Identity access management company Okta Inc. today announced several new innovations designed to help organizations reduce their identity attack surface and stay ahead of threats.

The new innovations seek to address the issue wherein identity has become a major attack vector in today’s landscape, with more than 80% of data breaches involving some kind of compromised identity, ranging from legacy password compromises, account takeovers, credential phishing and stolen application programming interface keys.

Leading the list is Okta’s new Identity Security Posture Management product, which proactively identifies vulnerabilities and identity security gaps. Available from today in North America for Okta Workforce Identity Cloud customers, the new product helps companies continuously assess their identity risk posture and uncover critical misconfigurations and gaps, allowing them to prioritize and remediate the most pressing issues based on risk severity.

Identity Security Posture Management enhances visibility into identity postures across various platforms, including Okta, Amazon Web Services Inc., Azure Active Directory and popular cloud and software-as-a-service environments, including Salesforce Inc., Microsoft Corp.’s Office 365 and GitHub.

The new solution provides identity-focused risk analysis by leveraging a company’s identity data and threat intelligence sources to create a comprehensive inventory of identities, permissions, actions and risks. The service offers a global view of identity security postures and aligns with industry standards, including the National Institute of Standards and Technology, the Sarbanes-Oxley Act and the International Organization for Standardization 27001.

Results from Identity Security Posture Management are prioritized and offer highly granular and contextualized insights and remediations that are said to be essential for preventing identity-driven threats and attacks. The service provides continuous and ongoing analysis of identity security exposure, along with audit and compliance reporting on identity security risks and threats.

Also new today is Highly Regulated Identity, a new solution in Okta’s Customer Identity Cloud that delivers “Financial Grade Identity” with additional security, privacy and user experience controls for sensitive customer interactions past the login point.

Highly Regulated Identity allows financial services companies to increase security and prevent fraud by using Strong Customer Authentication, which prompts customers to verify their identity in real time for sensitive transactions. The service also delivers intuitive user experiences through integration with risk engines, ensuring approval requests are sent only when necessary.

Other announcements by Okta today include Identity Threat Protection, with Okta AI now being available in early access for Workforce Identity Cloud customers globally. Leveraging Okta AI and insights from an organization’s security stack, the tool detects and responds to identity threats in real time, both during and post-authentication.

The new innovations are part of what the company calls the Okta Security Identity Commitment, a long-term plan to lead the industry in the fight against identity attacks.

The Okta Secure Identity Commitment is a long-term initiative aimed at leading the industry in the fight against identity-based attacks by investing in security products and services, such as 24/7 support and high operational uptime. The commitment also involves hardening Okta’s corporate infrastructure, championing customer best practices and raising industry standards through advanced technologies and comprehensive security strategies.

Photo: Okta