Worst-in-class is overstating it, but they've had three serious breaches in the last three years, not counting exposure of their private GitHub repos. The thin

Worst-in-class is overstating it, but they've had three serious breaches in the last three years, not counting exposure of their private GitHub repos. The thing that really bothers me about Okta though is that they've been caught lying when asked if they were affected by CVEs. See this thread from one of the Duo founders responding to folks (including one of the Cloudflare founders) being stonewalled by Okta during the fallout from Log4Shell: https://nitter.net/jonoberheide/status/1506280347306188805 https://nitter.net/jonoberheide/status/1506280347306188805.