Cornerstone OnDemand vs Okta

Cybersecurity stock Zscaler's charts turn bullish: Jay Woods

In a CNBC Pro segment, technician Jay Woods discusses Zscaler (ZS), a cybersecurity company that has underperformed its sector peers. While CrowdStrike, Fortinet, Okta, and Palo Alto Networks have gained over 100% year-to-date, Zscaler shares fell as much as 65% from 52-week highs and remain down 13% this year. However, Woods observes a bottoming formation on both daily and weekly charts, with a bullish crossover in MACD and a breakout above $195 resistance. He suggests upside targets of $250-$265, representing 25-30% potential upside, with support at $165. The analysis highlights relative rotation within the cybersecurity sector, indicating that laggards like Zscaler may see renewed strength.

• Zscaler (ZS) shares fell as much as 65% from 52-week highs and remain down 13% year-to-date.
• CrowdStrike, Fortinet, Okta, and Palo Alto Networks have each gained over 100% year-to-date.
• Jay Woods identifies a bullish double bottom formation on Zscaler's weekly chart.

Introducing the Okta Managed MCP Server: Manage your Okta org with natural language

Okta announced the Okta Managed MCP Server, enabling management of Okta orgs via natural language, and Identity Security Posture Management now includes AI agent discovery for all customers.

Descope Unveils Cross-App Access for AI Agent Identity

Descope, a customer and agentic identity platform, announced Cross-App Access (XAA) support in its Agentic Identity Hub. This allows enterprises to govern AI agent access through their existing identity providers (IdPs). The feature supports both validation and issuance of ID-JAG tokens, enabling SSO-like login for AI agents accessing MCP servers. It addresses security issues like static API keys and over-permissioned agents. New capabilities include per-organization scope policies, self-service XAA setup, and standards-based token exchange. The Cross-App Access protocol replaces static API keys with short-lived assertions minted by trusted identity providers. It also builds on OAuth 2.1, DCR, CIMD, and consent management support. According to Gravitee research, only 22% of teams treat agents as independent identities. Descope is among the first to support both token validation and issuance. The company was named a Leader in the 2025 Frost Radar for Non-Human Identity Solutions.

• Descope launched Cross-App Access (XAA) support in its Agentic Identity Hub.
• XAA supports both ID-JAG token validation and issuance for AI agent access.
• The feature replaces static API keys with short-lived assertions from trusted identity providers.