Okta, Inc.

1. Overview and Basis of Presentation

Description of Business

Okta, Inc. (the “Company”) is the leading independent identity partner. The Company’s Okta Platform and Auth0 Platform enable customers to securely connect the right people to the right technologies and services at the right time. Employees and contractors sign into the Okta Platform to seamlessly and securely access the applications they need to do their most important work with more modern and secure experiences in the cloud and via mobile devices. Developers leverage the Okta Platform and Auth0 Platform to securely and efficiently embed identity into the software they build, allowing them to innovate and focus on their core mission. The Company is headquartered in San Francisco, California.

Basis of Presentation and Principles of Consolidation

The accompanying unaudited condensed consolidated financial statements, which include the accounts of the Company and its wholly owned subsidiaries, have been prepared in conformity with accounting principles generally accepted in the United States of America (“GAAP”) for interim periods. Accordingly, they do not include all of the financial information and footnotes required by GAAP for complete financial statements. All intercompany balances and transactions have been eliminated in consolidation.

The condensed consolidated balance sheet as of January 31, 2025, included herein, was derived from the audited financial statements as of that date. In the opinion of the Company’s management, the unaudited condensed consolidated financial statements reflect all normal recurring adjustments necessary for a fair statement of the results of operations for the interim periods presented but are not necessarily indicative of the results of operations to be anticipated for the full fiscal year ending January 31, 2026 or any future period.

The Company’s fiscal year ends on January 31. References to fiscal 2026, for example, refer to the fiscal year ending January 31, 2026.

Certain prior period amounts have been reclassified to conform to the current period presentation.

The condensed consolidated financial statements should be read in conjunction with the audited consolidated financial statements and notes included in the Company’s Annual Report on Form 10-K filed with the Securities and Exchange Commission (“SEC”) on March 5, 2025.

Segments

The Company conducts business globally and is managed, operated and organized by major functional departments that operate on a consolidated basis. As a result, the Company operates asone reportable segment. The Company employs a SaaS business model and generates revenue primarily by selling multi-year subscriptions to its cloud-based offerings.

The Company’s chief operating decision maker ("CODM") is the chief executive officer. The CODM utilizes consolidated GAAP and non-GAAP measures of profit and loss to evaluate the Company's overall performance and inform resource allocation to support strategic priorities and capital allocation needs. The profit and loss measure most consistent with GAAP used by the CODM is consolidated net income.

The CODM is regularly provided with budgeted expense information and consolidated expense data. Accordingly, significant segment expenses are inherently reflected in the condensed consolidated financial statements and related notes.

Use of Estimates

The preparation of condensed consolidated financial statements in conformity with GAAP requires estimates, judgments and assumptions that affect the reported amounts of assets and liabilities, disclosure of contingent assets and liabilities at the date of the condensed consolidated financial statements and the reported amounts of revenue and expenses during the reporting period. Estimates are based on historical experience and on other assumptions that management believes are reasonable under the circumstances. Actual results could vary from those estimates. The Company’s most significant estimates include the valuation of deferred income tax assets,

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS

uncertain tax positions, assets and liabilities acquired in business combinations and loss contingencies related to litigation.

2. Accounting Standards and Significant Accounting Policies

Significant Accounting Policies

For a summary of the Company’s significant accounting policies refer to “Note 2. Summary of Significant Accounting Policies” of its Annual Report on Form 10-K for the fiscal year ended January 31, 2025.

Recent Accounting Pronouncements Not Yet Adopted

In December 2023, the FASB issued guidance to provide disaggregated income tax disclosures on the rate reconciliation and income taxes paid. This guidance is effective for annual periods beginning after December 15, 2024, with early adoption permitted. The Company intends to adopt this guidance in its Annual Report on Form 10-K for the year ended January 31, 2026 and expects the adoption of the updated guidance to result in disclosure of additional disaggregated tax information.

In November 2024, the FASB issued guidance requiring the disclosure, in the notes to financial statements, of specified disaggregated income statement expense information. This guidance is effective for annual periods beginning after December 15, 2026, and interim reporting periods beginning after December 15, 2027, with early adoption permitted. The Company is currently evaluating the impact of this guidance.

In September 2025, the FASB issued guidance to modernize the accounting for internal-use software costs to current development practices, clarifying when to begin capitalizing costs, and enhancing disclosure requirements. This guidance is effective for annual periods beginning after December 15, 2027, and interim reporting periods within those annual periods, with early adoption permitted. Entities can adopt the new standard using a prospective, modified, or retrospective transition approach. The Company is currently evaluating the impact of adopting this guidance, including the timing of adoption (early or standard) and the selection of an appropriate transition method.

3. Cash Equivalents and Investments

Cash Equivalents and Short-term Investments

In estimating fair value, the Company uses a three-tier fair value hierarchy as follows:

•Level 1 — Valuations based on observable inputs that reflect quoted prices for identical assets or liabilities in active markets.

•Level 2 — Valuations based on other inputs that are directly or indirectly observable in the marketplace.

•Level 3 — Valuations based on unobservable inputs that are supported by little or no market activity.

The following tables present the estimated fair value of cash equivalents and short-term investments:

The following table presents the contractual maturities of the Company’s short-term investments:

Interest receivable of $22 million and $24 million is included in Prepaid expenses and other current assets on the condensed consolidated balance sheets as of October 31, 2025 and January 31, 2025, respectively.

There were no material differences between the estimated fair value and amortized cost of our cash equivalents and short-term investments as of October 31, 2025 and January 31, 2025.

For available-for-sale debt securities that have unrealized losses, there were no material credit or non-credit related impairments for short-term investments as of October 31, 2025 and January 31, 2025.

Strategic Investments

Strategic investments primarily include equity investments in privately-held companies, which do not have a readily determinable fair value. Strategic investments are classified as Level 3 in the fair value hierarchy as nonrecurring fair value measurements may include observable and unobservable inputs. As of October 31, 2025 and January 31, 2025, the balance of strategic investments was $32 million and $30 million, respectively.

4. Deferred Commissions

Sales commissions capitalized as contract costs totaled $58 million and $37 million for the three months ended October 31, 2025 and 2024, respectively, and $138 million and $97 million for the nine months ended October 31, 2025 and 2024, respectively.

Amortization of contract costs totaled $41 million and $33 million for the three months ended October 31, 2025 and 2024, respectively, and $117 million and $95 million for the nine months ended October 31, 2025 and 2024, respectively.

5. Deferred Revenue and Performance Obligations

Deferred Revenue

Deferred revenue, which is a contract liability, consists primarily of payments received and accounts receivable recorded in advance of revenue recognition under the Company’s contracts with customers and is recognized as the revenue recognition criteria are met.

Subscription revenue recognized during the three months ended October 31, 2025 and 2024 that was included in the deferred revenue balances at the beginning of the respective periods was $665 million and $597 million, respectively, and $1,495 million and $1,312 million in the nine months ended October 31, 2025 and 2024, respectively.

Transaction Price Allocated to the Remaining Performance Obligations

Transaction price allocated to the remaining performance obligations (“RPO”) represents all future, non-cancelable contracted revenue that has not yet been recognized, inclusive of deferred revenue that has been invoiced and non-cancelable amounts that will be invoiced and recognized as revenue in future periods.

Total remaining non-cancelable performance obligations under subscription contracts with customers was approximately $4,292 million as of October 31, 2025. Of this amount, the Company expects to recognize revenue of approximately $2,328 million, or 54%, over the next 12 months, with the balance to be recognized as revenue thereafter.

6. Convertible Senior Notes, Net

Convertible Senior Notes

The 2025 convertible senior notes (“2025 Notes”) and the 2026 convertible senior notes (“2026 Notes” and together with the 2025 Notes, the “Notes”) are recorded at face value less unamortized debt issuance costs. As of October 31, 2025, the 2026 Notes are classified as current liabilities due to their upcoming maturity on June 15, 2026. The 2025 Notes matured on September 1, 2025, and the Company settled the full remaining $510 million principal amount outstanding in cash.

Fair Value Measurements

As of October 31, 2025, the estimated fair value of the 2026 Notes, which are not recorded at fair value on the condensed consolidated balance sheets, was $341 million.

The estimated fair value of the 2026 Notes, which are Level 2 financial instruments, was determined based on the quoted bid prices of the 2026 Notes in an over-the-counter market on the last available trading day of the reporting period.

7. Commitments and Contingencies

Letters of Credit

In conjunction with the execution of certain office space operating leases, letters of credit in the aggregate amount of $5 million and $6 million were issued and outstanding as of October 31, 2025 and January 31, 2025, respectively. No draws have been made under such letters of credit.

Legal Matters

From time to time in the normal course of business, the Company may be subject to various legal matters such as threatened or pending claims or proceedings.

On May 20, 2022, a purported shareholder filed a putative class action lawsuit in the United States District Court for the Northern District of California against the Company and certain of its executive officers, captioned In re Okta, Inc. Securities Litigation, No. 3:22-cv-02990. The lawsuit asserted claims under Sections 10(b) and 20(a) of the Securities Exchange Act of 1934, alleging that the defendants made false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches and the Company’s integration of Auth0, Inc. (“Auth0”). The lawsuit sought an order certifying the lawsuit as a class action and unspecified damages. The defendants moved to dismiss the amended complaint. On March 31, 2023, the court dismissed in full the claims based on the plaintiff’s allegations related to the Company’s cybersecurity controls and vulnerability to data breaches, and dismissed in part and denied in part the claims based on allegations related to the Auth0 integration. On May 28, 2024, the parties entered into a stipulation of settlement (the “Stipulation”) where, in exchange for the release and dismissal with prejudice of all claims, the Company agreed to pay and/or to cause its insurance carriers to pay a total of $60 million, which is covered through a combination of the Company’s Director & Officer (“D&O”) insurance and the balance of the Company’s $10 million retention on the primary D&O policy. The Stipulation does not constitute an admission of fault or wrongdoing by the Company or its executives. On November 19, 2024, the court granted final approval of the Stipulation and dismissed the lawsuit in its entirety, with prejudice.

Additionally, two purported shareholders filed derivative lawsuits on behalf of the Company in the United States District Court for the Northern District of California against certain of its current and former executive officers and directors, captioned O’Dell v. McKinnon et al., No. 3:22-cv-07480 (filed Nov. 28, 2022) and LR Trust v. McKinnon et al., No. 3:22-cv-08627 (filed Dec. 13, 2022) (together, the “California Federal Derivative Actions”). The California Federal Derivative Actions allege, among other things, that the defendants breached their fiduciary duties by making false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches and the Company’s integration of Auth0. The California Federal Derivative Actions seek orders permitting the plaintiffs to maintain the actions derivatively on behalf of the Company, awarding unspecified damages allegedly sustained by the Company, awarding restitution from the individual defendants and requiring the Company to make certain reforms to its corporate governance and controls. On February 22, 2023, the court entered a stipulated order consolidating the California Federal Derivative Actions, appointing co-lead counsel for plaintiffs and staying the consolidated California Federal Derivative Actions during the pendency of the motion to dismiss in the securities class action lawsuit. The consolidated California Federal Derivative Actions are captioned In re Okta, Inc. Stockholder Derivative Litigation, No. 3:22-cv-07480. On May 9, 2023, the court entered a stipulated order continuing the stay through the close of discovery in the securities class action lawsuit and, on January 27, 2025, the court entered an order continuing the stay.

On April 14, 2023, another shareholder filed a substantially similar derivative lawsuit in the United States District Court for the District of Delaware against certain of the Company’s current and former executive officers and directors, captioned Buono v. McKinnon et al., No. 1:23-cv-00413 (the “Buono Action”). On May 31, 2023, the court entered a stipulated order whereby the defendants agreed to accept service and stay the Buono Action through the close of discovery in the securities class action lawsuit.

On January 25, 2024, another shareholder filed a substantially similar derivative lawsuit in the United States District Court for the District of Delaware against certain of the Company’s current and former executive officers and directors, captioned Nasr v. McKinnon, et al., No. 1:24-cv-00106 (together with the Buono Action, the “Delaware Federal Derivative Actions”). On March 18, 2024, the court entered a stipulated order whereby the defendants agreed to accept service and stay the derivative action through the close of discovery in the securities class action lawsuit.

On July 1, 2024, another shareholder filed a substantially similar derivative lawsuit in the Court of Chancery for the State of Delaware (the “Delaware Chancery Court”) against certain of the Company’s current and former executive officers and directors, captioned Grimaldi v. McKinnon, et al., C.A. No. 2024-0685-PAF (the “Grimaldi Action”). On July 19, 2024, the Delaware Chancery Court entered a stipulated order whereby the defendants agreed to accept service and to stay the derivative action through final approval of the settlement in the securities class action lawsuit.

On October 18, 2024, another shareholder filed a substantially similar derivative lawsuit in the Delaware Chancery Court against certain of the Company’s current and former executive officers and directors, captioned Duprat v. McKinnon, et al., C.A. No. 2024-1072-PAF (the “Duprat Action”). On November 8, 2024, the Delaware Chancery Court entered a stipulated order where the defendants agreed to accept service in the Duprat Action; the Grimaldi Action and the Duprat Action were consolidated (the “Delaware Chancery Actions”); and the Delaware Chancery Actions were stayed pursuant to the terms previously entered in the Grimaldi Action.

On January 10, 2025, the Company and defendants agreed in principle to the non-monetary terms of a global resolution of the California Federal Derivative Actions, the Delaware Federal Derivative Actions and the Delaware Chancery Actions (collectively, the “Derivative Actions”), and executed a Memorandum of Understanding in connection therewith containing the agreed-upon material, non-monetary terms of the proposed settlement. The parties in the Derivative Actions subsequently agreed that the Company would not oppose a fee award to plaintiffs’ counsel of $2.25 million, which the Company, as part of the final settlement documentation, will agree to cause its D&O insurers to pay. The parties in the Derivative Actions executed a Stipulation of Settlement on June 26, 2025, and the plaintiffs in the consolidated California Federal Derivative Actions filed a motion for preliminary approval of the proposed settlement on July 1, 2025. On August 18, 2025, the court in the consolidated California Federal Derivative Actions granted preliminary approval of the proposed settlement. On October 22, 2025, the court in the consolidated California Federal Derivative Actions granted final approval of the settlement and entered a judgment dismissing the consolidated California Federal Derivative Actions with prejudice. On November 24, 2025, the court in the Delaware Federal Derivative Actions entered orders dismissing those actions with prejudice pursuant to the terms of the settlement. On November 24, 2025, the plaintiffs in the Delaware Chancery Actions filed a notice of voluntary dismissal, requesting that the action be dismissed with prejudice pursuant to the terms of the settlement.

Warranties and Indemnification

To date, the Company has not incurred significant costs and has not accrued any material liabilities in the accompanying condensed consolidated financial statements as a result of its warranty and indemnification obligations.

8. Employee Incentive Plans

The Company’s equity incentive plans provide for granting stock options, restricted stock units (“RSUs”), restricted stock awards (“RSAs”) to employees, consultants, officers and directors and RSUs with market-based vesting conditions to certain executives. In addition, the Company offers an Employee Stock Purchase Plan (“ESPP”) to eligible employees.

Stock-based compensation expense was recorded in the following cost and expense categories in the Company’s condensed consolidated statements of operations:

The following table presents total unrecognized stock-based compensation expense related to outstanding equity awards as of October 31, 2025:

Market-based Restricted Stock Units

In March 2025, the Company granted market-based RSUs to certain members of management. The target number of market-based RSUs granted was 322,599. One-third of these market-based RSUs vest over each of a one-, two- andthree-year performance period, each starting on February 1, 2025. The number of shares that can be earned ranges from 0% to 200% of the target number of shares based on the relative performance of the per share price of the Company’s common stock as compared to the Nasdaq Composite Index over the respective performance periods and subject to continuous employment through the vesting dates. The $196.20 average grant date fair value per target market-based RSU was determined using a Monte Carlo simulation approach. Compensation expense for awards with market conditions is recognized over the service period using the accelerated attribution method and is not reversed if the market condition is not met.

9. Income Taxes

For the three and nine months ended October 31, 2025, the Company recorded a provision for income taxes of $7 million and $13 million on pretax income of $50 million and $185 million, respectively. The effective tax rate for the three and nine months ended October 31, 2025 was approximately 14.0% and 7.1%, respectively. The effective tax rate differs from the statutory rate primarily as a result of a full valuation allowance against the U.S. deferred tax assets, the favorable tax impact of the “One Big Beautiful Bill Act” (the “Act”), the tax effect of foreign operations, and U.S. federal and state taxes.

The Act was enacted on July 4, 2025. The Act, among other provisions, maintains the U.S. federal 21% corporate tax rate, makes permanent the immediate expensing of domestic research and development expenditures, allows for 100% bonus depreciation for qualified assets, and modifies the U.S. taxation of profits derived from foreign operations. The provisions of the Act have staggered effective dates beginning in 2025 and continuing through 2027. The Company revised its estimated annual effective tax rate upon enactment of the changes in the Act.

For the three and nine months ended October 31, 2024, the Company recorded a provision for income taxes of $9 million and $10 million on a pretax income of $25 million and $15 million, respectively. The effective tax rate for the three and nine months ended October 31, 2024 was approximately 40.4% and 69.6%, respectively. The effective tax rate differs from the statutory rate primarily as a result of a full valuation allowance against the U.S. deferred tax assets, the tax effect of foreign operations, the tax impacts of the Spera Cybersecurity, Inc. and its subsidiary (collectively, “Spera”) integration, and U.S. federal and state taxes.

10. Net Income (Loss) Per Share

The following tables present the calculation of basic and diluted net income (loss) per share. Net income (loss) is reported in millions and rounded from amounts in thousands; as a result, net income (loss) per share may not recalculate exactly due to rounding.

Potentially dilutive securities excluded because they would be anti-dilutive were as follows:

The Company entered into capped call transactions in connection with the issuance of the convertible senior notes. The effect of the capped calls was also excluded from the calculation of diluted net income per share as the effect of the capped calls would have been anti-dilutive.

11. Business Combinations

On September 4, 2025, the Company acquired all of the outstanding equity of Axiom Security Ltd (“Axiom”), a privately held company specializing in privileged access management solutions. The acquisition of Axiom is expected to broaden the Company's privileged access management capabilities. The acquisition date fair value of purchase consideration of $54 million was paid in cash. The Axiom acquisition was accounted for as a business combination.

The Company preliminarily recorded $16 million for developed technology intangible assets with an estimated useful life of 3 years and preliminarily recorded $40 million of goodwill which is primarily attributed to the assembled workforce as well as the integration of Axiom’s technology and the Company’s technology. None of the goodwill is expected to be deductible for U.S. federal income tax purposes. The Company may continue to adjust the preliminary purchase price allocation after obtaining more information regarding asset valuations, liabilities assumed and revisions of preliminary estimates through the measurement period.

This acquisition did not have a material impact on the Company’s condensed consolidated financial statements; therefore, historical and pro forma disclosures have not been presented.