Shai Morag Raises $60 Million to Build an Identity System for AI Agents

Serial cybersecurity founder Shai Morag raised $60 million for Oak, an identity security startup that tracks human, machine, and AI agent identities under a single control plane. The seed round was co-led by Accel, Greylock Partners, and CRV, with the product already generally available to enterprise customers. Oak aims to replace manual identity governance with continuous, risk-based access remediation, addressing the blind spot of unmanaged AI agent credentials.

Serial cybersecurity founder Shai Morag just raised $60 million for Oak, a startup betting that AI agents, not hackers, are the biggest blind spot in enterprise identity security. Shai Morag has already sold three cybersecurity companies for a combined sum that tops half a billion dollars. On July 15, he came out of stealth with a fourth. Oak, the identity security startup Morag built with co-founder Tal Marom, is headquartered in both Tel Aviv and San Francisco. It announced a $60 million seed round co-led by Accel, Greylock Partners and CRV, with Hetz Ventures, AlphaDrive Ventures and a group of strategic angels filling out the rest. The product isn't a prototype. It's already generally available. Enterprise customers are running it live, though Oak hasn't named which ones. Morag knows this market cold. This is his fourth cybersecurity company. He sold his first, Integrity-Project, to Mellanox in 2014. He sold his second, Secdo, to Palo Alto Networks in 2018. Then he built Ermetic, a cloud identity security company, and sold it to Tenable in 2023 for $265 million, according to Calcalist. He stayed on as a senior product executive at Tenable before leaving to start Oak with Marom, who'd led product teams at Tenable and Salesforce. Third acts are where founders bet the lesson they learned from the first two. Morag's lesson is that identity, not malware or perimeter defense, is where enterprises are actually exposed, and that the tools built to manage it were never designed to talk to each other. "The tools enterprises rely on today were never designed to work together," he told Calcalist. Oak calls its product an AI native Identity Operating System. The label is marketing. The mechanics under it are specific: a live identity graph, built from raw evidence pulled out of on-prem systems, cloud infrastructure, SaaS tools and homegrown applications, that tracks every identity in an organization, human, machine, or AI agent, under one control plane. The AI agent no one onboards or offboards That last category, the AI agent, is the reason this round closed fast. Plug an agent into your internal systems and it gets credentials and API keys just like a new hire would. Nobody runs onboarding for it. Nobody runs an exit interview when its task is done, either. According to TechCrunch, Oak's team spent months talking to more than 100 CISOs and identity and access management leaders before writing a line of the product. "Right now, the whole process is too manual, and it's operations-based, not risk-based, for instance, there's no trigger when an employee logs in from an unusual location," Morag told TechCrunch. That gap isn't hypothetical. It's the daily condition of most identity governance programs, which still run on quarterly certifications and IT tickets that get closed without anyone confirming the access still makes sense. Oak wants to replace that cycle with continuous remediation. The system watches how access actually gets used and strips permissions the moment they stop mapping to real activity. What the round, and the silence, say The round itself says something about how urgently enterprise security buyers are asking for this. Accel, Greylock and CRV don't co-lead $60 million seed rounds on vision alone. Three firms of that size signing onto one round, with Hetz Ventures and AlphaDrive Ventures on top, is a bet on Morag's read of the market as much as on the product he's already shipped. Oak was founded in December 2025 and built a 50-person team while still in stealth, according to Calcalist, with most of that headcount shifting toward the U.S. going forward. That's not a small operation for a company that just held its first public launch. It suggests customers and technical proof points existed well before this week's announcement. What Oak hasn't disclosed is which enterprises are live on the platform, or how the identity graph holds up once an organization's AI agent count climbs into the thousands. That's the number worth watching. Agentic AI isn't adding a handful of new accounts to the identity sprawl enterprises already struggle to track. It's multiplying it by an order of magnitude nobody has fully priced in yet. Also read: Sequoia Capital Pours $45 Million Into an AI Startup That Calls Its Product an Employee https://startupfortune.com/sequoia-capital-pours-45-million-into-an-ai-startup-that-calls-its-product-an-employee/ • A Former Red Bull F1 Engineer Just Raised Germany's Biggest Seed Round Ever https://startupfortune.com/a-former-red-bull-f1-engineer-just-raised-germanys-biggest-seed-round-ever/ • Scribble Network: The AI Visibility Platform for Brands https://startupfortune.com/scribble-network-wants-to-close-the-gap-between-knowing-and-fixing-ai-visibility/