Technology

New Startup Oak Tackles a Growing Security Problem: Tracking What AI Does

Martin HollowayPublished 3w ago3 min readBased on 5 sources
Reading level
New Startup Oak Tackles a Growing Security Problem: Tracking What AI Does

Oak, a new security company, announced itself on July 15, 2026 with $60 million in funding, according to TechCrunch. The company is already in use by large organizations and is available at oak.id.

Oak was founded by Shai Morag, an experienced cybersecurity expert, and Tal Marom, the chief product officer. Both previously worked together at a company called Tenable. The company has built a team of 50 people and is hiring more, especially in the United States.

Think of digital identity management like a bouncer at a nightclub. The bouncer decides who gets in, where they can go, and what they can do inside. For decades, that system worked well because the "people" coming through were actually human employees, and their needs didn't change much. But now, artificial intelligence agents — software programs that act on their own, make decisions, and trigger other actions — are entering the picture. They move much faster and do different things than human workers, and the old bouncer system was not designed to keep up with them.

Oak's solution is like giving the bouncer real-time surveillance cameras. Instead of reviewing access once a quarter, the system watches continuously and immediately removes access rights that are no longer needed. The company claims its technology can do this automatically and in real time, even as AI programs change what they are trying to access throughout the day.

Moreg founded and sold two previous security companies. He sold one company called Secdo to Palo Alto Networks in 2018. He then founded another called Ermetic, which was bought by Tenable for $265 million in 2023. Morag stayed on at Tenable until early 2025, when he left after the company's CEO passed away.

Accel, a major venture capital firm, led this funding round. Accel had backed Morag's previous company, Ermetic, and had promised to fund his next venture when he was ready to start again. That promise became Oak's seed funding.

Companies are increasingly deploying AI agents — autonomous software — to handle work tasks. These agents can access many different internal systems and trigger actions on their own, sometimes within seconds. The problem is that older security systems were built for a much slower world. They might check whether someone has the right access once every three months. But an AI agent might change what it is doing many times within a single day, and those old systems have no way of knowing what the agent actually did. They only know that the agent had permission to do something. This creates a security risk: the AI might have more access than it currently needs.

If Oak's technology works as the company describes, it would solve a real problem that companies face right now. Businesses have had to add expensive extra monitoring to their older security systems just to keep up with AI. But whether Oak can handle the sheer number of different AI programs and systems in the world, all connecting to many different business applications, is still an open question.

Oak raised $60 million before it had a finished product. The fact that the company now has paying customers suggests that investors believed in Morag's track record as much as in the product itself. In the security industry, a founder's previous success counts for a lot. But over the next year, Oak will need to prove it can keep its customers happy and growing, not just rely on Morag's reputation. The real test is whether the company can deliver what it promises and whether customers stick with it.

Oak is not alone in addressing this problem. Larger, established security companies like Okta and Microsoft are also trying to build tools for the AI age. The question now is whether a company built specifically for this moment can move faster than older companies trying to patch their existing products.