Okta Inc.

Nearly all revenue comes from subscription fees billed in advance, under contracts that typically run more than a year and cannot be cancelled or refunded once signed, with a much smaller amount from one-time services. Because payment is collected ahead of delivery and locked in for the length of the contract, a large part of any period's revenue is already committed before that period begins. Collecting revenue this way has not always meant a bottom-line profit, though: net income was negative in parts of the multi-year period covered by the financial statements on file.

CompanyGraph classifies this business as an uncommon shape, a connecting layer funded by locked-in recurring contracts, placing it alongside a small number of other companies rather than within a common template many companies share. Its recent multi-year pattern shows free cash flow staying positive alongside revenue growth and a cash margin that sits high relative to its industry, which CompanyGraph reads as consistent with a system able to add customers without adding cost in the same proportion, though this describes a recent multi-year window rather than the company's full history.

It runs its service on cloud infrastructure it does not own, naming a major outside provider by name alongside other third-party cloud and internet-service providers, and it also relies on third-party software, open-source components, outside developers and distribution partners, plus a workforce of specialized technical staff. Separately, CompanyGraph's mapping of the industries that supply this one shows it draws inputs from a wide base of other industries rather than a narrow one.

Its customers range from small organizations to the largest enterprises, as well as universities, nonprofit groups and government bodies, so no single type of customer defines who depends on it, and it is bought by both security teams and software developers within those organizations. It also reaches users indirectly through resellers, integrators and marketplace partners rather than only by selling directly. CompanyGraph's mapping shows it supplies into fewer downstream industries than the number it draws inputs from, so what it depends on is structurally broader than what depends on it.

CompanyGraph's classification places this company in an uncommon position: a small number of other companies, including Clear Secure Inc. and PEXA Group Limited, are classified the same way, a connecting business built on locked-in recurring revenue, rather than this being a common template many companies share. This describes how rare the classification is, not whether competitors are able to build something similar.

Customers sign subscription contracts that typically run more than a year and cannot be cancelled or refunded once in place, so a large share of future revenue is already contracted rather than dependent on a fresh sale each period. Because the product sits in the middle of how an organization's own staff, partners and applications get access to systems, CompanyGraph reads replacing it as likely to require reconnecting each of those individual integrations, though this specific mechanism is an inference rather than something the company measures and discloses directly.

CompanyGraph generally expects this kind of subscription business to be limited less by finding new customers than by keeping and expanding the ones already signed, since revenue is earned back over the life of a contract rather than at the point of sale. The company's own filings name dependence on customer renewals and expansion, and on retaining skilled staff, as risks to the business, which points in the same direction, though the filings do not spell out the full mechanism, such as how many customers actually renew or expand over time.

Its own filings name a specific outside cloud provider it hosts its platform on, alongside other third-party providers, so a disruption at that one named provider is a disclosed risk rather than something spread evenly across many providers. Voting control is also concentrated in a small group: the company's dual-class share structure gives one class of stock substantially more voting power per share than the other, the co-founder and chief executive holds the large majority of that higher-voting class, and directors and current executives together hold a substantial share of total voting power. Separately, CompanyGraph's own reading of the balance sheet finds that its equity position, while large relative to its industry, sits substantially on the book value created by a past acquisition rather than on earnings kept in the business, built up in part by issuing more shares rather than by taking on debt.

Revenue is earned mostly in one currency while a share of operating costs sit in several other currencies, and the company has not been using currency hedges, so exchange-rate movements can affect costs without an offsetting mechanism in place. Demand is also tied to how much its own customers choose to spend on workforce and customer identity, so a pullback in customers' security or IT budgets can reduce demand for it directly. It names one large competitor specifically and competes more broadly against other identity and access-management providers, cloud infrastructure providers, open-source alternatives and software that customers build for themselves.