Oak

Oak: one identity graph for everyone — and everything — with access

Oak (oak.id) is an AI-native "Identity Operating System" that governs every identity in an enterprise — human employees, machine identities, and AI agents — from a single, continuously updated identity graph. Instead of the fragmented legacy stack of identity governance (IGA), periodic access reviews, and per-system connectors, Oak builds its graph from raw evidence across on-prem, SaaS, cloud, and homegrown systems, reached through an AI connector framework the company says can integrate with any application.

Founder pedigree is the headline: CEO Shai Morag is on his third security company, having sold Ermetic to Tenable and Secdo to Palo Alto Networks. With co-founder Tal Marom, Oak emerged from stealth on July 15, 2026 with a $60M seed round — unusually large for a seed — co-led by Accel, Greylock Partners, and CRV, with the product already generally available and deployed at enterprise customers.

Key Features

• Unified live identity graph spanning human, machine, and AI-agent identities
• AI connector framework reaching on-prem, cloud, SaaS, and homegrown applications
• Graph built from raw evidence rather than periodic access-review snapshots
• AI-driven governance replacing rule-based review cycles
• Real-time visibility and control across hybrid identity ecosystems
• White Glove managed-services option; GDPR and CCPA compliance

Ideal Use Case

An enterprise identity team drowning in quarterly access reviews across SailPoint-era tooling while AI agents and service accounts multiply outside the review cycle entirely. Oak's pitch is one control plane where the graph is always current, so governance stops being an annual archaeology project.

How Oak differentiates

Legacy IGA suites (SailPoint, Saviynt, Okta Identity Governance) were built for human identities and retrofitted for everything else; Oak treats machine and AI-agent identities as first-class citizens of the same graph from day one. The evidence-based live graph replaces the periodic-review model rather than accelerating it. Production credibility: a $60M seed co-led by Accel, Greylock, and CRV; a founder with two prior security exits (Tenable, Palo Alto Networks); and GA product with enterprise deployments at launch.

FAQ

What makes Oak different from SailPoint or Saviynt? Oak is built AI-native around a single live identity graph covering humans, machines, and AI agents, instead of retrofitting agent and machine identities onto a human-centric IGA model.

Does Oak handle AI-agent identities specifically? Yes — governing AI-agent identities alongside human and machine identities in one graph is the core product thesis.

Is Oak actually shipping? Yes. The product was generally available and deployed with enterprise customers when the company left stealth in July 2026.

How much does Oak cost? No public pricing; enterprise sales through oak.id, with a White Glove managed-services option.

tl;dr

Oak is the AI-native successor to legacy identity governance: one live graph for human, machine, and AI-agent identities, founded by a two-exit security veteran and launched with a $60M seed from Accel, Greylock, and CRV.

Related

Looking for more options? Browse the Security & Governance directory or read our best AI security tools listicle. Oak is also tracked on Crunchbase.