Insider Brief
- Offroad has emerged from stealth with $7 million in seed funding led by Ibex Investors and Skywell Capital Partners, building an agentic identity security platform designed to autonomously investigate and resolve identity risks across human users, machine identities, and AI agents — rather than generating more alerts for already stretched security teams.
- The company audited 2,890 public OAuth applications listed in the Google Workspace and GitHub marketplaces as of May 2026, finding that roughly one in three apps, representing more than 1.85 billion installs, showed serious structural security concerns that a careful analyst would likely reject during manual review, alongside which Offroad is launching ohauth.ai, a free OAuth security catalogue.
- Founded in 2025 by CEO Dan Bendler, a serial AI founder, and CTO Philip Shteyn, a former Unit 8200 captain who helped build Palo Alto Networks’ Cortex platform, Offroad argues that traditional identity security models built around manual investigation are becoming unsustainable as AI agents operate across enterprise systems at machine speed and scale.
PRESS RELEASE — Identity security has moved beyond the simple question of who has access. It is now a continuous operational challenge: why access exists, whether it is still justified, how it is being used, who owns the decision, and what could break if that access changes.
The context needed to answer those questions is scattered across identity providers, HR systems, SaaS apps, cloud platforms, security tools, tickets, logs, business owners, and more. Enterprises were already struggling to manage identity risk for human users across fragmented systems. AI agents and other non-human identities are now pushing that problem beyond what security teams can manually investigate and remediate.
To help enterprises close that gap, Offroad has emerged from stealth with $7 million in seed funding led by Ibex Investors and Skywell Capital Partners.
Offroad is building an agentic identity security team for modern enterprises. Instead of giving organizations another dashboard or list of alerts, Offroad’s agents gather context across fragmented systems, uncover both real-time identity threats and underlying posture risks, and autonomously resolve them — either by taking direct action where it is safe, or by involving the right people with the context needed to decide.
OAuth applications are just one example of how identity risk is becoming harder to govern. These apps often receive broad, persistent access to business-critical systems such as Google Workspace or GitHub, sometimes including files, email, code, calendars, and other sensitive business data. Yet security teams may lack the context to understand whether that access is justified, who owns it, what the app actually does, or what risk it creates.
To better understand the scale of that problem, Offroad audited 2,890 public OAuth applications listed in the Google Workspace Marketplace and GitHub Marketplace as of May 2026. The company found that roughly one in three apps, representing more than 1.85 billion installs, showed serious structural security concerns that a careful security analyst would likely reject during manual review.
Alongside the research, Offroad is launching ohauth.ai, a free OAuth security catalog that helps teams review app permissions, security concerns, and governance risks.
“Identity is no longer just a workforce access problem,” said Offroad co-founder and CEO Dan Bendler. “Enterprises now operate across a constantly changing mix of human users, machine identities, and AI agents. The context needed to understand and resolve identity risk is spread across dozens of systems and workflows, while security teams are still expected to investigate and remediate issues manually. That model is becoming increasingly difficult to sustain.”
Offroad was founded in 2025 by CEO Dan Bendler, who previously founded two AI startups that collectively raised more than $45 million, and CTO Philip Shteyn, a former Unit 8200 Captain who also helped build Palo Alto Networks’ Cortex platform.
“Most identity systems were designed around assumptions that no longer hold,” said Shteyn. “AI agents operate across systems at all hours and at a scale humans never could, which makes traditional behavioral baselines far less reliable. Security teams need systems capable of continuously investigating and reasoning through identity activity, not simply generating more findings.”
“What sets Offroad apart is how its agents actually work alongside the team,” said Sean Mullins, Vice President, Enterprise Infrastructure & CISO. “Rather than adding more alerts to an already noisy environment, they gather context, work through the risk, and hand off something actionable. For teams stretched thin on identity security, that’s a meaningful shift.”
“Companies now run on significantly more autonomous identities with broader permissions than the people who deployed them, operating at machine speed through authorization flows that were never designed for autonomous access,” said Adi Dangot Zukovsky, Partner at Ibex Investors. “The market is flooded with tools that find identity risk. Security teams do not need another tool that provides findings. They need operational leverage, not more interfaces. Offroad is betting on closing this loop autonomously from finding to full resolution.”
To learn more about Offroad’s AI identity security platform and latest research findings, visit www.offroad.ai
About Offroad.AI
Offroad.AI is building an AI identity security team for the modern enterprise. The company helps organizations move from identity visibility to identity resolution by investigating, governing, remediating, and verifying identity risks across human users, machine identities, OAuth applications, service accounts, and AI agents. Founded in 2025, Offroad operates from New York and Tel Aviv.
Contacts
Deb Montner and Hannah Sather
dmontner@montner.com
hsather@montner.com
Montner Tech PR
Featured image: Credit: Offroad
