The AI-Native Identity Operating System
Oak came out of stealth in 2026 with a $60M seed round co-led by Accel, Greylock Partners, and CRV, with participation from Hetz Ventures, AlphaDrive Ventures, and angel investors. Shai Morag and Tal Marom founded the company in late 2025, and it operates from Tel Aviv and San Francisco. Oak is Morag's fourth security company, after Integrity-Project (acquired by Mellanox, now part of NVIDIA), Secdo (acquired by Palo Alto Networks), and Ermetic (acquired by Tenable).
Identity governance and identity security grew up as separate categories with separate data models, both designed for human users. Coverage for machine identities, cloud entitlements, and AI agents was added later rather than built in. The result is fragmented visibility, slow deployments, and findings that someone still has to act on by hand.
Oak is one autonomous platform built from the ground up to see and continuously govern the full lifecycle of every identity: human, machine, and AI agent. Its core is a single live identity graph. The graph is fed by directories, SaaS applications, cloud providers, on-prem systems, and the home-grown applications that traditional IGA tools rarely onboard. Oak also connects directly to an organization's existing IGA platform, pulling in its roles, policies, and certification history rather than starting from scratch.
Because the graph is updated continuously rather than assembled for a quarterly certification campaign, it shows both what access exists and how it is actually used. That context separates real risk from noise, surfacing dormant accounts, standing privilege, entitlements granted outside the provisioning process, unregistered contractors, and over-provisioned agents.
Oak doesn't stop at visibility. An agentic framework is built into the platform, not bolted on. Oak's agents act on findings directly: they run access reviews, remediate excess privilege, and enforce least privilege from the same console. This closes the loop from visibility to context to action.
The platform connects to the tools an organization already runs without the lengthy integration projects typical of legacy IGA, so value arrives quickly. Oak is generally available and deployed at enterprise customers. Organizations can run it alongside their current IGA investment to extend coverage to the identities and applications that investment misses, or consolidate onto Oak over time.