Offroad Emerges From Stealth With $7 Million to Tackle Enterprise Identity Risk

Criminals no longer knock at the door; they abuse the keys that companies can no longer control. Offroad seeks to provide that control. New York- and Tel Aviv-based Offroad emerged from stealth with seed funding of $7 million, led by Ibex Investors and Skywell Capital. Offroad helps organizations move from identity visibility to identity resolution – it claims to investigate, govern, remediate, and verify identity risks. The firm uses agentic AI to find and investigate the issues. It gathers context from fragmented systems. and then fixes them autonomously, either by reporting details to a human in the loop, or by autonomous action wherever safe. It was co-founded in May 2025 by CEO Dan Bendler and CTO Philip Shteyn (formerly a Captain at Unit 8200, Israeli Military Intelligence).  “Enterprises now operate across a constantly changing mix of human users, machine identities, and AI agents,” explains Bendler. “The context needed to understand and resolve identity risk is spread across dozens of systems and workflows, while security teams are still expected to investigate and remediate issues manually. That model is becoming increasingly difficult to sustain.” Shteyn adds, “Most identity systems were designed around assumptions that no longer hold. AI agents operate across systems at all hours and at a scale humans never could, which makes traditional behavioral baselines far less reliable. Security teams need systems capable of continuously investigating and reasoning through identity activity, not simply generating more findings.” The identity problem will worsen. The number of identities, systems, workflows, and autonomous agents inside organizations will continue to grow. Illustrating the current problem, Offroad has produced and published (available from its site) a detailed audit report of 2,890 public OAuth applications on Google Workspace Marketplace and GitHub Marketplace.  The audit finds that 918 apps (32%) carry at least one structural exposure signal: from scopes wider than the app’s stated function, AI with write access, threat-intel flags, dead publisher websites, buyable or pending publisher domains, and brand-leading app names published by third parties. In tandem with this report, Offroad has also launched ohauth.ai, described as “A community catalog of OAuth apps with over-privileged scopes, dead publisher domains, and silent permission drift.” The company warns that some identity risks emerge in realtime, when identities misbehave. Others build quietly over time through privileges that outlive their purpose, access that’s kept after roles change, third-party apps with permissions nobody can justify, machines with too much power, and AI agents working across systems.  Offroad’s solution to this identity problem is to use its own autonomous agents to find the issue, gather the context necessary to understand the problem, and then fix it. Related: The Credential Crisis: How Stolen Credentials Defeat Modern Security Related: 1Password Teams With OpenAI to Stop AI Coding Agents From Leaking Credentials Related: The Blast Radius Problem: Stolen Credentials Are Weaponizing Agentic AI WRITTEN BY Kevin Townsend Kevin Townsend is a Senior Contributor at SecurityWeek. He has been writing about high tech issues since before the birth of Microsoft. For the last 15 years he has specialized in information security; and has had many thousands of articles published in dozens of different magazines – from The Times and the Financial Times to current and long-gone computer magazines. More from Kevin Townsend Security of 100 AI Agents Tested and Ranked – What You Need to Know Two New Reports Offer Competing Explanations for Cybersecurity’s Growing Crisis Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk Russia-Linked ‘GreyVibe’ Attackers Use AI to Supercharge Cyberattacks New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails The Credential Crisis: How Stolen Credentials Defeat Modern Security ‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems AppOmni’s Marlin AI Brings Autonomous Investigation to SaaS Security Latest News Webinar Today: Third-Party Risk in Practice – Where Programs Break Down and How to Respond Willow Raises $7 Million for Securing Autonomous AI Agents Gemini Voice Assistant Hijacked via Messaging Notifications Mirasvit Vulnerability Exploited to Execute Code on Magento Servers Chinese Cybercrime Group in Spotlight for Record Campaign Pace Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown Cisco Warns of Available PoC for Critical Unified CM Vulnerability VS Code Vulnerability Allows One-Click GitHub Token Theft Trending Webinar: Third-Party Risk In Practice June 4, 2026 Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice. Register Virtual Roundtable: CISO Forum 2026 Mid-Year Review June 10, 2026 Explore how attackers are using AI to scale threats and how security teams can respond with AI-driven defenses. Protecting against unmonitored use of generative AI (Shadow AI) in business units and building and enforcing AI governance frameworks. Register People on the Move Cyera has appointed Naveen Palavalli as Chief Marketing Officer. Connie Devine has been promoted to Chief Information Security Officer at Phillips 66. Jeff Lunglhofer becomes Chief Security Officer at Coinbase, replacing Philip Martin. More People On The Move Expert Insights The Zero-Knowledge Threat Actor And The End Of Responsible Disclosure AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code. (Etay Maor) Raising The Cybersecurity Stakes: Ante Up For The Agentic Era CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale. (Nadir Izrael) Caught Off Guard: Securing AI After It Hits Production As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode. (Joshua Goldfarb) Cyber Resilience Is The New Business Continuity Plan The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose. (Steve Durbin) Enhancing Data Center Security Without Sacrificing Performance For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum game. (Nadir Izrael) Flipboard Reddit Whatsapp Email