AI chatbot leaked the wrong thing. So security implications, but at the same time, they see big business value and they're not really sure which platform to invest in. Of the things we're really focused on is trying to provide the right security for this agentic future, but also at the same time, them choice and flexibility as every new AI company is trying to give them an agent platform and a capability to build these things and have established vendors. It's pretty complex for these companies to figure out. So we're trying to help them through it all, but it's an interesting time out there. I think it's a good time to be an identity company, and we're really excited about where this is all going.

Matt Hedberg

Analyst

Great to hear. Thanks.

Dave Gennarelli

Operator

Next, we go to Eric Heath.

Eric Heath

Analyst

Thanks, David. Congrats, Todd and Brett. If I could ask one for Todd and one for Brett. I mean, Todd, you've always been very clear that identity should be its own independent standalone platform. But can you just elaborate a little bit more on comments of why you think that's critical for identity to be independent? And then Brad, if I could just on a modeling question, great. Very exciting deal with the DOD. The expansion deal. Just how should we think about that as it relates to RPO and CRPO and thinking about in the model going forward? Thanks.

Todd McKinnon

Analyst

Yeah. I think on the category of identity, back when a long time ago when I started Okta, it was like, would it be enough? You know? Could you build a big company around identity and know, at the time, it was like and identity was a part of another platform. And people didn't think it could be a big company. So over, you know, decade and a half since, very clear it's super important now. So now this new question is, like, should it be its own independent platform, or should it be part of another platform? And as you mentioned, we have a very strong worldview that it should be independent neutral, and it's really two reasons. The first reason is that there's it's too fragmented, and it's there's too many niche players, and there's too many legacy platforms. And it's too complicated for big companies. So in that sense, it has to consolidate. It's too complicated. It's holding companies back. I mentioned this one of the biggest technology companies in the world were helping upgrade all of their disparate identity platforms from SailPoint to CyberArk to HashiCorp to paying to ForgeRock they're consolidating them all in Okta. And the reason they're doing this is because two reasons. It's cost. It's expensive, and it's operationally challenging to keep all this stuff running. A lot of them are legacy platforms running in their own data centers or Amazon. The second reason is that it's preventing them from adopting the future. It's preventing them from rolling out more agentic work workflows, etcetera. So there's just the simple argument of cost and fragmentation. So now the second answer is, like, which and that could be true of any category. People, you know, people want in theory, fewer vendors and less operational costs for many categories, collaboration applications, security tools, etcetera, etcetera. So why should your point of consolidation be identity? And our answer is simple. It's because you can you know, like I mentioned before, you can save a lot of money, a lot of time, a lot of energy. And secondly, it's the one thing you can consolidate on and still preserve choice across everything else. So if you are adopting Microsoft Identity, you are making a decision that your first choice and your preferred vendor for everything else is gonna be Microsoft. Which could work for some companies, but gonna work for most companies, especially large companies. If you so that's the independence argument, and that's why we think when companies are and you see in the results, right, as 13% CRPO growth, and the success we're having across the board. We're seeing is that customers are showing this preference too. They want to consolidate. They want to pick the right points of consolidation. In our case, we're having the most products. The most modern products, the breadth of capabilities, the reliability, the security, it's resonating with them.

Brett Tighe

Analyst

And then, Eric, to answer your question, fairly simple. Like many other public sector deals, the RPO value and the current RPO value are gonna be the same because it's a one-year deal. So that's just how it works with a lot of the public sector.

Dave Gennarelli

Operator

K. Next up, we're gonna go to Brian Essex.

Brian Essex

Analyst

Great. Thanks. And, David, you say Eric Kelleher is on as well?

Eric Kelleher

Analyst

Yes. Yeah. Yeah. Alright. Awesome. So maybe for Hey, Emmy. It's good to see you, Brian. Yeah.

Brian Essex

Analyst

Good to see you too. So, you know, we met intra quarter. You gave us some great context of the evolution of the Salesforce, both a 100 farmer model, and a and the decision to specialize. Could you maybe, like, bring us up to date in terms of where that sales where each of those kind of specialization or specialized sales forces have evolved to. And, you know, how does that drive confidence and ability to you know, execute through the remainder of the year, both from a productivity as well as, you know, plans for hiring going forward.

Eric Kelleher

Analyst

Great question. Thanks, Brian. We feel very confident in where we are today. We said last quarter when we got together that we were very much on track for the expected impact and productivity impact of all the changes we made. To specialize on the Okta platform and the Azure platform. And in Q2, our results were very strong as well. As you can see, it's a solid quarter, and they reflect increased productivity from a specialization standpoint. So we remain optimistic and confident that this works. Again, this isn't the first time we've specialized and Brett talked about this in his opening comments. So our first real investment in specialization was for our public sector business, and you've heard us talk for many quarters now about strength in public sector and how that's been performing. Eighteen months ago, we implemented a hunter farmer special in the SMB space for North America. And we've seen that deliver. That group has had a very effective first half of this year. And so the change management and the change costs associated with that have really played out, and we're really pleased with productivity for that group in the organization. And our specialization for platforms now are third major wave of specialization. We feel good about as well. We saw productivity gains in Q2, which were in line with where we're hoping to get. And one of the metrics in our commentary we generated an all-time high for pipe. In Q2. And so that's partly attributed to the fact that we now have people specializing in our buyers, in our buyer personas. So we have people specializing in developer buyers and people specializing in IT and security buyers, and they're more effectively able to identify and qualify and prosecute leads and convert that into opportunity at the top of the funnel. So we're very pleased with progress so far.

Brian Essex

Analyst

Alright. Great color. Thank you so much.

Brett Tighe

Analyst

Hey, Brian. I would just add one thing to it here. Said, which is around what he was saying around the pipeline by source. We saw a nice growth in the quarter for pipe being created by AEs themselves. Right? And that really is attributed to the fact, like, what Eric was just saying. They know the products better. So if you allow them to specialize, they're gonna know it better, and they're and you're gonna see numbers like that. And so that's really a nice sign for us as an organization because it really so those positive feedback points that we feel like the things are working and headed in the right direction.

Brian Essex

Analyst

Right. You've been focused on channel productivity as well. Is that is that also improved? So sequentially? Are you getting kind of momentum there?

Brett Tighe

Analyst

Yeah. Yes. Absolutely. So we've 20 of the top 20 deals were all touched by a partner. And also from a pipe gen perspective, was also very in terms of the source where it was coming from, the partners, that also had very nice growth in the quarter. So you add all that up and you get, you know, record pipe gen. And nice results like we just had.

Brian Essex

Analyst

Good stuff. Congrats on the results. Thank you.

Eric Kelleher

Analyst

Thanks, Brian.

Dave Gennarelli

Operator

Next up is Josh Tilton.

Josh Tilton

Analyst

Thank you, guys. Since I have Todd, I'm gonna try and ask, a nerdy tech question, although I preface it with, I'm not a 100% sure I understand what I'm asking. I think investors are kinda trying to understand which piece of the identity puzzle is gonna the most from AI. And it sounds like you're buying you're making an acquisition because there's some pan pieces that are gonna help you secure AI. But then if you dig into cross-app access, it also looks like it's using tokens and protocols and stuff you use for SSO and MFA. So maybe, like, what is your view of which piece of this puzzle is really best positioned to benefit from an AI future? And then, just kinda more broadly, like, what is incremental to cross-app access that you're getting from this acquisition you just announced?

Todd McKinnon

Analyst

Yeah. Imagine, Josh, imagine how confused the buyers are. The market, like, when they're trying to buy all this stuff. And that's why that's why our and it's true. Right? And so they're all very excited about as we all are, technologists and business people and people that just observe the world of what what it could be possible with AI. But they're just inundated with this complexity of how you get the best products and what the right platform is and should you use or should you use Google, and should you use OpenAI? Like, what's the right thing to build? What's the right thing to buy? And our perspective is quite simple. It's that there you have many problems today in your enterprise. That are clear and present, and you can get a lot of security benefit by addressing these problems, these are their problems that we talk about a lot. These are service accounts. These are machine identities. These are putting the right vaulting and governance workflows around all of these things. These are like the bread and butter of our identity platform across governance and privilege access and identity threat protection with AI and the bread and butter of what we're talking. These are clear and present things today. In addition to that, every company is gonna make a huge investment in AI agents. And what that's gonna do first and foremost is it's going to make that problem I just described five times worse. Every agent wants to connect to 10 service accounts and is gonna have its own tokens. And so we are in this environment where people are very receptive to what we're saying because it's fundamentally understood that this is a problem they have today, and it's getting worse. I've had the…

Josh Tilton

Analyst

Actually, very helpful. So I appreciate the long response. Thank you. Yeah. Thanks. Thanks for the question, Josh.

Dave Gennarelli

Operator

Hey. Let's go to Greg Moskowitz.

Gregg Moskowitz

Analyst

Alright. Terrific. Thank you, guys. Congratulations on a really good quarter. Brett, I'm wondering if there was any change in upsell or cross-sell rates among SMB customers or enterprise customers. And then realize that it's still early days, but what are you seeing so far regarding demand for your new suites? Thank you.

Brett Tighe

Analyst

Yeah. I'll let Eric talk about where the suite side of the house, but an overall upsell, cross-sell perspective, it was fairly similar to what we've seen in the last few quarters. You've heard us talk about for several quarters now. The pipeline being more weighted toward upsell and cross-sell as opposed to new business. That continues to be the case. You see these bigger customers getting bigger as a result of that. Right? That's why you see the greater than 100k having a nice ad, and you see the greater million dollars. Almost 500. We're at four ninety-five, up 15% year over year. And so that upsell cross-sell continues to work, especially as you've heard Todd talk about. We keep adding all these new products into the mix depending on which side of the business you're on and ultimately helping us across the board there.

Eric Kelleher

Analyst

Yeah. On this the suites part of that question, and thanks, Greg, for the question. We're pleased with what we're seeing with suites. Again, we introduced suites for the Okta platform a few months ago. And it was in response to demand from customers who have bought into Okta's vision of the identity fabric. And these are companies that as Todd mentioned earlier are looking for, an identity partner that they can work with to help them solve all of their identity use cases, whether that's threat protection or security posture management, management, governance, privileged access. That is the secure identity fabric vision that Okta is bringing to customers. And what we found is our customers want easier ways to engage with us to get the security fabric for themselves. And the suites are really designed to do that. So they bundle pieces of the Okta portfolio help customers address these cases that are most compelling for them right now. But also give them room for where they're gonna grow on their roadmap as they go forward. We're pleased with what we've it's we're a few months in, so we're not breaking out numbers for suites for that packaging specifically. But we're seeing the impact we expected.

Todd McKinnon

Analyst

I think it's a I'll just add real quick. Just to give the group some really detailed color about what's going on. So we have a sales team now that's focused totally on selling the Okta products. And the opportunity there is big simply because the we have to make sure the customer understands the breadth of what we have. It's much broader than it was just a couple years ago. Just a couple days ago, I was on a call with a big federal agency and it's been a customer of Okta forever. But they really think of Okta as multi-factor authentication and just login. And they had no idea we have a We have identity threat protection. We have all these other products. That can help them be secure across the board and consolidate vendors, etcetera, etcetera. And their eyes just lit up, and the size of that deal potential just you know, probably tripled or more. So it's really about getting this message out there that this is possible. We have the best solution, most comprehensive solutions, modern solution. There is a better way. And that's why these things like suites or specialization dovetail right into that strategy that's working.

Eric Kelleher

Analyst

It's also a tie back to the conversation we've been having for a few quarters now around specialization. And one of the ration one of the reasons specialization to us was the winning strategy is we've seen on the product side of the business for both the Okta platform and the Azure platform. To Todd's point, our sales reps were having difficulty really articulating and evangelizing the full benefits of the entire portfolio, the entire security fabric to our customers. Specializing gives them more opportunity to get deeper. So whether it's identity threat protection or identity security posture management, Okta identity governance, Okta privileged access, fine-grained authorization, highly regulated identity, the products that have been coming out for both of these platforms and now Auth0 for AgenTek AI. These the our specialists are better able to get into the specifics of these technologies. For the specific use cases our customers are talking to us. That that's bringing us help. So the suites are helping with that from a design and purchase standpoint.

Gregg Moskowitz

Analyst

Great. Thank you, guys.

Dave Gennarelli

Operator

K. Next up, we have John DiFucci.

John DiFucci

Analyst

Thanks, Dave, and thanks, everybody. There's a lot of good information coming out tonight, especially like cross-app access, and it just demonstrates your leadership in the whole identity space, especially when you're able to contribute that to the whole ecosystem. But my question is for Brett, and it's a little more tactical, I think. Because otherwise, I know I'm gonna get we're all gonna get this question all day tomorrow. Brett, you said that this sort of I forget your exact words, but excess conservatism around the US Fed which was strong, and macro were no longer implied in your guide. I guess I just wanna make sure I understand what that means. Does it mean that we potentially won't the same amount of beats going forward? You sort of alluded to that in the past. And along the same lines, how long do you think the go-to-market changes in the that happened in fiscal one Q will present a potential headwind to your business momentum because that's still in the guide. Right?

Brett Tighe

Analyst

Absolutely. So, yes, we did remove that layer of prudence for macro going forward. And the primary reason is it didn't come to fruition like we thought it was going to the last time we spoke probably about ninety days ago, John. But so then to answer your second part of your question is, yes, the go-to-market specialization is still baked in there. Although we're seeing positive signs and positive feedback from the field, know, we're still a couple quarters in. As if you remember, when we first started talking to you all all all of you about this, it takes time for these things to come to fruition and really hit their full stride. We talked about US public sector. We've talked about US SMB. It's taking a little it takes some time. You have to be methodical in your approach. And then, yes, to your point, John, yes, we are trying to shoot for closer to the pen. We have historically that we started trying to do that. Last about three, four quarters ago. Yes. I've I I will admit that I was probably a bit a little wrong on the macro side. We delivered a really nice beat this quarter. But if you look ninety days ago, the world was a little different. So, I will take that charge yes, ultimately, we are trying to get a little closer to the pin than we have historically.

John DiFucci

Analyst

That's really helpful. Thank you, Brett.

Dave Gennarelli

Operator

And next up, we have Shrenik Kothari.

Shrenik Kothari

Analyst

Great. Thanks for taking my question. Congrats on the great quarter. Just on the cross-app access securing AI agent workflows, I know it's still early days to settle on any kind of pricing or monetization model to capitalize on this opportunity? Just if you can help expand on how you are viewing the monetization part for this. Is it gonna be embedded in the existing tiers? You highlighted the initial traction from your good, better, best suite or something you see evolving to stand alone? Just curious what are the earlier signs of feedback from like, Zoom or AWS or all these customers trying to start it out in terms of downstream. Enterprise security spending and plans on this one? Thanks.

Todd McKinnon

Analyst

Yeah. I would think of it this way. It's a really good question, and this is how I when we've talked about it and modeled it out, this is how we think about it. First of all, the cross-app access is an open industry standard. And if you if you were able to we were able to talk last year around Octane, we talked about this another new standard we've put out there and are working with all the identity companies on and a bunch of technology companies is called ip ipsy. So it's these are two open standards we're pushing out there with the ecosystem. And the effect of both of these things for Okta is gonna be basically identity providers are gonna be more valuable tools to their customers. So they're gonna have better control, better fine-grained control into resources, better policies, more value. So the whole identity market gets more valuable and bigger. And that so that's the way to think about these open standards. Now specifically on how Okta is gonna monetize these two layers I've talked about. I talked about the clear and present issue today, which is service accounts, nonhuman identities, We monetize that through Okta Privilege Access, identity security posture management. So identity security posture management detects the nonhuman identities and the risks in a proactive way that's comprehensive across all platforms. And Okta Privilege Access and Okta Identity Governance can vault the credentials and rotate the credentials and have the right governance workflows. And Acxiom, of course, is gonna add capability to Okta privileged access to have better support and more extensive support for database. So that's the monetization of the clear and present thing today. Affecting the results today. We talked about new products contribute healthily to the bookings, and that's true today. Now on top of that, in a world of AI agents, our belief is strong that you are gonna manage AI agents with your identity system. And so that's how we're gonna monetize that. You're gonna you when you put a bunch of AI agents inside Okta, you're gonna be more valuable from an identity security perspective and that we're gonna be able to have we're gonna be able to charge for that with our customers. So they're kinda separate things in two layers, but that's how we see the world unfolding. But it all is kinda predicated on a vibrant, healthy, growing AI agent ecosystem, which I think is there's a lot of different thoughts on how that exactly play out. But is the vendor gonna be? Who's the platform? SaaS vendors versus know, custom development, whatever. I think whatever happens, you're gonna need to manage this stuff. And that's why we're inserting ourselves on that dimension, and that's why we're very excited about where this is all going.

Shrenik Kothari

Analyst

Super helpful, Todd. Thanks a lot.

Dave Gennarelli

Operator

Next, let's go to Adam Borg.

Adam Borg

Analyst

Awesome. Thanks for taking the question. Maybe for Eric on the go-to-market changes, and you did talk about this a few minutes ago. In your answer to Brian, but where are we today with Salesforce productivity relative to historical levels? And I guess, what do you guys need to see in order to put more gas in the sales new hiring process, either in the back half of the year or ultimately as we head into fiscal twenty-seven? Thanks.

Eric Kelleher

Analyst

Yeah. You bet. We talked about at the end of last year based upon our first two rounds of specialization in public sector, and hunter farmer. I think it was in our Q4 results we talked about how we hit a multiyear high for sales productivity, and then we were leaning into the specialization work and reorienting our sales capacity and our supporting teams in presales and post sales and also our marketing generation teams. We as I mentioned earlier, we generated a record amount pipeline for us in Q2. So specialization is definitely helping at the top of the funnel. We're pleased with that. And I think from a sales productivity standpoint, we saw gains in Q2 as well. So we are we're very much on track with what we expected out of this model, and our guidance for the second half reflects that as well. But we're confident in the strategy of specializing on our buyers and our platforms.

Todd McKinnon

Analyst

One thing I'll add there is that our year is like a lot of enterprise companies, is back-end loaded. So in terms of that confidence and putting the investment level cranking the investment in terms of go-to-market and growth acceleration, etcetera, etcetera. A strong Q3, a strong Q4, is worth more than a strong Q1 and a strong Q2. That's just the nature of the numbers and how they play out. And so as we go through the rest of the year, we're looking to build on the strength and get super confident exiting this year and going into next year.

Adam Borg

Analyst

Thanks again.

Dave Gennarelli

Operator

K. Thanks for the question, Adam. Sorry, Nick. Thanks. Thanks, Dave. And thanks everyone for, for the time here. I just wanted to

Mike Cikos

Analyst

Cycle back on some of the different dimensions here for public sector. I know that you guys spoke about, hey. There was some restructuring standpoint for some of these civilian contracts. But first, is it is it fair to assume then the Q2 played out better than what you initially anticipated? And then secondly, with the removal of some of that conservatism we had previously introduced to the guide, are we now just operating in a more normalized buying environment or are you guys just executing better than planned? Any detail on the pub sec front from that standpoint would be beneficial. Thank you.

Todd McKinnon

Analyst

I'm gonna have a was gonna say, like, three months ago, it was there was a lot of uncertainty in public sector. You had massive government layoffs. And you had a lot of people talking about a lot of dramatic changes. And I think in the quarter, what we saw is that there were some contracts that were paused or restructured, but what we also saw is that the overwhelming balance of the business was super positive, and the impact on some of those government spending efforts know, didn't materialize in a negative way. So I think that's just a different different we've gotten through some of that uncertainty, and it settled down a bit. And what we're seeing is that the technology we provide is pretty critical and pretty strategic. And by the way, government, particularly the federal government, has a huge need for it. They have legacy systems. Identity in the federal government often means some massive outsourced operation run by a big contractor. And this concept of a modern purpose-built identity security is just amazing for them. So the fundamentals are winning out there in terms of in some of the short-term uncertainty, I think, was a little we, you know, we overestimated that.

Brett Tighe

Analyst

Yeah. And you see that in some of the structures of the deal, Mike. So I talked about earlier about and Todd just said, some of the contract restructuring. What that would look like is in some cases, oh, we don't have as many users as we used to because I think we all know that there's been a few layoffs in the government. But then at the same time, there's an upsell that goes along with it for new products that they're not previously using. So we end up in a good place just maybe we don't get as much of an upsell because ultimately, there's less users on the other side because there's less employees in the federal government now. So that's what we mean by CrowdStructure. It's actually not a bad thing. It's actually them being more ingrained with Okta, and we look at that as a positive as usually, more products you're on, the higher the renewal rates and the higher upsell rates. We get over time.

Mike Cikos

Analyst

Thank you, guys.

Dave Gennarelli

Operator

And let's go to Andy Nowinski.

Andy Nowinski

Analyst

Great. Thank you so much for taking the question and a nice quarter as well. You know, Todd, I know Auth0 has been doing exceptionally well, and you've got you have a great pipeline on Auth0, given all the new AI products coming out. But I wanted to ask a question maybe about your workforce ACV. You know, we continue to hear how customers want to consolidate identity vendors and how they want know, workforce products like IGA and PAM and SSO all on a single platform, which you guys have. But my question is why hasn't that sort of thirst for a complete platform had more of a positive impact on your workforce ACV growth, which has been decelerating over the last twelve months. Just wondering how you're thinking about sort of your bread and butter workforce ACV going forward.

Todd McKinnon

Analyst

I think we're gonna do better there. I think the market is big. I think the opportunity's substantial, and I think we're doing a better job of explaining to customers what we have and getting the message out and getting real proof points with customers live at scale. And by the way, that's one of the real strengths of our product suite. Particularly in the identity governance space. Our average customer is live with multiple resources in thirty days. And that's unheard of for a SailPoint implementation. It's legacy software. It's pretty heavyweight to deploy. It's hard to get successful with, and as those stories get out there of proof points of customers, getting live with multiple applications and bringing stuff into the management bringing resources into the management framework, it starts to resonate. And I think that's one of the reasons why we specialize in Salesforce to be more effective there. It's one of the reasons why we're investing heavily in the R&D for these new products to make sure they're fully featured, particularly upmarket. That's why we're excited about the Acxiom acquisition and many other efforts. And like I said before, we're building the best team in identity. So if anyone is world-class and wants to work on identity, they should come work for us.

Eric Kelleher

Analyst

Another thing I would add to that is coming back to the overall vision of the security fabric we've talked about and how to consolidate use cases on a platform. Todd talked about one, a he's working with, one of the world's largest technology companies and consolidating 50 different identity systems onto Okta. Well, I'm we're I'm from the CIOs and CSOs that I'm talking to at the accounts that I work with. What I'm really hearing is that having such a disparate framework isn't just expensive. It's also it also adds complexity, which adds fragility. Which creates security holes. And so part of the part of the value in our customer's mind of consolidating use cases with the trusted identity provider is they can have confidence in how they administer the product, how they administer the platform, and knowing that they can they can have secure identity across all of these use cases. So that's an added value and something that we've seen more and more from from our customers as we kind of seen seen the wave in industry ride from cloud enablement and how identity is necessary to help people move to the cloud, into this phase of security and how help companies secure identity. And now as we look forward to AgenTek AI again as gonna be even more important for our customers to make sure that they've got a partner that they can work with.

Andy Nowinski

Analyst

Thank you.

Dave Gennarelli

Operator

Okay. Next up, we'll go to Jonathan Ho.

Jonathan Ho

Analyst

Yeah. Thanks, David. So I think, Todd, this is probably for you. I'm curious if you would agree with the view that has been articulated by other industry participants that PAM capabilities can be delivered to all employees at a cost comparable to IA. And that I think when, you know, when you look at the growing need for cloud-native, just-in-time ephemeral you know, to support agentic and machine identities. Maybe help us understand that does Acxiom potentially fit into that thesis that yes PAM can be deployed more broadly and cost-effectively both across human and nonhuman identities? What's your strategy along those lines?

Todd McKinnon

Analyst

Yeah. Every identity type employees, partners, customers, every resource. So database, cloud infrastructure, servers, Kubernetes containers, every resource in machines, in the environment, and then every use case. So privileged access workflows, identity governance, attestation reporting, like the core access management workflows around creating accounts and removing accounts. So that's what we're building. So it's comprehensive. It's complete. And I do agree. I think I do think that you want every employee to have a really locked down, secure identity experience. And that's why we have the world's leading authenticator phishing-resistant authenticator called FastPass, which is employed by, you know, quite a significant number of our customers and has been over the last five years. It's why it's so important to have these different pieces together. So I think that's very important. And I think one of the things that's also very important is I talk to customers. I was talking with a chief security officer of a big beverage company just two weeks ago, and their whole thing was you know, they want to make sure that their identity provider works with all of their security tools. So it's in divisions and companies they bought. They have SentinelOne. They have CrowdStrike. They have legacy technology for endpoint. They have Wiz. They have Zscaler. They have Palo Alto Networks. And his plea to me was he said, Todd, I need to consolidate something. I can't consolidate all my security stuff. It's too disparate. But I can consolidate identity, but you have to make sure it connects to all this stuff. And make sure it connects to Zscaler. Make sure it connects to Palo Alto network. Make sure it connects to Microsoft's network security. And I said, that's what we do. Connect you to everything. So that's I think that's the one in formula.

Jonathan Ho

Analyst

Helpful. Thank you.

Dave Gennarelli

Operator

Next up is Rob Owens. Rob.

Rob Owens

Analyst

Thanks, Dave, and good afternoon, everybody. Actually, it's exactly what I was gonna ask, so I'll shift to a more Brett-focused RPO, CRPO question, I guess. But if I look at the last couple years just in the RPO acceleration that you guys have seen, number one. Yep. Number two, you've talked about constant duration as well. But over that same time, you know, CRPO has been trending down. It's finding a bottom here. But at what point do we see a better marriage, I guess, between prior RPO growth and forward CRPO growth? And maybe you can weave into that just what you're seeing from a retention rate perspective. Terms of GRR. Thanks. Yeah.

Brett Tighe

Analyst

So you're talking about last year, saw RPO outpace CRPO. Right? Is that what you're talking about? It's for a couple of years, you've seen that acceleration.

Rob Owens

Analyst

Yeah. Exactly. RPO. And if it's constant duration, it feels like that should come through on the CRPO, but, you know, that's not in your guide. And I think a lot of us had looked for maybe some of those headwinds to abate here in the second half. Have been holding down NRR potentially, you know, providing a lift to CRPO, especially as you're talking about your success with cross-selling and upselling?

Brett Tighe

Analyst

Yeah. Absolutely. So when I've said the constant duration, I meant the duration of the amount in current RPO. You know, because you don't have a twelve-month value. In current RPO at all times. That's just how it works. Mhmm. In terms of duration of contracts that we're signing, if you remember in FY 2025, we went back to incenting the field on contract duration as part of their compensation plan. The prior couple years, we hadn't done that. And you saw RPO go up in a big way because contract duration went up in a big way. Right? If you look at this year, contract duration is still in their comp plan. Right? And it's still a component that we pay them on. And so you're seeing more of a normalization. We see contract duration in the first half slightly ticking up, but it's not gonna have the effect like it did last year because it's coming off of a different base, if you will, Rob. So, hopefully, that answers your question around current RPO and total RPO and the dynamics in between those. Because it's, you know, it's a simple it's a simple sales comp model. That's all it really is.

Rob Owens

Analyst

Any broader comments on GRR?

Brett Tighe

Analyst

Yeah. We tend to continue to have that be a strong number for us. So it's been it's been healthy. It's been one of those things. It's a hallmark of this company that for years, it's been it's been healthy. And it continues to be so, at least through the '26. And we're looking forward to some solid results as we finish out the fiscal year.

Rob Owens

Analyst

Alright. Thank you.

Brett Tighe

Analyst

No problem. Thanks, Rob.

Dave Gennarelli

Operator

We were coming up on the hour, but let's try to get questions in from Annick and Gabriela. Annick Baumann, go ahead.

Annick Baumann

Analyst

Hey, guys. I'm on for Joe Gallo here. Brett, any verticals beyond federal? Because we've talked about that a lot. Or geos, if strength or weakness to call out in two Q. And then, Todd, can you just talk us through the key to unlocking the international market? Seems like an incredible opportunity relative to what you've built in the US today.

Brett Tighe

Analyst

Yeah. I would say larger customers. So enterprise in general and it had a really nice quarter. So we're feeling solid about that. That's been actually pretty consistent for a while now. You know, there's we've talked about bigger customers getting bigger, and that's why we see enterprise doing well. But I'll let Eric comment a little bit on that because I know he's it's near and dear to his heart on that topic.

Eric Kelleher

Analyst

Yeah. We continue to see strength in, upmarket in large customers. I would agree with that focus. And we talked about updated stats in our customers above a 100k and customers above a million dollars in ACP spend. Continue to be growing at high rates. And again, then it reflects what we see as the industry trend of the importance of investing in security. We look now at cyber events worldwide and over 80% of them are start with some form of compromised identity. Customers, CIOs, and CSOs are coming to us to help them build the partnership they need our expanded product portfolio. So we continue to see great success there.

Todd McKinnon

Analyst

And on the international question, we have a big opportunity. In international, and our strategy there is really to invest in our top 10 countries and invest make sure we fully do everything we need to make those successful and get those to grow to their potential because versus spreading ourselves too thinly. So we're gonna continue to really prioritize our countries, our 10 countries, ruthlessly and invest to make those successful because we do think the opportunity is quite substantial.

Annick Baumann

Analyst

Makes sense. Thanks, guys.

Dave Gennarelli

Operator

K. Last question from Gabriela Borges.

Gabriela Borges

Analyst

Hey. Thank you. For Todd and for Eric, I wanna explore this idea of security and identity in the convergence of it. Give us a little bit of an update on where you're seeing progress with the go-to-market, specifically with security buyers in the enterprise? And the reason I'm asking now is, Todd, you mentioned not expecting to see a change in the competitive landscape because of Palo Alto. Is really good at driving of strategic conversations at the top of the house with CSOs. So maybe just an update on how you're progressing on Please push back against my

Todd McKinnon

Analyst

Yeah. I think it's a question of it's a question of the capabilities of the products you're offering. And I think where a security vendor is gonna struggle is the breadth of identity types first of all. The breadth of use cases that can support across those identity types. Because what we still see, it's not a it's very influenced by security, but it's still more than a security conversation. A lot of the identity management products, particularly governance, are they're operationally they operationally help the companies in terms of being more efficient and passing compliance audits, etcetera. I was talking to chief information officer of a global auto company just a couple days ago, and they she was talking about I was talking to her about cyber, and she goes, yeah. Of course. Identity is a cyber thing, but it's really about we want visibility into what people are using so we know how much we spend on all these things. We want to make sure we automate these workflows that are slowing people down. So although the while the security voice is very important, I think it's still it's not still purely a security sell, which I think is bit different for some of these security companies. I think ultimately, Gabriela, it kinda comes down to having the products and you have to have a broad range of identity types and use cases. And resources to really serve this concept that these customers want.

Gabriela Borges

Analyst

Thank you for the Okay. Well, apologies for not getting to all the questions today. Is the top of the hour. But before you go, just wanna let you know that in addition to hosting on-site and virtual bus tours this quarter, we'll be attending the Citi TMT conference on September 3 in New York, the Goldman Sachs Conference on September 9 in Francisco, Piper conference in Nashville on September 10, and the JPMorgan Software Conference on October 8 in Napa. So we hope to see you at one of those events. Thank you.

Dave Gennarelli

Operator

Thanks, everyone. Bye, everyone.