Offroad Raises $7M to Deploy AI Agents That Automate Identity Security for Enterprises

Offroad Secures $7M to Build AI Identity Security Platform

Offroad emerged from stealth today with $7 million in seed funding led by Ibex Investors and Skywell Capital Partners, introducing an AI-powered identity security platform designed to address a problem that has grown beyond what manual security efforts can handle 1

1

2

2

. Founded in September 2025 by CEO Dan Bendler and CTO Philip Shteyn, the New York and Tel Aviv-based startup is building what it calls an agentic identity security team that uses AI agents to autonomously investigate and remediate identity risks across human users, non-human identities, and autonomous AI identities 1

1

.

The company addresses a fundamental shift in how identity security operates. Rather than simply determining who has access, enterprises now face continuous operational challenges around why access exists, whether it remains justified, how it's being used, and what could break if that access changes [1](https://venturebeat.com/business/offroad-em erges-from-stealth-with-7m-to-build-the-ai-identity-security-team). The context needed to answer these questions is scattered across identity providers, HR systems, SaaS apps, cloud platforms, security tools, tickets, logs, and business owners, creating a fragmented landscape that security teams struggle to navigate manually 1

1

.

How Offroad's AI Agents Automate Identity Security

Instead of adding another dashboard or alert system to security teams' already noisy environments, Offroad's AI agents gather context across fragmented systems, uncover both real-time identity threats and underlying posture risks, and resolve them autonomously 1

1

. The agents take direct action where it's safe to do so, or involve the right people with the context needed to make informed decisions about high-impact changes 2

2

. This approach provides operational leverage rather than simply generating more findings for overwhelmed security teams to manually investigate 1

1

.

"What sets Offroad apart is how its agents actually work alongside the team," said Sean Mullins, Vice President of Enterprise Infrastructure & CISO. "Rather than adding more alerts to an already noisy environment, they gather context, work through the risk, and hand off something actionable. For teams stretched thin on identity security, that's a meaningful shift" 1

1

.

OAuth Application Security Research Reveals Widespread Risk

To demonstrate the scale of the identity security problem, Offroad audited 2,890 public OAuth applications listed in the Google Workspace Marketplace and GitHub Marketplace as of May 2026 1

1

. The company found that roughly one in three apps, representing more than 1.85 billion installs, showed serious structural security concerns that a careful security analyst would likely reject during manual review 1

1

2

2

.

OAuth applications often receive broad, persistent access to business-critical systems such as Google Workspace or GitHub, sometimes including files, email, code, calendars, and other sensitive business data 1

1

. Yet security teams frequently lack the context to understand whether that access is justified, who owns it, what the app actually does, or what access risks it creates 1

1

. Alongside the launch, Offroad released ohauth.ai, a free OAuth security catalog that helps teams review app permissions, security concerns, and governance risks 1

1

2

2

.

Why Machine Identities Demand a New Approach

The rise of machine identities and AI agents has fundamentally changed the identity security landscape. These autonomous identities now operate at machine speed across many systems simultaneously, breaking the behavioral baselines that traditional runtime detection tools were built on 2

2

. Service accounts, API keys, and machine identities often carry broad, persistent access with weak ownership and long lifecycles that most organizations lack the processes to govern 2

2

.

"Most identity systems were designed around assumptions that no longer hold," said Shteyn, a former Unit 8200 Captain who helped build Palo Alto Networks' Cortex platform. "AI agents operate across systems at all hours and at a scale humans never could, which makes traditional behavioral baselines far less reliable. Security teams need systems capable of continuously investigating and reasoning through identity activity, not simply generating more findings" 1

1

.

Adi Dangot Zukovsky, Partner at Ibex Investors, framed the investment as closing the loop between detection and remediation. "Companies now run on significantly more autonomous identities with broader permissions than the people who deployed them, operating at machine speed through authorization flows that were never designed for autonomous access. The market is flooded with tools that find identity risk. Security teams do not need another tool that provides findings. They need operational leverage, not more interfaces" 1

1

2

2

.

Offroad plans to use the seed funding for hiring, product development, and expanding its U.S. footprint 2

2

. Bendler previously founded two AI startups that collectively raised more than $45 million 1

1

2

2

.