The identity and access management standard — reliable product, eventful security history
TL;DR: Okta carries a Risk Score of 98/100 (Severe) based on 4 documented complaints from BBB filings, lawsuits, Trustpilot, and Reddit — the public record reflects a serious pattern of issues you should know about before buying.
Okta is the leading identity and access management platform, providing SSO, multi-factor authentication, and lifecycle management for workforce and customer identity. Pricing starts at $2/user/month (Workforce Identity) and scales to enterprise tiers. Used by over 18,000 organizations globally.
Okta is the dominant IAM platform for a reason — SSO, MFA, and user lifecycle management are well-implemented, the integration catalog is broad, and enterprise deployment is mature. For companies standardizing on workforce identity, Okta is the clear market leader.
The product's security history requires honest acknowledgment. Okta suffered significant breaches in 2022 (Lapsus$ compromise via support vendor Sitel) and 2023 (HAR file credential exposure compromising the support system). The 2023 breach affected multiple downstream Okta customers including 1Password, BeyondTrust, and Cloudflare. An IAM platform being breached is a categorically more severe failure than a billing error.
Each complaint type is weighted differently in the Risk Score. Billing and marketing deception weigh heaviest.
Complaints are sourced from public platforms spanning US, UK, and global consumers. Each report links back to its original source.
| Platform | Reports | Who's reporting |
|---|---|---|
| TechCrunch | 2 | Various regions |
| 1 | US & global users | |
| KrebsOnSecurity | 1 | Various regions |
Documented pricing complaints, billing issues, and support failures — newest first.
Our AI scanner searches Reddit, Trustpilot, BBB, and news sources for fresh complaints from the past year, paraphrases what it finds, and adds anything new to this page. Takes up to 90 seconds.
In October 2023, Okta disclosed a breach of its support case management system. Threat actors accessed customer support tickets containing HAR files with session tokens. Affected customers included 1Password, BeyondTrust, and Cloudflare. Okta initially minimized the scope; later disclosures revealed all support system customers were affected.
In March 2022, Okta disclosed that the Lapsus$ threat actor group had accessed its internal systems via compromised credentials at support subprocessor Sitel. Okta's initial disclosure was criticized as slow and understated.
Companies migrating from legacy identity to Okta Customer Identity Cloud (formerly Auth0) describe sticker shock at scale — MAU-based pricing for consumer applications can run $23,000+/month for high-traffic consumer apps.
Both the 2022 and 2023 incidents generated substantial criticism of Okta's breach communication — slow initial disclosure and minimizing statements that later required correction.
We've documented 1 billing complaint against Okta — a signal worth weighing before committing to a paid plan. Its Risk Score of 98/100 puts it in the "Severe" band. See the full complaints breakdown → before deciding.
Cancellation difficulty is one of the top SaaS frustration patterns. Check the complaints page → — we tag cancel-related issues under "Billing" and "Contract Trap" categories. If none are documented yet, run a scan to surface what's currently out there.
Hidden-fee complaints fall under our "Billing Issue" category. We've documented 1 billing complaint for Okta so far. See all complaints → for the full picture.
We track other security & compliance automation tools and rank them by Risk Score. See our alternatives comparison → to find lower-risk options in the same category.
The highest-severity documented complaints involve lawsuits & legal action. Read all 4 documented complaints on the complaints page →
Probably not in the strict legal sense — most SaaS products with bad reputations are real companies delivering a real (if disappointing) product. But "is it a scam" is the question people ask when they feel they were misled. Read our full scam analysis →
We weight each warning by severity (Low to Critical) and category, then aggregate. Lawsuits and misleading-marketing claims weigh heaviest. The current 98/100 score puts Okta in the "Severe" band. Full methodology →
Each warning is paraphrased from a public source — BBB filings, Trustpilot or G2 reviews, Reddit threads, Capterra ratings, court records, or news articles. The source URL is attached to every warning so you can verify it yourself. More on our methodology →
Sibling products in the same category, ranked by Risk Score (lowest first).
Enterprise password management — widely respected, with a pricing model that reflects it
Modern authentication platform for developers, with per-MAU pricing that scales with growth
Vanta's primary competitor in automated compliance — strong product, similar pricing concerns
Automated SOC 2 compliance — useful, but the audit still costs what it costs
Okta-owned identity platform whose per-MAU pricing scales sharply after acquisition
Market-leading endpoint security — famous for effectiveness and a 2024 global outage