Offroad has emerged from stealth with USD $7 million in seed funding led by Ibex Investors and Skywell Capital Partners.
The New York- and Tel Aviv-based company is building an AI-led identity security operation for enterprises that need to investigate and remediate risks tied to human users, machine identities, and AI agents. Its approach aims to reduce the manual work required from security teams as identity data spreads across multiple systems.
Identity security has expanded beyond controlling access to understanding why access exists, whether it remains justified, and how it is being used. Those answers often sit across identity providers, HR systems, software applications, cloud platforms, security tools, ticketing systems, and logs, making investigations slow and fragmented.
Offroad argues that the rise of non-human identities has made the problem harder. OAuth applications, service accounts, and AI agents can hold broad, persistent access to sensitive business systems, while security teams may struggle to determine who owns that access, whether it is necessary, and what risks it creates.
Its software uses AI agents to collect context from those systems, identify immediate threats and broader posture issues, and either take direct action where appropriate or route decisions to the relevant people with supporting evidence.
OAuth findings
Alongside the launch, Offroad published research into public OAuth applications listed in the Google Workspace Marketplace and GitHub Marketplace. It audited 2,890 applications and found that about one in three showed structural security concerns that a careful security analyst would likely reject in a manual review.
According to Offroad, those applications accounted for more than 1.85 billion installs. The company has also launched a free OAuth security catalogue, ohauth.ai, to help teams assess app permissions, security concerns, and governance risks.
The business was founded in 2025 by Chief Executive Officer Dan Bendler and Chief Technology Officer Philip Shteyn. Bendler previously founded two AI start-ups that together raised more than USD $45 million, while Shteyn is a former Unit 8200 captain who also helped build Palo Alto Networks' Cortex platform.
Bendler set out the company's view of the market shift. "Identity is no longer just a workforce access problem," said Dan Bendler, Chief Executive Officer of Offroad.
"Enterprises now operate across a constantly changing mix of human users, machine identities, and AI agents. The context needed to understand and resolve identity risk is spread across dozens of systems and workflows, while security teams are still expected to investigate and remediate issues manually. That model is becoming increasingly difficult to sustain."
Shteyn said older identity systems were not built for this environment.
"Most identity systems were designed around assumptions that no longer hold," said Philip Shteyn, Chief Technology Officer of Offroad.
"AI agents operate across systems at all hours and at a scale humans never could, which makes traditional behavioral baselines far less reliable. Security teams need systems capable of continuously investigating and reasoning through identity activity, not simply generating more findings."
The funding gives Offroad backing from investors who see identity as an operational security issue, not just a visibility problem. That distinction matters in a market already crowded with tools that identify risks but still leave security teams to work through alerts manually.
Sean Mullins, Vice President of Enterprise Infrastructure & CISO at Cass Information Systems, described that pressure on internal teams.
"What sets Offroad apart is how its agents actually work alongside the team," Mullins said.
"Rather than adding more alerts to an already noisy environment, they gather context, work through the risk, and hand off something actionable. For teams stretched thin on identity security, that's a meaningful shift."
Adi Dangot Zukovsky, Partner at Ibex Investors, framed the challenge in terms of the growth of autonomous identities inside companies.
"Companies now run on significantly more autonomous identities with broader permissions than the people who deployed them, operating at machine speed through authorization flows that were never designed for autonomous access," Zukovsky said.
"The market is flooded with tools that find identity risk. Security teams do not need another tool that provides findings. They need operational leverage, not more interfaces. Offroad is betting on closing this loop autonomously from finding to full resolution."