Oak Raises $60 Million to Replace Fragmented Identity Security Tools With a Single Platform

Key points

• Oak, a cybersecurity startup founded in late 2025, raised $60 million in seed funding co-led by Accel, Greylock Partners, CRV, with Hetz Ventures and AlphaDrive Ventures also investing.
• The company is already selling its product, an Identity Operating System that tracks every human, AI agent and automated account inside an organisation.
• Co-founder Shai Morag previously built and sold three security companies, including Secdo to Palo Alto Networks and Ermetic to Tenable.
• Oak says it spoke with more than 100 chief information security officers and IAM leaders before building the platform.
• The company operates from Tel Aviv and San Francisco.

A startup called Oak came out of hiding this week, announcing $60 million in seed funding, the very first institutional money a young company raises, to build what it calls an Identity Operating System. That's a notable sum for a seed round; we noted something similar in June when Ent raised $100 million at the same stage.

Every organisation runs on accounts: employee logins, software bots and cloud service accounts, and increasingly AI agents, meaning automated software programs that take actions on a company's behalf. Right now most companies manage these across a patchwork of separate tools that rarely talk to each other. A new employee joins, gets access to twelve systems, and when they leave some of those access rights quietly stay open. That gap is how many data breaches start.

Oak's platform connects to every application a company uses, whether stored in the cloud, on the company's own servers, or bought as a subscription service, and builds a live map of who can access what and whether they actually use it. The platform then flags rights that look too broad or too risky.

Why does this matter to ordinary employees?

Unused or forgotten account permissions are one of the most common ways criminals move through a company's systems after an initial break-in. If a single compromised password gives an attacker access to everything instead of one small corner, the damage grows fast. Tools like Oak's are designed to shrink that exposure automatically.

Co-founder and Chief Product Officer Tal Marom said the team spoke with more than 100 CISOs and IAM leaders before writing a line of code. Their consistent complaint: too many disconnected tools, no clear picture of how access is actually used, and no way to govern AI agents acting inside company systems alongside human staff. That last concern isn't new to this beat. Our July piece "IGA Was Built for Employees. Agents Break the Model." laid out exactly why legacy tools can't see the gap.

CEO Shai Morag has sold security companies before, including Ermetic, acquired by Tenable in 2023, and Secdo, acquired by Palo Alto Networks in 2018. He also founded Integrity-Project, acquired by NVIDIA's Mellanox. That track record likely helped attract the investors involved.

The product is already generally available, SecurityWeek reported, which isn't common at seed stage. Most startups raise this kind of money before they've got a finished product.

For security teams it means one dashboard instead of many. For ordinary staff the effect should be invisible: tighter permissions running quietly in the background. If your employer asks you to re-verify your access to certain systems in coming months, this is the kind of platform behind that request. Watch whether the AI agent governance Oak is promising holds up under scrutiny; that's the part nobody's fully solved yet.