> For the complete documentation index, see [llms.txt](https://docs.nexthink.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.nexthink.com/security/security-bulletins/is-nexthink-affected-by-the-okta-code-repositories_.md).

# Is Nexthink affected by the Okta code repositories?

## Question <a href="#isnexthinkaffectedbytheoktacoderepositories-question" id="isnexthinkaffectedbytheoktacoderepositories-question"></a>

Is Nexthink affected by the recent Okta code repositories event?

## Answer <a href="#isnexthinkaffectedbytheoktacoderepositories-answer" id="isnexthinkaffectedbytheoktacoderepositories-answer"></a>

**No, Nexthink is not impacted.** Nexthink has received formal confirmation from Okta that it is not impacted. While Nexthink relies on Okta for corporate accounts and API management, additional authentication factors are enforced based on third-party technologies, along with posture checks that are required for production environment access.

There is no impact on the Nexthink cloud environments. Nexthink will continue to monitor the situation and provide further updates as they become available.

### **Background**

In early December 2022, GitHub alerted Okta about possible suspicious access to Okta code repositories. Upon investigation, we have concluded that such access was used to copy Okta code repositories.

Our investigation concluded that there was no unauthorized access to the Okta service, and no unauthorized access to customer data. Okta does not rely on the confidentiality of its source code for the security of its services. The Okta service remains fully operational and secure.

As soon as Okta learned of the possible suspicious access, we promptly placed temporary restrictions on access to Okta GitHub repositories and suspended all GitHub integrations with third-party applications.

More information can be found in [this blog post](https://sec.okta.com/articles/2022/12/okta-code-repositories?_ga=2.243685125.165294796.1671712259-1514163148.1627482689).

### **How is Nexthink protecting its products against events like this?**

Nexthink applies an in-depth defense strategy, in which multiple controls are thoughtfully layered providing together mitigation against a wide variety of threats. This includes:

* Multifactor authentication
* Host posture checks
* Restricted access to the management plane
* Continuous monitoring of any suspicious activity

**Nexthink has also achieved the ISO 27001, 27017 and 27018 and SOC 2 Type I/II certifications for the Nexthink Experience and Infinity cloud platforms.**


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.nexthink.com/security/security-bulletins/is-nexthink-affected-by-the-okta-code-repositories_.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
