Okta

Security Trust Center

EcoVadis Sustainability Assessment

Engineering Release Management Procedure

ST4S Assessment

PCI DSS Compliance with Okta

application/vnd.ms-excel.sheet.macroenabled.12

application/vnd.openxmlformats-officedocument.spreadsheetml.sheet

Access Control

Requested Information

International Reports

App Security

Application Security

Asset Management

Training

BC/DR

Compliance

Change Management

Continuous Monitoring

Factsheets and Guidance

Customer Data

Data Privacy

Privacy

Data Security

Documents

Endpoint Security

APAC Certifications

Corporate Responsibility

Incident Response

Infrastructure

Corporate Security

Legal

Network Security

Overview

Physical & Environment

Okta Threat Intelligence

Policies

Product Security

Self-Assessments

Reports

Risk Management

Risk Profile

Security Grades

Subprocessors

Trusted By

UN Sustainable Development Goals

Recommendations + Release Notes

Okta and APRA CPS 234: Information Security Resilience

Endpoint Security Standard

Secure Development Lifecycle Standard

Asia Pacific Japan

Supplier Code of Conduct

Federal CRM

Traffic Monitoring

Okta FastPass Assessor's Report

Okta and Auth0: Step-up your Essential 8 Maturity Level 3 with Okta

HECVAT

Anti-Modern Slavery

Encryption-in-transit

VPAT

Detection + Protection Features

Okta and APRA CPS 230: Supporting Operational Resilience

Community Involvement

Shared Responsibility Model with Okta

SDLC

Spoofing Protection

Encryption-at-rest

AI Governance

North America

Fair Labor

Secure Software Development Lifecycle

ISO/IEC 27001:2022 Compliance with Okta

Responsible Disclosure & Bug Bounty

Environmental Stewardship

Pentest Reports

DORA Compliance with Okta

Emissions Management

Allow List Restrictions

Firewall

NIS2 Compliance with the Okta Platform

Health & Safety Standards

IDS/IPS

Developer Training

ISO 27001 / 27017 / 27018

DNSSEC

Code of Conduct

Okta Control Library

Data Classification and Handling Standard

Status Monitoring of SLA

European Union

Data Loss Prevention

SIG Privacy

Network Diagrams

Best Practices 1

IRAP Protected Documentation

Royal Decree 3112022 (ENS)

Diversity, Equity, and Inclusion

Vulnerability Management and Remediation Standard

Certificate of Insurance

Effective Board Oversight

MVSP

Telecommunications (Security) Act 2021 (TSA): How Okta Supports Your Compliance Journey

Right to Pentest

Whistleblowing Program

Third-Party Risk Management Standard

Cyber Security Incident Response Plan

Okta Offensive Security Testing Factsheet

Australia

Sub-processors

Best Practices

Carbon Neutrality

ESG In Business Practice

Encryption Management Standard

CSA STAR Level 2 Certification

Data Retention

Sustainability

Business Continuity and Disaster Recovery

Asset Management Standard

Business Continuity Plan + DR Attestation

Security Information and Event Management

OMB M-21-07: IPv6 Letter of Intent

STIG (Okta Hardening Guides)

Info for Non-Government Agencies

Okta FastPass Assessor’s Report

US Public Sector

US Public Sector Compliance

US Public Sector Overview

Secure Software Development Framework (SSDF) Compliance Letter of Attestation

Auth0 Incident Playbooks

Voice-based Social Engineers Target CRM

ClickFix Campaign Targets Okta Brands, Drops Redline Stealer

Disrupting ShieldGuard

Malvertising, Phishing Attacks Target Payroll Accounts

Instant Messaging Services Abused for Phishing Redirection

Wide-Scale, Opportunistic SMS Pumping Attacks Target Customer Sign-Up Pages

Mapping Com-linked Activity Clusters to Data Leak Sites

Custom Phishing Kit Optimized for Defence Evasion

CheckMate for Auth0

Hospitality Firms Impersonated in Malvertising, Phishing Campaign

IT Support Impersonated in Requests for Password Resets

Device Code Phishing: "Phishing with Dynamite"

Self-Service Recovery Abused Using Vishing

Kratos AitM Phishing Activity Ceases After Disruption

The North Korean on your payroll

Smishing Campaign Targets B2B SaaS Organizations

Analysis: Behind the scenes of a vishing operation

About Okta Security Notifications

Defending against TeamPCP software supply chain attacks

Phishing Campaigns Target Messaging Services

Uncloaking VoidProxy: a Novel and Evasive Phishing-as-a-Service Framework

GenAI Services Power DPRK IT Contracting Schemes

Help Desks Targeted in Social Engineering Campaign Targeting HR Applications

Identity Threat Update - APJ - Q2 2026

Investors, Wealth Management Firms Targeted in Phishing Campaign

Credential Stuffing Actors Abuse Overlooked Paths to Access

The Secrets Agentic AI Leaves Behind

Phishing campaigns use 'Employee Benefits' lure to intercept Microsoft and Okta logins

Okta Security Blog

Auth0 Customer Detection Catalog

Vishing Actors Target Entra Passkey Enrollment

Vishing Operators Synchronize Phishing Sites to their Script for Hybrid Social Engineering Attacks

Human-operated Phishing Kit Targets Cryptocurrency Firms

Okta Customer Detection Catalog

Pension Funds Targeted in Credential Stuffing Attacks

BPO Providers Targeted in Phishing and Malware Campaign

Jobseekers Exploited in Fake Recruiter Phishing Campaigns

EvilProxy Phishing Campaign Leverages Convincing Impersonations Of Enterprise Applications

Security Trust Center

US Public Sector Compliance

.next-public-70qvj9{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;}Documents

Reports

Documents